NSW Tribunal Rules Breach of IPP 11 in Personal Information Disclosure Case
⚖️ Legal holding
A breach of IPP 11 occurs when personal information is disclosed without the individual's consent and in violation of the Privacy and Personal Information Protection Act 1998.
📚 Full judgment
The summary, holding and questions above are VadeLab’s own material. The official decision itself is published by the court, and we do not reproduce it on this page.
📄 Read the full judgment⚖️ View on the official court website ↗
⚖️ What tends to weigh in cases like this
✅ Tends to be accepted
- The Tribunal was satisfied that the Conduct of Concern resulted in the Respondent breaching IPP 11 in relation to the Applicant's personal information.
- The Tribunal found that the exemptions from compliance with IPP 11 under s 25(b) and s 26(2) of the PPIP Act were not available to the Respondent in respect of the Applicant's personal information.
- The Tribunal was satisfied that there was no reading of s 54 of the Government Information (Right to Information) Act 2009 that permits, reasonably contemplates, or necessarily implies the disclosure of the personal information of an individual who is not the applicant for the purposes of third party consultation.
- The Tribunal found that the Respondent made no persuasive submissions or presented no evidence to establish that s 54 of the Government Information (Right to Information) Act 2009 permits, reasonably contemplates, or necessarily implies the disclosure of the personal information of an individual who is not the applicant.
- The Tribunal was satisfied that the Applicant's distress was caused by the Conduct of Concern and the Respondent's resulting breach of IPP 11, and that the Respondent's ongoing denial of wrongdoing exacerbated her distress.
❌ Tends to be rejected
- The Respondent argued that the disclosure of the Applicant's personal information was permitted, necessarily implied, or reasonably contemplated by s 54 of the Government Information (Right to Information) Act 2009, but the Tribunal rejected this argument.
- The Respondent argued that the Applicant should be considered the applicant for the purposes of the Government Information (Right to Information) Act 2009 application, but the Tribunal rejected this argument, noting that the applicant was a separate legal entity.
Patterns observed in similar cases in this collection — every case is unique.
❓ Frequently asked questions
How did the court decide, and why?
The court decided that the Respondent had breached IPP 11 because the disclosure of the Applicant's personal information was unlawful and in violation of the Privacy and Personal Information Protection Act 1998.
What was the argument that mattered most?
The argument that mattered most was that the Respondent had disclosed the Applicant's personal information without obtaining explicit consent, thereby breaching IPP 11.
Was the decision for or against the person who brought the case?
The decision was for the person who brought the case, as the Tribunal found in favour of the Applicant.
What does this mean for someone in a similar situation?
For someone in a similar situation, this means that the disclosure of personal information without consent can be considered a breach of IPP 11 under the Privacy and Personal Information Protection Act 1998.
What evidence or documents mattered?
The evidence and documents that mattered included the internal review request, the internal review decision, and the supporting documentation such as email chains evidencing the conduct of concern.