Civil and Administrative Tribunal New South Wales Medium Neutral Citation: GHZ v Commissioner of Police, New South Wales [2024] NSWCATAD 377 Hearing dates: 20 November 2024 Date of orders: 12 December 2024 Decision date: 12 December 2024 Jurisdiction: Administrative and Equal Opportunity Division Before: EA MacIntyre, Senior Member Decision: (1) Pursuant to s 55(2) of the Privacy and Personal Information Protection Act 1998 (NSW), no further action to be taken in this matter. (2) Pursuant to s 64(1)(a) and (c) of the Civil and Administrative Tribunal Act 2013 (NSW), the disclosure of the name of the Applicant or reference to any information, picture or other material that identifies the Applicant or is likely to lead to the identification of the Applicant is prohibited. Catchwords: ADMINISTRATIVE LAW - privacy - personal information - information protection principles - collection of information - use of information - disclosure of information - administrative and educative - consent ADMINISTRATIVE LAW - reviewable decision - correct and preferable decision - Civil and Administrative Tribunal Legislation Cited: Administrative Decisions Review Act 1997 (NSW) Child Protection (Working with Children) Act 2012 (NSW) Civil and Administrative Tribunal Act 2013 (NSW) Criminal Records Act 1991 (NSW) Privacy and Personal Information Protection Act 1998 (NSW) Cases Cited: AEC v Commissioner of Police NSW Police Force (GD) [2013] NSWADTAP 30 AIN v Medical Council of New South Wales [2017] NSWCATAP 23 CTU v NSW Police Force [2017] NSWCATAD 204 EEQ v Commissioner of Police [2020] NSWCATAD 253 Field v Commissioner of Police, New South Wales Police Force [2015] NSWCATAD 153 HW v Commissioner of Police, New South Wales Police Service and Anor [2003] NSWADT 214 Texts Cited: Nil Category: Principal judgment Parties: GHZ (Applicant) Commissioner of Police, New South Wales (Respondent) Representation: Solicitor: Applicant (Self-represented) Crown Solicitor (Respondent) File Number(s): 2024/00170323 Publication restriction: Pursuant to s 64(1)(a) and (c) of the Civil and Administrative Tribunal Act 2013 (NSW), the disclosure of the name of the Applicant or reference to any information, picture or other material that identifies the Applicant or is likely to lead to the identification of the Applicant is prohibited. REASONS FOR DECISION 1. This is an application pursuant to the Privacy and Personal Information Protection Act 1998 ("PPIP Act"). The applicant in this matter, GHZ ("Applicant") alleges breaches of information protection principles contained in the PPIP Act. The respondent, the Commissioner of Police, New South Wales ("Respondent") denies any such breaches. The questions for determination in this matter are whether such breaches occurred and if so the consequences. Background Proceedings 1. On 23 May 2021, the Applicant was charged with two counts of common assault. 2. In 2022, the Applicant applied to the Department of Education for employment in a role as school learning support officer. 3. On 27 May 2022, the Applicant completed and lodged a form titled "Nationally Coordinated Criminal History Check Application and Informed Consent Form". This was required for her employment application. 4. On 7 June 2022, in response to the national police check request, the Respondent disclosed to the Department of Education that there had been a "pending court appearance" in relation to the common assault charges pending hearing at the time. This is a disclosure which the Applicant alleges contravened the PPIP Act. 5. On 16 September 2022, the Department of Education told the Applicant that her application for employment had been withdrawn because of the pending court appearance. 6. Following a hearing of the relevant charges in the Local Court of NSW in 2022 and 2023, on 3 November 2023, the charges were dismissed on the basis that no prima facie case was disclosed. 7. Following the dismissal, the Applicant applied for costs. That application for costs was dismissed by the Local Court. 8. On 10 November 2023, the Applicant lodged a notice of appeal in the District Court of NSW as "to cost compensation orders only". 9. On 14 December 2023, the Respondent received an application from the Office of the Children's Guardian ("OCG") for disclosure of the Applicant's criminal history. The Respondent disclosed the relevant assault charges and that there was a pending court appearance before the District Court. The Respondent disclosed that the outcome was recorded as "DISMISSED – NOTGUILTY FINDING" followed by a notation "ALL GROUNDS APPEAL LODGED". 10. On 4 January 2024, the information concerning the above court appearance and sentence details were deleted by the Respondent on the system for recording data she maintains, known as "COPS". However, that change was not carried across to the system for national police checks. 11. On 21 January 2024, the Applicant wrote to the Respondent alleging that she had created a "fake criminal history" and provided it to potential employers and requested that her criminal record be "cleared immediately". The Applicant sent numerous further requests to the Respondent for deletion of her criminal history from the record. 12. On 7 and 8 February 2024, the Applicant requested, among other things, access under the PPIP Act to information concerning her criminal history recorded in the Respondent's records. 13. On 14 February 2024, the Privacy Manager of the Respondent declined the Applicant's request for access to her criminal history. The Privacy Manager relied on exemption from compliance under s 27 of the PPIP Act for information related to a law enforcement function. 14. On 11 March 2024, the Respondent sent the Applicant a letter saying that on 14 December 2023, information concerning her appeal was incorrectly released to the Office of the Children's Guardian and that amended disclosure had been made. It also said that the Respondent does not delete or remove information relating to charges. 15. On 19 and 20 March 2024, COPS records were updated after the District Court appeal hearing. Following the updates, there was no longer any reference to any appeal being pending. 16. On 22 March 2024, the District Court dismissed the Applicant's appeal on the grounds of a lack of jurisdiction. 17. The Applicant subsequently commenced proceedings in the Supreme Court of NSW for review of the decision of the District Court. Those proceedings remain on foot with no determination as at the date of hearing of the present matter. 18. The Respondent has informed the Applicant that she did not delete information relating to criminal charges. Further, she said that she may disclose all criminal charges for working with children checks. However, she said that the assault charges would not be disclosed for a national police check for the purposes of general employment. 19. By application to the Civil and Administrative Tribunal ("Tribunal") dated 6 May 2024, the Applicant sought review of the Respondent's decision of 11 March 2024. Following a review by the Tribunal in relation to the matter, the Tribunal made orders on 3 June 2024, remitting the matter to the Respondent for reconsideration. 20. On 3 July 2024, the Respondent's privacy internal review was finalised. It found that no Information Protection Principles ("IPP") had been contravened. 21. On 4 July 2024, the Applicant notified the Respondent that she wished to continue with her application to the Tribunal. Consideration 1. The question for determination is whether the matters described in the Background above gave rise to a breach or breaches of any IPP set out in Part 2 of the PPIP Act. The Applicant alleges that breaches arose in the following contexts: 1. The laying of charges 2. Disclosure of information for the purposes of the Local Court and District Court proceedings 3. Disclosure of information to the Department of Education 4. Disclosure of information to the OCG. Laying of charges 1. The first question for determination is whether any matter involving the laying of criminal charges gave rise to a breach. 2. The Applicant's submission is that collection of personal information about the Applicant in relation to the laying of charges occurred by unlawful means. She relies on s 10 and 11 of the PPIP Act containing the IPPs she claims the Respondent has breached. 3. The Respondent, however, relies on s 27 of the PPIP Act in support of her submission that even if any alleged breach occurred, compliance on her part with the relevant IPPs was not required. Section 27 of the PPIP Act provides as follows: "27 Specific exemptions for certain law enforcement agencies (1)Despite any other provision of this Act, the following are not required to comply with the information privacy principles— ….. (h) the NSW Police Force. (2) However, the information protection principles do apply to a public sector agency mentioned in subsection (1) in connection with the exercise of the agency's administrative and educative functions". 1. The effect of s 27, as it applies to the NSW Police Force, is that it relieves the NSW Police Force from compliance with the relevant information privacy principles. However, this is subject to subsection (2) which provides that the information protection principles do apply in connection with the exercise of "administrative and educative functions". The issue for determination is whether the Respondent's handling of personal information about the Applicant in laying charges falls within s 27(2). 2. What is meant by an "administrative" function fell for consideration in AEC v Commissioner of Police NSW Police Force (GD) [2013] NSWADTAP 30. The Appeals Panel of the Administrative Decisions Tribunal said: "The view has been expressed that the adjective 'administrative' bears in this context the connotation of activities relating to the internal administration of the agency, i.e. activities that are the usual incidents of any organisation whatever its official, public functions may be. See, to that effect, Commissioner of Police, NSW Police Force v YK [2008] NSWADTAP 78 at [20] ff. The Appeal Panel in that case expressed the view that the 'administrative functions' to which s 27(2) refers are those necessary in any agency or any organisation, such as the management of personnel records". 1. It is accepted that what are "administrative functions" are not, however, limited to corporate services such as records management. The routine provision of information with nothing more may answer the description of an "administrative" function, for example for the purposes of a routine application for a national criminal history check (CTU v NSW Police Force [2017] NSWCATAD 204, at [4] and [19]) or in determining an access application under the Government Information (Public Access) Act 2009 (NSW) (Field v Commissioner of Police, New South Wales Police Force [2015] NSWCATAD 153, at [83]). 2. In HW v Commissioner of Police, New South Wales Police Service and Anor [2003] NSWADT 214 (followed in EEQ v Commissioner of Police [2020] NSWCATAD 253), the President of the Administrative Decisions Tribunal said at paragraphs [27] – [29]: "27 A broad interpretation of `administrative functions' may be appropriate in a legislative scheme which does not otherwise compartmentalise the functions of a public sector agency (as I considered to be the case in relation to the way that expression applies to the Police Service in the setting of the amendment of personal record provisions in the Freedom of Information Act 1989: see N (No. 3) -v- Commissioner of Police, New South Wales Police Service [2002] NSWADT 34 (subject to appeal)). However in s 27 the Parliament has taken a compartmentalised approach to the functions of the law enforcement agencies mentioned. The division, as I see it, is as between their core responsibilities and those responsibilities which are not part of their core responsibilities. In particular the meaning of the word `administrative' is to be read down so as not to embrace those core responsibilities. Similarly `educative' responsibilities, which might on one view simply be a component of `administrative' activity are to be seen as separate from administrative responsibilities and again not forming part of the core responsibilities. 28 In my view the activities of a police officer in supporting a prosecution, at least where he or she is asked to exercise independent discretion and judgment in performing a task, are activities that form part of the core responsibilities of the Police Service. The fundamental responsibility of the Police Service is the investigation of crime. While the Police Service's responsibility for investigation is usually at an end by the time a case has gone to the District Court for trial, there may be a continuing need for some activity of that kind. In this instance the prosecution team called for a further narrow work of an investigative kind to be done. The means to be used was a subpoena for documents. This in my opinion was work of a investigative nature (though not connected with the crime itself) and related to the Police Service's core responsibilities. 29 It was not `administrative' in the sense in which I consider this term is used in this Act. In order for the primary provision, s 27(1), to be given effect, the term cannot be used to refer to the entirety of the administrative activity of the Police Service, which includes the investigation of crime. Read in context, I am satisfied that it is intended to have a narrower compass going to those aspects of the operation of the agency that, as I see it, do not directly involve the carrying out of the core responsibilities. As I see it, `administrative' when used in contradistinction to s 27(1) and alongside the term `educative' seeks to refer to those activities of the Police Service that have to do with providing administrative support for the conduct of its core responsibilities". 1. What the Respondent did in laying charges, including investigations leading up to the laying of charges, did not, in my opinion, fall within an "administrative" function as described in HW. The Respondent's actions in investigation and the laying of charges were not matters of internal administration. What the Respondent did went to its "core" responsibilities. These were actions forming part of the official and public functions of the NSW Police Force. 2. Further, the laying of charges was clearly not an "educative" function within the meaning of s 27(2). This function refers to "the work that the Police Service does in connection with community and school education programs, as well as in relation to its internal education and training programs" (HW, at [31]). 3. It follows that s 27(2) applies as submitted by the Respondent, with the result that there was no requirement for the NSW Police Force to comply with relevant IPPs in performing its function of investigation and laying charges in this matter. Court proceedings 1. The Applicant's complaint arises out of the placing by the Respondent of information about her history on the COPS system, following the laying of charges and the Applicant's subsequent appeal to the District Court. I understood the Applicant's contention to be that s 9 of the PPIP Act was contravened because information about her was not collected directly from her and further that an appropriate collection notice was not given, contrary to s 10 of the PPIP Act. She also submits that a contravention of s 11 occurred because the information collected was not accurate. 2. To the extent that the Respondent had information automatically placed on the COPS system, the Respondent submits that the function in question fell within section 27(1) because doing so was not of an "administrative or educative" function. 3. The Respondent's evidence was that the Department of Communities and Justice has a system known as "Justicelink" which manages court proceedings, listings and orders. In relation to criminal proceedings, the evidence was that there was an electronic exchange of information between COPS and Justicelink for all criminal proceedings, including criminal appeals. The information to be shared could be provisioned automatically, which will load electronically into COPS or can be entered manually into COPS. 4. The transmission of the relevant information through Justicelink, in my opinion, is not merely an administrative function in the circumstances at hand. It was part of the function of providing information for the hearing of the matter in the Local Court and the appeal to the District Court. The provision of that information was a necessary part of the operation of the proceedings and not simply something in the nature of records management. Consequently, I find that by reason of s 27(2), no contravention of the information protection principles set out in ss 9, 10, 11 or any other information protection principle occurred by reason of the transmission of the information in question to COPS, relevant to the Local Court and District Court proceedings. Department of Education 1. The Applicant submits that breaches of the PPIP Act occurred as a result of disclosure on 7 June 2022, to the Department of Education of the Applicant's then pending charges. In the event of any breach, the Respondent, for her part, relies upon the exception allowed to the Respondent from compliance with ss 10, 18, or 19 of the PPIP Act, where expressed consent is given to the disclosure in question. The terms of that exception are set out in s 26(2) of the PPIP Act. If relevant, the Respondent also relies on s 19(2)(b) of the PPIP Act. 2. The Respondent relies on the "Nationally Coordinated Criminal History Check Application and Informed Consent Form" dated 27 May 2022 signed by the Applicant to establish consent. The Applicant, on the other hand, submits that the relevant form should not be taken to be consent on the basis of her understanding that on signing, she did not provide that consent. 3. The "Nationally Coordinated Criminal History Check Application and Informed Consent Form" states that the relevant criminal history check is conducted with "your informed Consent to determine your suitability for employment, a position of trust or as required by legislation. A Nationally Coordinated Criminal History Check contains your personal information, and any relevant police information about you, according to the purpose of your Nationally Coordinated Criminal History Check." It also states that police information is disclosed in accordance with applicable "spent conviction legislation". Page 6 of the document expresses consent to police information relating to the Applicant being disclosed "in accordance with the purpose identified in this form, and applicable legislation and information release policies". The form is signed or initialled by the Applicant on page 7. It expressly contemplates disclosure to the Department of Education on page 6. 4. The Respondent provided evidence as to how the system for a National Coordinated Criminal History Check operated. The Australian Criminal Intelligence Commission ("ACIC") provided and controlled access to the national police checking service. The evidence was that the NSW Police Force uploads criminal records from COPS onto the national police checking support system. An individual or organisation seeking a national police check is required to submit their application through an ACIC accredited body or through an Australian police agency. The Australian police agencies such as the NSW Police Force have an online National Police Check portal which provides an opportunity for individuals to apply directly to the NSW Police Force for their national police checks. The Department of Education and the OCG, for their part, are accredited bodies that are approved by ACIC to have access to the service to request a Nationally Coordinated Criminal History check for an individual. 5. There is no evidence that the Applicant knew the precise workings of the system described above for a Nationally Coordinated Criminal History Check. However, having stated on the form in question that consent was given, it is difficult to see, how what is shown on the face of the document the Applicant signed or initialled, should not be taken to be evidence of the required consent. The form clearly states that "informed Consent" is given. This is sufficient, in my opinion, to evidence that consent was given for disclosure to the Department of Education, regardless of whether or not the Applicant knew of the details of the workings of the system. That express consent excuses the Respondent from compliance with the relevant IPP when disclosing information within the terms of the consent given. Accordingly, I find that the exception that the Respondent relies upon under s 26(2) of the PPIP Act is established. 6. The Nationally Coordinated Criminal History Check Application and Informed Consent Form in evidence states that police information is disclosed in accordance with applicable "spent conviction legislation". The Applicant appears to rely on this statement in support of her submission that she did not consent to disclosure of the charges laid against her. However, the statement concerning "spent conviction legislation" does not appear to have any relevance to the matter at hand because there was no "conviction" against the Applicant that later became a "spent conviction" within the meaning of the Criminal Records Act 1991 (NSW) or as otherwise understood. The charges against her were not proved and dismissed without any conviction. Office of Children's Guardian 1. The Applicant submits that the two disclosures to the OCG contravened s 18 or s 19 the PPIP Act. The Respondent, on the other hand, submits that she was authorised by legislation to make disclosure and alternatively, that the Applicant consented to national police checks when she applied for a Working With Children's Check following the dismissal of the charges against her. 2. Under s 25(a) of the PPIP Act, an exception applies to compliance with ss 9, 10, 13, 14, 15, 17, 18 or 19, where an agency is lawfully authorised or required not to comply with the principle concerned. Section 33 of the Child Protection (Working with Children) Act 2012 (NSW) ("CPWC Act") provides as follows: "33 Notification of offences and other information (1) The Commissioner of Police is authorised at any time, in accordance with this Part and the regulations, to disclose (or arrange for a member of the NSW Police Force to disclose) to the Children's Guardian the following information— (a) information relating to any matter that may cause a person to be a disqualified person or result in an assessment requirement affecting a person, (b) information relating to the criminal history of a person, (c) without limiting paragraph (a) or (b), information relating to the circumstances of an offence or other matter disclosed under this section. (2) (Repealed) (3) This section does not limit the persons to whom, or the circumstances in which, information relating to the criminal history, including the criminal record, of persons may be disclosed apart from this Act. (4) Information about a person's criminal history may be disclosed under this Act— (a) whether or not the information relates to events that occurred when the person was under the age of 18 years, and (b) whether or not the information relates to offences that cause or may cause the person to be a disqualified person or result in an assessment requirement affecting the person". 1. What is the "criminal history" of a person is defined in s 5C(1) to include "criminal charges, whether or not heard, proven, dismissed, withdrawn or discharged". 2. I am in agreement with the Respondent's submission that 5C(1) captures information in respect of the proceedings in the Local Court, as information relating to the "criminal history" of the Applicant. "Criminal history" is defined to include criminal charges that have been dismissed. 3. The Respondent accepts that the appeal to the District Court, as originally disclosed to the OCG, was not "criminal history" as defined, there being no criminal charges pending or proved at the time of the appeal, the charges having been dismissed. However, I accept the Respondent's submission that the matters before the District Court came within the description of "information relating to the criminal history of a person" within the ambit of s 33(1)(b), as the appeal "related to" the previously laid criminal charges, coming about about as a result of those charges, even if at the time of the appeal, those charges had been dismissed. 4. Section 25 excuses the Respondent from compliance with the relevant information protection principles where it is "lawfully authorised" not to comply. 5. Section 33 of the CPWC Act "authorises" relevant disclosure to the OCG. It does not, however, describe that authorisation in terms that expressly excuses compliance with the relevant IPPs. Equally, there are no limitations expressed on the reach of the relevant authorisation. I do not see that there is any warrant to imply any such limitation, having regard to the purpose of s 33 as evinced by the language of the provision. That purpose is to authorise free disclosure to the OCG rather than more limited disclosure. I find that the disclosures made to the OCG was, accordingly, authorised under s 33 of the CPWC Act in a manner that did not require compliance with the relevant IPPs and that as a consequence, that authorisation is one that falls within s 25(a) of the PPIP Act. 6. I accept the Respondent's submission that the Applicant also consented to the disclosure of the relevant information, having applied for a Working With Children's Check. I infer that the application would not have been granted without that disclosure and the Applicant's consent to that disclosure. That consent by reason of s 26(2) excuses the Respondent from complying with the relevant information protection principles set out ss 10, 18 or 19. Accuracy of information 1. A question of the accuracy of information disclosed also arises. The information that was disclosed to the OCG, included, on the first occasion, a pending appeal to the District Court. There was a notation in the material disclosed that Local Court charges had been dismissed but were the subject of an "ALL GROUNDS APPEAL". The appeal, however, was only in respect of costs. 2. The Respondent accepted that the information in question disclosed to the OCG was inaccurate. The terms of the disclosure suggested that the prosecutor had brought an appeal, even though it was the Applicant herself who had appealed and done so in respect of costs only. The Respondent accepted that the impression the information provided was that the charges had not been finally determined in the Applicant's favour and that this impression was not correct. 3. While the PPIP Act itself requires agencies to check the accuracy of information before "use", the Respondent's submission was that it said nothing about checking accuracy before "disclosure". In the Respondent's submission, s 18 and 19 should be understood as not bringing to bear any such requirement. The Respondent relies on the decision in AIN v Medical Council of New South Wales [2017] NSWCATAP 23, that s 16 did not apply to external disclosures of information. 4. Requirements for accuracy are set out in a number of provisions of the PPIP Act. Section 11 relevantly requires that an agency must take such steps as are reasonable in the circumstances to ensure that the information "collected" is "accurate". Section 15 requires the relevant holder of information at the request of the individual to whom the information relates, to make appropriate amendments to ensure that the personal information it holds is accurate. Section 16 relevantly requires the holder of personal information not to "use" the information without taking such steps as are reasonable in the circumstances, to ensure that the information is "accurate" and "up to date". 5. Section 11 deals with "collection" of information, s 15 requires the making relevant amendments to information and s 16 applies to the "use" of information. In each case, the relevant requirement for accuracy is set out in the provision. There is, however, no such provision expressly requiring accuracy, when information is "disclosed", even if there are specific provisions governing disclosure such as ss 18 and 19. Having regard to the statutory context that includes specific provisions dealing with disclosure which do not require accuracy when disclosing information, I am in agreement with the submission of the Respondent that s 16 is not intended to apply in respect of the disclosure of information to external parties. 6. I am also unable to find that a breach of s 11 has occurred in the collection of information. Even if the information collected was for a period of time inaccurate, s 11 applies in cases of "personal information" collected "from an individual". On the facts before the Tribunal, it appears that the incorrect information concerning the history of the proceedings recorded after the appeal to the District Court, was not collected "from an individual" being the Applicant, but originated from the laying of charges by the Respondent. This was not information collected from the Applicant but information about the legal process generated by the Respondent. 7. The Applicant also claims breaches in relations to s 14 and 15. The Respondent submits that even if the alleged breaches did occur, that it is not required to comply because the functions in question were not "administrative" or "educative functions" such that exemption in s 27(1) applied. I agree with this submission for the reasons set out at [31] and [32] above. 8. I do not find any breaches of any other IPP not considered above. Expungement 1. The information recorded in the Respondent's data system as at the time of hearing of this matter by the Tribunal was not inaccurate. That information showed that the Applicant had been the subject of two charges of "COMMON ASSAULT" in the past which had been dismissed. She seeks that these records be expunged so that a search will show no information concerning these matters in the future. 2. There is no dispute that the Applicant has, under s 15, the right to request amendments to information held by the Respondent concerning her to ensure that the information is accurate. The Tribunal, further, has the express power under s 55 of the PPIP Act to make an order requiring personal information that has been disclosed "to be corrected by the public sector agency". 3. However, in circumstances where the information in issue is no longer inaccurate, the Tribunal does not have the power under s 55 to make an order requiring a correction. I am not aware of any other power the Tribunal has under the PPIP Act, that could allow the Tribunal to order the deletion or expunging of the information in question. 4. It is, however, unsatisfactory, that the Respondent's database, for a period, contained inaccurate information concerning the District Court proceedings in question, that allowed an inference to be drawn that the status of the criminal charges against the Applicant remained unresolved, after a point in time when those charges had in fact been dismissed. It is also unsatisfactory that as a consequence, inaccurate information was conveyed to the OCG, even if subsequently the error was corrected by the Respondent. 5. I note that the Respondent has expressed regret for the inaccurate information and its conveyance to the OCG. The Respondent was correct in doing so. The Tribunal notes for the record that expression of regret. 6. It is also clear that the circumstances surrounding the charges in question have cause significant distress to the Applicant and that that distress in part arises out of the history of the charges recorded on the Respondent's data system together with the ability to carry out a search and find that history. 7. However, in circumstances where I have found that no breach of the PPIP Act has occurred for the reasons set out above, I am not aware of any remedy under the PPIP Act available to the Applicant that the Tribunal can grant. 8. The Applicant claimed that the charges laid against her had no basis and accordingly that the records kept by the Respondent should not be "misleading". Her submission was that the records ought to show that no charges should have been laid. However, it is not within the jurisdiction of the Tribunal to determine the question of whether or not the charges laid against the Applicant had a proper basis at law. The Tribunal, however, notes for the record, that the charges were dismissed by the Local Court. Damages 1. The Tribunal has power to award damages for breaches of the PPIP Act pursuant to section 55. However, I have not found any breach under the PPIP Act. I also make the observation that that the question of damages was not before the Tribunal in these proceedings. Orders 1. Pursuant to s 55(2) of the Privacy and Personal Information Protection Act 1998 (NSW), no further action to be taken in this matter. 2. Pursuant to s 64(1)(a) and (c) of the Civil and Administrative Tribunal Act 2013 (NSW), the disclosure of the name of the Applicant or reference to any information, picture or other material that identifies the Applicant or is likely to lead to the identification of the Applicant is prohibited. ******** I hereby certify that this is a true and accurate record of the reasons for decision of the Civil and Administrative Tribunal of New South Wales. Registrar DISCLAIMER - Every effort has been made to comply with suppression orders or statutory provisions prohibiting publication that may apply to this judgment or decision. The onus remains on any person using material in the judgment or decision to ensure that the intended use of that material does not breach any such order or provision. Further enquiries may be directed to the Registry of the Court or Tribunal in which it was generated. Decision last updated: 12 December 2024