Foley v Australian Information Commissioner [2024] FCA 169

Federal Court of Australia

Foley v Australian Information Commissioner [2024] FCA 169 File number: VID 735 of 2023

Judgment of: BEACH J

Date of judgment: 1 March 2024

Catchwords: PRIVACY — breach of privacy — unauthorised access of personal information — inadequate data protection systems — breach of Australian Privacy Principles — ss 13 and 15 of Privacy Act 1988 (Cth) — investigation of representative complaint — earlier representative complaint — construction of ss 36, 38 and 39 of the Act — whether s 39 precludes investigation of subsequent representative complaint — preclusion decision made by the Australian Information Commissioner — whether an error of law — judicial review proceedings — s 5(1) of Administrative Decisions (Judicial Review) Act 1977 (Cth) — ss 39B(1) and (1A) of Judiciary Act 1903 (Cth)

Legislation: Administrative Decisions (Judicial Review) Act 1977 (Cth) s 5(1) Federal Court of Australia Act 1976 (Cth) ss 21, 23, 33C(1), 33J(1), 33ZB Judiciary Act 1903 (Cth) ss 39B(1), 39B(1A)(c) Law and Justice Legislation Amendment Act 1993 (Cth) ss 7(a), 11 Privacy Act 1988 (Cth) ss 2A(a), 6, 13(1), 15, 29, 36, 36A, 37, 38, 38A, 38B, 38C, 39, 40, 41, 43, 43A, 52, 53 Privacy Amendment (Enhancing Privacy Protection) Act 2012 (Cth) ss 2A, 13, 27(1), 29 Australian Law Reform Commission, For Your Information: Australian Privacy Law and Practice (Report No 108, May 2008) Explanatory Memorandum, Privacy Amendment (Enhancing Privacy Protection) Bill 2012 (Cth) Explanatory Memorandum, Law and Justice Legislation Amendment Bill 1993 (Cth)