INFORMATION ACT 2002

NORTHERN TERRITORY OF AUSTRALIA INFORMATION ACT 2002 As in force at 1 June 2026 Table of provisions Part 1 Preliminary 1 Short title ......................................................................................... 1 2 Commencement .............................................................................. 1 3 Objects ............................................................................................ 1 4 Definitions ........................................................................................ 2 4A Personal information ........................................................................ 9 4B Application of offence provisions ..................................................... 9 5 Public sector organisations ............................................................ 10 6 Holding government information .................................................... 12 7 Nature of rights created by this Act................................................ 12 8 Act binds Crown ............................................................................ 12 9 Relationship with other laws .......................................................... 13 9A Application of Criminal Code ......................................................... 13 Part 2 General principles about disclosure of information 10 General principle of accountability for government information ..... 13 11 Information about public sector organisations ............................... 14 12 Publicly available information ........................................................ 15 13 When does this Act apply to government information?.................. 15 14 When does this Act apply to personal information? ....................... 16 Part 3 Access and correction rights Division 1 General principles 15 Right to access government information ....................................... 17 16 Right to access or correct personal information............................. 17 17 Duty of public sector organisation in dealing with applications ...... 17 Division 2 Accessing government information Subdivision 1 How is an application made and how is it processed? 18 Application for access to government information ......................... 18 19 Response to application ................................................................ 18 20 Notice of decision on application ................................................... 19 -- 1 of 126 -- Information Act 2002 ii Subdivision 2 What decisions may be made in relation to an application? 21 Providing access in whole or in part .............................................. 19 22 Providing edited copies of information ........................................... 20 23 Deferring access............................................................................ 21 24 Refusing access because information is exempt ........................... 21 25 Refusing access because providing access unreasonably interferes with operations .............................................................. 22 26 More time may be required to make decision ................................ 22 27 Information cannot be identified or found or does not exist ........... 22 28 Information not held by organisation.............................................. 23 29 Transfer of application ................................................................... 23 30 Information about third parties ....................................................... 24 Division 3 Correcting personal information Subdivision 1 How is an application made and how is it processed? 31 Application to correct personal information .................................... 26 32 Response to application ................................................................ 26 33 Notice of decision on application ................................................... 27 Subdivision 2 What decisions may be made in relation to an application? 34 Correcting information ................................................................... 27 35 Refusing to correct information ...................................................... 28 36 More time may be required to make decision ................................ 28 37 Transfer of application ................................................................... 29 Division 4 Review by public sector organisation 38 Application for review .................................................................... 30 39 Conduct of review .......................................................................... 30 39A Application for review may be sent to Commissioner .................... 31 40 Decision on review ........................................................................ 31 41 Notice of outcome of review .......................................................... 32 Division 5 Miscellaneous 42 Vexatious applicants ...................................................................... 32 -- 2 of 126 -- Information Act 2002 iii Part 4 Exemptions in the public interest Division 1 Effect of exemption 43 Public sector organisation may provide access to exempt information ..................................................................................... 33 Division 2 Disclosure generally is not in the public interest 44 Exemption...................................................................................... 33 45 Executive Council, Cabinet, Territory economy ............................. 33 46 Security and law enforcement ....................................................... 35 47 Information exempt under corresponding FOI laws ....................... 36 48 Secrecy provisions ........................................................................ 37 49 Preservation of system of justice ................................................... 37 49AA Criminal intelligence ...................................................................... 37 49A Information obtained or created because of investigation ............. 37 49B Information under Public Interest Disclosure Act 2008 .................. 38 49C Information under Ombudsman Act 2009 ...................................... 38 49D Information under Anti-Discrimination Act 1992............................. 38 49E Information under Independent Commissioner Against Corruption Act 2017 ....................................................................... 39 49F Information under Integrity and Ethics Commissioner Act 2025 .... 39 Division 3 Disclosure in a particular case is not in the public interest 50 Exemption...................................................................................... 39 51 Inter-governmental relations .......................................................... 40 52 Deliberative processes .................................................................. 40 53 Effective operations of public sector organisations ........................ 41 54 Health, safety, environment and place of significance ................... 42 55 Confidentiality obligations, confidential sources ............................ 42 56 Privacy and cultural information..................................................... 43 57 Commercial and business information, research, examination papers ........................................................................................... 44 58 Financial and property interests of Territory or public sector organisation ................................................................................... 45 Division 4 Exemption certificates 59 Exemption...................................................................................... 45 60 Issuing exemption certificate ......................................................... 46 61 Duration of exemption certificate ................................................... 46 62 Exemption certificate not to be queried ......................................... 46 63 Exemption certificate not to be issued after complaint made ......... 47 64 Delegation not permitted................................................................ 47 -- 3 of 126 -- Information Act 2002 iv Part 5 Protection of privacy Division 1 Information privacy principles 65 What are IPPs? ............................................................................. 47 66 What information do IPPs apply to? .............................................. 47 67 What is an interference with a person's privacy? ........................... 47 Division 2 Exemptions from IPPs 68 Publicly available information ........................................................ 48 69 Courts and tribunals ...................................................................... 48 70 Law enforcement agencies ............................................................ 49 Division 3 Codes of practice 72 Public sector organisation may prepare draft code of practice ...... 49 73 Commissioner may approve code of practice ................................ 50 76 When does a code of practice take effect? .................................... 51 77 Variation of code of practice .......................................................... 51 78 Revocation of code of practice ...................................................... 51 79 Compliance with code of practice .................................................. 51 80 Register of codes of practice ......................................................... 51 Division 4 Authorisations 81 Grant of authorisation generally..................................................... 52 81A Authorisation related to an emergency situation or a public health emergency .......................................................................... 53 Division 5 Compliance notices 82 Commissioner may serve compliance notice................................. 54 83 Extension of time to comply ........................................................... 54 84 Report about non-compliance........................................................ 55 Part 6 Information commissioner Division 1 Establishment, functions and powers 85 Information Commissioner ............................................................. 55 86 Functions of Commissioner ........................................................... 56 87 Powers of Commissioner ............................................................... 57 88 Duty to assist persons to exercise rights ....................................... 57 89 Delegation ..................................................................................... 57 Division 3 Miscellaneous 96 Staff and consultants ..................................................................... 58 -- 4 of 126 -- Information Act 2002 v 98 Annual report ................................................................................. 58 99 Special report ................................................................................ 59 101 Obstruction, improper influence and contravention of requirement or direction ................................................................. 60 102 Commissioner must not disclose exempt information.................... 61 Part 7 Complaints to information commissioner 103 Complaint after review by public sector organisation..................... 61 104 Complaint about interference with privacy ..................................... 62 104A Complaints may be dealt with jointly.............................................. 63 105 Form of complaint .......................................................................... 63 106 Commissioner to accept, reject or refer complaint......................... 63 107 Notification of acceptance, rejection or referral.............................. 65 108 Referral of complaints to Ombudsman, Health Complaints Commissioner or interstate Privacy Commissioner ....................... 65 109 Withdrawal of complaint................................................................. 65 109A Commissioner may join person as party........................................ 66 110 Investigation of complaint .............................................................. 66 110A Powers to compel evidence ........................................................... 67 111 Mediation is pre-condition to Tribunal proceeding ......................... 68 112 Resolution of complaint by mediation or other agreement ............. 68 112A Referral of complaints to Tribunal .................................................. 69 112B Commissioner to prepare report if complaint is referred to Tribunal.......................................................................................... 70 112C Effect of complaints on acts and decisions .................................... 70 112D Role of Ombudsman or Health Complaints Commissioner ........... 71 Part 7A Tribunal Division 1 Definitions 113 Definitions ...................................................................................... 71 Division 2 Jurisdiction of Tribunal to deal with complaints 113A Jurisdiction..................................................................................... 71 113B Tribunal must conduct proceeding................................................. 71 113C Tribunal may require public sector organisation to seek views of third party before conducting proceeding .................................. 72 113D Proceeding in relation to dismissed complaint ............................... 72 114 Determination of complaint about accessing or correcting information ..................................................................................... 73 115 Determination of complaint about interference with privacy........... 73 116 Notice of decision .......................................................................... 74 118 Tribunal may dismiss complaint..................................................... 74 -- 5 of 126 -- Information Act 2002 vi Division 3 Procedures 119 Parties ........................................................................................... 75 123 Matters relating to proceeding ....................................................... 75 125 Onus and burden of proof where access refused .......................... 76 Part 8 Appeals from decisions of Information Commissioner or Tribunal 129 Appeal to Supreme Court .............................................................. 76 Part 9 Records and archives management Division 1 Preliminary 130 Application of Part ......................................................................... 77 131 Duties of chief executive officers ................................................... 77 131A Records functions .......................................................................... 78 131B Archives functions ......................................................................... 78 132 Performance of functions consistent with objects of Act ................ 78 Division 2 Obligations of public sector organisations 133 Protecting records ......................................................................... 78 134 Managing records .......................................................................... 79 135 Transferring records ...................................................................... 79 136 Form of records ............................................................................. 79 Division 2A Records retention and disposal schedules 136A Preparation of records retention and disposal schedule ................ 80 136B Approval of records retention and disposal schedule .................... 80 Division 3 Standards 137 Definitions ...................................................................................... 80 137A Records standards ........................................................................ 81 137B Archives standards ........................................................................ 81 137C Preparation of standards ............................................................... 81 138 Minister may approve standards.................................................... 81 139 Review of standards ...................................................................... 82 140 Advice to public sector organisations ............................................ 82 Division 4 Managing archives 141 Transfer of permanent records to the archives service .................. 82 142 Determination of open access period ............................................ 83 143 Archives in open access period to be publicly available ................ 84 144 Accessing and correcting archives not yet publicly available......... 84 -- 6 of 126 -- Information Act 2002 vii Division 5 Offence 145 Mishandling records ...................................................................... 85 Part 10 General offences and matters relating to liability Division 1 General offences and related procedural matters 146 Misleading information ................................................................... 86 147 Concealing or disposing of government information to prevent access or correction ...................................................................... 88 148 Confidentiality of information ......................................................... 89 149 Liability of and with respect to contract service providers .............. 89 150 Conduct of directors, employees and agents................................. 90 Division 2 Legal immunity 151 Protection from liability .................................................................. 91 152 Acts done to exercise rights........................................................... 91 153 Information volunteered by public sector organisation................... 91 Part 11 Miscellaneous 154 No review or other proceedings outside this Act............................ 92 155 Applications and complaints on behalf of children, persons with disabilities or deceased persons ............................................ 92 155A Processing arrangements between public sector organisations for applications and complaints ..................................................... 93 156 Fees for applications and complaints ............................................ 94 157 Changes in functions of public sector organisations ...................... 95 158 Regulations.................................................................................... 95 159 Application ..................................................................................... 95 159A Interaction with Care and Protection of Children Act 2007 ............ 96 160 Review after 5 years ...................................................................... 96 Part 12 Transitional matters for Information Amendment Act 2015 161 Codes of practice........................................................................... 96 Part 13 Transitional matters for Information Amendment Act (No. 2) 2015 162 Definition........................................................................................ 97 163 Complaints made before commencement ..................................... 97 164 Offence provisions – before and after commencement ................. 97 -- 7 of 126 -- Information Act 2002 viii Part 14 Transitional matters for Integrity and Ethics Commissioner Act 2025 164A Definitions ...................................................................................... 98 165 Application of amendment to section 94 ........................................ 98 166 Inspector's information remains exempt ........................................ 98 167 Current investigations, complaints and audits ............................... 99 Part 15 Transitional matter for Attorney-General and Police Legislation Amendment Act 2025 168 Application of amendment to section 5 .......................................... 99 Schedule 1 Secrecy provisions Schedule 2 Information Privacy Principles ENDNOTES -- 8 of 126 -- NORTHERN TERRITORY OF AUSTRALIA ____________________ As in force at 1 June 2026 ____________________ INFORMATION ACT 2002 An Act to provide for public access to information held by the public sector, to provide for the correction of personal information held by the public sector, to provide for the responsible collection and handling of personal information by the public sector, to promote appropriate records and archives management in the public sector, and for related purposes Part 1 Preliminary 1 Short title This Act may be cited as the Information Act 2002. 2 Commencement (1) This Act comes into operation on the date fixed by the Administrator by notice in the Gazette. (2) If this Act does not come into operation before 1 July 2003, this Act comes into operation on that date. 3 Objects (1) The objects of this Act are: (a) to provide the Territory community with access to government information by: (i) making available to the public information about the operations of public sector organisations and, in particular, ensuring that rules and practices affecting members of the public in their dealings with public sector organisations are readily available to persons affected by those rules and practices; and (ii) creating a general right of access to information held by public sector organisations limited only in those circumstances where the disclosure of particular information would be contrary to the public interest because its disclosure would have a prejudicial effect on -- 9 of 126 -- Part 1 Preliminary Information Act 2002 2 essential public interests or on the private and business interests of persons in respect of whom information is held by public sector organisations; and (b) to protect the privacy of personal information held by public sector organisations by: (i) providing individuals with a right of access to, and a right to request correction of, their personal information held by public sector organisations; and (ii) establishing a regime for the responsible collection and handling of personal information by public sector organisations; and (iii) providing remedies for interference with the privacy of an individual's personal information; and (c) to establish an independent officeholder, the Information Commissioner, to oversee the freedom of information and privacy provisions of this Act; and (d) to promote efficient and accountable government through appropriate records and archives management by public sector organisations. (2) This Act is intended to strike a balance between competing interests by giving members of the Territory community a right of access to government information with limited exceptions and exemptions for the purpose of preventing a prejudicial effect on the public interest as described in subsection (1)(a)(ii). (3) This Act: (a) does not replace other procedures for accessing government information; and (b) does not limit in any way access to government information (other than personal information) that is publicly available. 4 Definitions In this Act: Aboriginal means a member of the Aboriginal race of Australia and includes a descendant of the indigenous inhabitants of the Torres Strait Islands. -- 10 of 126 -- Part 1 Preliminary Information Act 2002 3 Aboriginal custodian, in relation to an Aboriginal sacred site, means an Aboriginal who, by Aboriginal tradition, has responsibility for the site. Aboriginal sacred site means a site that is sacred to Aboriginals or is otherwise of significance according to Aboriginal tradition, and includes any land that, under a law of the Territory, is declared to be sacred to Aboriginals or of significance according to Aboriginal tradition. Aboriginal tradition means the body of traditions, observances, customs and beliefs of Aboriginals generally or of a particular community or group of Aboriginals, and includes any such traditions, observances, customs or beliefs relating to particular persons, areas, objects or relationships. act includes an omission. annual report, in relation to a public sector organisation, means an annual report of the operations of the organisation during a financial year that is prepared in compliance with a law of the Territory. applicable standard, for a public sector organisation, means a standard approved by the Minister under section 138. application means: (a) an application under Part 3, Division 2 (Accessing government information); or (b) an application under Part 3, Division 3 (Correcting personal information); or (c) an application under Part 3, Division 4 (Review by public sector organisation). appraise, for a record, means to determine whether the record: (a) must be: (i) retained as a permanent record or archive; or (ii) retained for a specified period; or (b) may be destroyed. archive means a record of permanent value that forms part of the Territory Archives. archives functions, see section 131B. -- 11 of 126 -- Part 1 Preliminary Information Act 2002 4 archives service means the organisation (whether a public sector organisation or another organisation) established to perform the archives functions for the Territory. archives standard means a standard mentioned in section 137B. authorisation means an authorisation under Part 5, Division 4. chief executive officer, in relation to a public sector organisation, means the person (however described) responsible for managing the affairs of the organisation. child means a person who is under the age of 18 years. Children's Commissioner means the Children's Commissioner mentioned in section 9 of the Children's Commissioner Act 2013. client organisation, in relation to a processing arrangement, see section 155A(1). code of practice, in relation to a public sector organisation, means a code of practice prepared by the organisation under section 72 and approved by the Commissioner under section 73, and includes a code of practice as varied and in force from time to time. Commissioner means the Information Commissioner referred to in section 85. complainant, in relation to a complaint, means the person who made the complaint and includes a person joined as a complainant under section 109A. complaint means a complaint made to the Commissioner under section 103 or 104. compliance notice means a compliance notice under section 82 and includes a compliance notice amended under section 83. consent means consent whether express or implied. contract service provider means the person or body who is collecting or handling personal information under a service contract. contravention includes a failure to comply. correct means alter by way of amendment, deletion or addition. corresponding FOI law means a law of the Commonwealth, or of a State or another Territory of the Commonwealth, that corresponds with the freedom of information provisions of this Act. -- 12 of 126 -- Part 1 Preliminary Information Act 2002 5 corresponding privacy law means a law of the Commonwealth, or of a State or another Territory of the Commonwealth, that corresponds with the privacy provisions of this Act. disability means a disability that: (a) is attributable to an intellectual, psychiatric, sensory or physical impairment or a combination of those impairments; and (b) is permanent or likely to be permanent; and (c) results in a substantially reduced capacity for communication, learning or mobility and the need for continuing support services; and (d) may or may not be of a chronic episodic nature. disposal, of a record, includes the following: (a) destroying or damaging the record; (b) abandoning, donating, selling or transferring the possession or control of the record. emergency situation, see section 18(1) of the Emergency Management Act 2013. exemption certificate means an exemption certificate in force under Part 4, Division 4 (Exemption certificates). Government Business Division has the same meaning as in the Financial Management Act 1995. government information means a record held by or on behalf of a public sector organisation and includes personal information. Government owned corporation has the same meaning as in the Government Owned Corporations Act 2001. Health Complaints Commissioner means the Commissioner for Health and Community Services Complaints referred to in section 9 of the Health and Community Services Complaints Act 1998. health information means: (a) personal information about: (i) the physical or mental health of a person; or (ii) a person's disability; or -- 13 of 126 -- Part 1 Preliminary Information Act 2002 6 (iii) the provision of a health service to a person, including the person's expressed wishes about that provision; or (b) personal information connected with the provision of a health service; or (c) personal information connected with the donation or intended donation by a person of his or her body parts, organs or bodily substances; or (d) personal information that is genetic information about a person in a form that is, or could be, predictive about the person's health at any time. health service means: (a) an activity performed in relation to a person that is intended or claimed (expressly or otherwise) by the person or body performing it to: (i) assess, record, maintain or improve the person's health; or (ii) diagnose the person's illness or disability; or (iii) treat the person's illness or disability or suspected illness or disability; or (b) a disability, palliative care or aged care service; or (c) the dispensing on prescription of a drug or medicinal preparation by a pharmacist. hold, in relation to government information, has the meaning in section 6. IPP means an information privacy principle mentioned in section 65 and specified in Schedule 2. law enforcement agency means: (a) the Police Force of the Northern Territory; or (b) the police force of the Commonwealth or of a State or another Territory of the Commonwealth; or (c) the Australian Crime Commission; or (ca) the Northern Territory Emergency Service as defined in section 8 of the Emergency Management Act 2013; or -- 14 of 126 -- Part 1 Preliminary Information Act 2002 7 (cb) the Fire and Rescue Service as defined in section 3(1) of the Fire and Emergency Act 1996; or (d) a body established under a law of the Territory, of the Commonwealth, or of a State or another Territory of the Commonwealth, that performs one or more of the following functions: (i) preventing, detecting, investigating, prosecuting or punishing the commission of offences; (ii) managing property seized or restrained under a law relating to the confiscation of the proceeds of crime or the enforcement of such a law or of a decision, direction, order or other requirement under such a law; (iii) protecting public revenue; (iv) executing or implementing a decision, direction, order or other requirement of a court or tribunal, including executing warrants. outsourcing organisation means the public sector organisation for whom or on whose behalf personal information is collected or handled under a service contract. permanent record means a record of permanent value to the Territory. person means, subject to section 4B, an individual and includes a deceased individual within the first 5 years after death. personal information, see section 4A. privacy means privacy with respect to personal information. proceeding, in relation to the Tribunal, see section 113. processing arrangement, see section 155A(1). public health emergency means a public health emergency declared under section 48 of the Public and Environmental Health Act 2011. public register means a register kept by or on behalf of a public sector organisation under an Act that: (a) contains personal information that a person or body was required or permitted to give to the organisation under that Act or another Act; and -- 15 of 126 -- Part 1 Preliminary Information Act 2002 8 (b) is made available under that Act or another Act for inspection (whether on payment of a fee or not) by members of the public. public sector organisation has the meaning in section 5. record means recorded information in any form (including data in a computer system) that is required to be kept by a public sector organisation as evidence of the activities or operations of the organisation, and includes part of a record and a copy of a record. records functions, see section 131A. records service means the organisation (whether a public sector organisation or another organisation) established to perform the records functions for the Territory. records standard means a standard mentioned in section 137A. respondent, in relation to a complaint, means the public sector organisation the subject of the complaint and includes a person joined as a respondent under section 109A. sensitive information means: (a) personal information about: (i) racial or ethnic origin; or (ii) political opinions; or (iii) membership of a political association; or (iv) religious beliefs or affiliations; or (v) philosophical beliefs; or (vi) membership of a professional or trade association; or (vii) membership of a trade union; or (viii) sexual preferences or practices; or (ix) a criminal record; or (b) health information. service contract means a contract or other arrangement entered into after the commencement of this Act under which a person or body collects or handles personal information for or on behalf of a public sector organisation. -- 16 of 126 -- Part 1 Preliminary Information Act 2002 9 standard, for Parts 9 and 10, means an archives standard or records standard. supporting organisation, in relation to a processing arrangement, see section 155A(1). Territory Archives means records held on behalf of the Territory by the archives service. Tribunal means the Civil and Administrative Tribunal. tribunal means a body (other than a court) established by or under an Act that has judicial or quasi-judicial functions. unique identifier, in relation to a person, means a code that is assigned by a public sector organisation to identify the person for the operations of the organisation. Note for section 4 The Interpretation Act 1978 contains definitions and other provisions that may be relevant to this Act. 4A Personal information (1) Government information that discloses a person's identity or from which a person's identity is reasonably ascertainable is personal information. (2) However, the government information is not personal information to the extent that: (a) the person's identity is disclosed only in the context of having acted in an official capacity for a public sector organisation; and (b) the government information discloses no other personal information about the person. (3) In this section: acted in an official capacity, in relation to a public sector organisation, means having exercised a power or performed a function as, or on behalf of, the organisation. 4B Application of offence provisions (1) Section 4, definition person does not limit the application of the offence provisions to persons who are individuals. -- 17 of 126 -- Part 1 Preliminary Information Act 2002 10 (2) In this section: offence provisions means the provisions of this Act that create or relate to offences (including in relation to criminal responsibility, defences and penalties). 5 Public sector organisations (1) Subject to this section, a public sector organisation is any of the following: (a) an Agency; (b) a Government Business Division; (c) a Government owned corporation; (d) a local government council; (e) a statutory corporation; (f) a person appointed, or body established, by or under an Act or by the Administrator or by a minister; (g) the Police Force of the Northern Territory; (h) a person holding an office or position under an Act; (i) a court of the Territory; (j) a tribunal of the Territory; (k) a person or body declared by the Regulations to be a public sector organisation. (2) The following are not public sector organisations: (a) the Commissioner; (b) a person or body declared by the Regulations not to be a public sector organisation. (3) The following are not Agencies: (a) an Agency that is a Government Business Division; (b) if a Government Business Division forms part of an Agency – that part of the Agency. (4) A Government Business Division or Government owned corporation is a public sector organisation for personal information only. -- 18 of 126 -- Part 1 Preliminary Information Act 2002 11 (4A) A public sector organisation may be declared by the Regulations to be a public sector organisation for personal information only. (5) This Act does not apply to: (a) a court in relation to its judicial functions; or (b) except as expressly provided in Parts 7A and 8 – a tribunal in relation to its decision-making functions; or (c) a coroner as defined in section 3 of the Coroners Act 1993 in relation to an inquest or inquiry under that Act; or (d) the Local Court in relation to a preliminary examination under Part V of the Local Court (Criminal Procedure) Act 1928. (6) For this Act, other than Part 2 (General principles about disclosure of information) and Part 9 (Records and archives management), a public sector organisation includes a minister, but only to the extent that the minister holds government information connected with his or her responsibilities as the holder of that office. (6A) To avoid doubt, for Part 3, a minister and a member of the staff of a minister (each a ministerial entity) is not a public sector organisation in relation to recorded information in any form, (including data in a computer system), including a part or copy of that information, held by the ministerial entity that: (a) was created or received by the ministerial entity; and (b) has not been shared with or provided to a public sector organisation other than another ministerial entity. (7) A reference to a public sector organisation includes a reference to the following: (a) the chief executive officer of the organisation; (b) an officer, employee or agent of the organisation; (c) a contract service provider to the extent of the services it provides under the service contract; (d) an employee or agent of a contract service provider to the extent of the employee's or agent's involvement in collecting or handling personal information under the service contract; -- 19 of 126 -- Part 1 Preliminary Information Act 2002 12 (e) a person (other than a contract service provider) who provides services to the organisation under a contract between the organisation or the Territory and that person or another person to the extent of the services provided. (8) A reference to a court or tribunal includes a reference to the following: (a) the members of the court or tribunal; (b) the registrar (however described) and the other officers of the court or tribunal; (c) the staff in the registry and other offices of the court or tribunal; (d) the personal staff of the members of the court or tribunal; (e) any other staff of the court or tribunal. 6 Holding government information (1) A public sector organisation holds government information if the organisation has possession or control of the information: (a) whether alone or jointly with another person or body; and (b) whether the information is in the Territory or elsewhere. (2) At any time, a public sector organisation is taken to hold government information that has been transferred to the archives service under Part 9, Division 4 (Managing archives) but is not yet available to the public under that Division if the organisation is responsible at that time for the function to which the record relates. 7 Nature of rights created by this Act Except as expressly provided by this Act: (a) this Act does not give rise to a cause of action or create a legally enforceable right; and (b) a contravention of this Act does not create a criminal liability or make a person liable to be prosecuted. 8 Act binds Crown This Act binds the Crown in right of the Territory and, so far as the legislative powers of the Legislative Assembly permits, the Crown in all its other capacities. -- 20 of 126 -- Part 2 General principles about disclosure of information Information Act 2002 13 9 Relationship with other laws This Act prevails to the extent to which it is inconsistent with another law of the Territory (whether made before or after the commencement of this section). 9A Application of Criminal Code Part IIAA of the Criminal Code applies to an offence against this Act. Note for section 9A Part IIAA of the Criminal Code states the general principles of criminal responsibility, establishes general defences, and deals with burden of proof. It also defines, or elaborates on, certain concepts commonly used in the creation of offences. Part 2 General principles about disclosure of information 10 General principle of accountability for government information (1) Public sector organisations are to: (a) make available to the public such government information as is reasonably possible; and (b) provide government information to the public promptly; and (c) assist the public to ensure that personal information is accurate, complete and up to date. (2) This Act does not prevent or discourage public sector organisations from: (a) publishing government information; or (b) providing access to government information, including information that is exempt under Part 4 (Exemptions in the public interest); or (c) correcting personal information; otherwise than under this Act if it is proper to do so or is required or permitted by law to be done. (3) Public sector organisations are not required to provide access to government information if it is not in the public interest to do so. -- 21 of 126 -- Part 2 General principles about disclosure of information Information Act 2002 14 11 Information about public sector organisations (1) A public sector organisation must publish the following information at least once each calendar year: (a) a description of the structure and functions of the organisation; (b) a description of the kinds of government information usually held by the organisation that specifies whether the information: (i) may be inspected by the public under another Act, including whether inspection is on payment of a fee or not; or (ii) may be purchased by the public; or (iii) is distributed free of charge to the public; and how the information may be inspected or obtained; (c) a description of the organisation's procedures for providing access under Part 3 (Access and correction rights) to government information held by the organisation, including: (i) the designation of the officer or employee to whom an initial inquiry about access to the information may be made; and (ii) details of how to lodge a request for access to the information; (d) a description of the organisation's procedures for correcting under Part 3 (Access and correction rights) personal information held by the organisation, including: (i) the designation of the officer or employee to whom an initial inquiry about correcting the information may be made; and (ii) details of how to lodge an application to correct the information. (2) The information mentioned in subsection (1): (a) may be published in a document, a database or any other material form; and (b) must be available in at least one of those forms for inspection and purchase by members of the public. -- 22 of 126 -- Part 2 General principles about disclosure of information Information Act 2002 15 (3) It is sufficient compliance with this section if a public sector organisation publishes the information mentioned in subsection (1) in its annual report. (4) In this section: public sector organisation does not include the following: (c) a court or tribunal; (d) a contract service provider. 12 Publicly available information (1) The government information mentioned in this section is publicly available. (2) Part 3 (Access and correction rights) does not apply to: (a) publications that are distributed free of charge to, or may be purchased by, the public; or (b) material made available to the public for reference purposes. (3) Part 3 (Access and correction rights) and Part 5 (Protection of privacy) do not apply to: (a) information published in accordance with section 11; or (b) subject to section 68, public registers; or (c) archives that are available to the public under Part 9, Division 4 (Managing archives); or (d) recorded information of permanent value that forms part of the Territory Archives but is not a record; or (e) materials in the collections of libraries, art galleries and museums that are on public exhibition or are available to the public for reference or study purposes. 13 When does this Act apply to government information? (1) Part 3 (Access and correction rights) applies in relation to government information (other than personal information) that a public sector organisation holds at any time after that Part commences if the information was created or received by the organisation not earlier than 10 years before that Part commences. -- 23 of 126 -- Part 2 General principles about disclosure of information Information Act 2002 16 (2) Part 3 (Access and correction rights) applies in relation to government information (other than personal information) that a public sector organisation holds at any time after that Part has been in operation for 2 years if: (a) the information was created or received by the organisation more than 10 years before that Part commences; and (b) the information is in a class of information that the Commissioner determines, on application, to be a class of information in respect of which the competing interests of giving members of the Territory community a right of access to the information and of preventing a prejudicial effect on essential public interests or on the private and business interests of persons in respect of whom information is held by the organisation are likely to be balanced in favour of giving the right of access. (3) Part 3 (Access and correction rights) applies in relation to government information (other than personal information) that a public sector organisation holds at any time after that Part commences if the information is reasonably necessary to enable a person to properly understand information to which the person has been provided with access under this Act. 14 When does this Act apply to personal information? (1) Part 3 (Access and correction rights) applies in relation to personal information that a public sector organisation holds at any time after that Part commences, regardless of when the organisation created or received the information. (2) Part 5 (Protection of privacy) applies in relation to personal information that a public sector organisation collects at any time after that Part commences. (3) Part 5 (Protection of privacy) applies in relation to personal information that a public sector organisation handles at any time after that Part commences, regardless of when the organisation collected the information. -- 24 of 126 -- Part 3 Access and correction rights Division 1 General principles Information Act 2002 17 Part 3 Access and correction rights Division 1 General principles 15 Right to access government information Every person has a right, enforceable under this Act, to access government information other than personal information. 16 Right to access or correct personal information Every person has a right, enforceable under this Act: (a) to access his or her personal information; and (b) to correct his or her personal information if the information is inaccurate, incomplete or out of date; and (c) if the person and the public sector organisation holding the information disagree on the correction to be made – to request the organisation to take reasonable steps to associate with the information a statement by the person to the effect that, in the person's opinion, the information is inaccurate, incomplete or out of date. 17 Duty of public sector organisation in dealing with applications (1) A public sector organisation that receives an application must deal with the application as promptly and efficiently, and as fairly and openly, as is reasonably possible. (2) If an application is about access to government information, the public sector organisation is not to be concerned about, or to take into consideration, the reasons that access is being sought. (3) If an application is about: (a) access to personal information about the applicant or another person; or (b) correcting personal information about the applicant; the public sector organisation must deal with the application in a manner that is consistent with the IPPs or a code of practice, as the case requires. (4) In fulfilling its duties under this Part, a public sector organisation is not expected to act in a manner that would unreasonably interfere with the conduct of its operations. -- 25 of 126 -- Part 3 Access and correction rights Division 2 Accessing government information Subdivision 1 How is an application made and how is it processed? Information Act 2002 18 Division 2 Accessing government information Subdivision 1 How is an application made and how is it processed? 18 Application for access to government information (1) A person may apply to a public sector organisation for access to government information held by the organisation, including the person's personal information. (2) An application is to: (a) be in writing; and (b) specify the name of the applicant; and (c) include sufficient details to identify the information; and (d) specify an address to which correspondence regarding the application may be sent to the applicant. (2A) The application is to be accompanied by the application fee. (3) Before accepting an application, a public sector organisation must satisfy itself as to the identity of the applicant. 19 Response to application (1) Within 30 days after receiving an application in accordance with section 18, a public sector organisation must: (a) consider the application and make a decision about it in accordance with this Division; and (b) notify the applicant in writing of that decision. (2) The notice under subsection (1)(b) is to be in accordance with section 20. (3) If the applicant is not notified in accordance with this section within 30 days after making the application, the public sector organisation is taken to have refused access to the information. (4) The kinds of decisions the public sector organisation may make about the application are set out in Subdivision 2 (What decisions may be made in relation to an application?). -- 26 of 126 -- Part 3 Access and correction rights Division 2 Accessing government information Subdivision 2 What decisions may be made in relation to an application? Information Act 2002 19 (5) The public sector organisation is not required to consider or make a decision about an application made by a person declared under section 42 to be a vexatious applicant in relation to the organisation other than in accordance with the declaration. (6) Subject to section 17(2), the public sector organisation may request the applicant to provide details additional to those specified in the application in accordance with section 18(2)(c) to enable the organisation to more particularly identify the information to which access is being sought. (7) If the applicant does not provide the additional details within 30 days after they are requested under subsection (6), the public sector organisation is taken to have refused access. 20 Notice of decision on application For section 19(2), a notice of decision is to contain: (a) the matters required to be specified in the notice under sections 21 to 30; and (b) a statement setting out: (i) the applicant's rights of review under Division 4 (Review by public sector organisation), including that the applicant has 30 days after receiving the notice within which to make an application for review; and (ii) the applicant's rights of complaint under Part 7 (Complaints to Information Commissioner), including that the applicant has 90 days after receiving notice of the outcome of a review under Division 4 (Review by public sector organisation) to make a complaint. Subdivision 2 What decisions may be made in relation to an application? 21 Providing access in whole or in part (1) The public sector organisation may decide to provide access to all or part only of the information (in both cases referred to in subsection (2) as the information). (2) The public sector organisation must: (a) provide access by: (i) if the organisation is reasonably able to reproduce the information – providing the applicant with a copy; or -- 27 of 126 -- Part 3 Access and correction rights Division 2 Accessing government information Subdivision 2 What decisions may be made in relation to an application? Information Act 2002 20 (ii) permitting the applicant to examine the information; and (b) include in the notice of decision under section 20: (i) details of: (A) how the copy will be provided to the applicant; or (B) the place and time at which the information may be examined, as the case requires; and (ii) the prescribed details about the fee payable to the organisation for providing access. (3) If the public sector organisation decides to provide access to part only of the information, subject to subsection (4), the organisation must include in the notice of decision under section 20 the reasons for refusing access to the remainder of the information, including the provision of this Act because of which access is refused. (4) If it is not in the public interest for the applicant to know whether or not the remainder of the information exists or not, the public sector organisation is not required in the notice of decision under section 20: (a) to confirm or deny the existence of the remainder of the information; or (b) to give reasons for refusing access to the remainder of the information. 22 Providing edited copies of information (1) Subject to subsection (3), this section applies where the public sector organisation would, but for this section, refuse access to government information because part of the information is exempt under Part 4, Division 2 (Disclosure generally is not in the public interest) or Part 4, Division 3 (Disclosure in a particular case is not in the public interest). (2) The public sector organisation must provide access to a copy of the information with that part of the information that is exempt deleted from the copy (an edited copy) if: (a) it is practicable for the organisation to give the applicant an edited copy; and (b) the edited copy contains information of substance. -- 28 of 126 -- Part 3 Access and correction rights Division 2 Accessing government information Subdivision 2 What decisions may be made in relation to an application? Information Act 2002 21 (3) The public sector organisation is not required to provide an edited copy if the part of the information that is exempt is the subject of an exemption certificate. 23 Deferring access (1) The public sector organisation may decide to defer providing access to the information for a period not exceeding 60 days if the information: (a) is required by a law in force in the Territory to be published but is yet to be published; or (b) has been prepared for presentation to the Legislative Assembly, or as a submission to a particular person or body, and has yet to be presented or submitted. (2) The public sector organisation must specify in the notice of decision under section 20 the period for which access is likely to be deferred. (3) If by the end of the period mentioned in subsection (2): (a) the information has not been published, presented or submitted as mentioned in subsection (1)(a) or (b); and (b) the public sector organisation has not provided access to the information; the organisation is taken to have refused access to the information. 24 Refusing access because information is exempt (1) The public sector organisation may decide to refuse access to the information because the information is exempt under Part 4 (Exemptions in the public interest). (2) Subject to subsection (3), the public sector organisation must specify in the notice of decision under section 20 the reasons for refusing access, including the provision of this Act because of which access is refused. (3) If it is not in the public interest for the applicant to know whether the information exists or not, the public sector organisation is not required in the notice of decision under section 20: (a) to confirm or deny the existence of the information; or (b) to give reasons for refusing access to the information. -- 29 of 126 -- Part 3 Access and correction rights Division 2 Accessing government information Subdivision 2 What decisions may be made in relation to an application? Information Act 2002 22 25 Refusing access because providing access unreasonably interferes with operations (1) A public sector organisation may decide to refuse access to the information because providing access would unreasonably interfere with the operations of the organisation. (2) A public sector organisation may only decide to refuse access under subsection (1) if the organisation and the applicant are unable to agree on a variation of the information identified in the application. 26 More time may be required to make decision (1) If the public sector organisation decides that it requires more than the 30 days mentioned in section 19(1) to make a decision about the application, the organisation must include in the notice of decision under section 20 a statement to that effect specifying: (a) the reasons why more time is required; and (b) the period within which the applicant will receive a further notice under section 19(1)(b) in respect of the application. (2) The public sector organisation may require more time because: (a) the application relates to a large amount of information; or (b) extensive searches are required to locate the information to which the application relates; or (c) complying with the 30-day period would unreasonably interfere with the conduct of the operations of the organisation; or (d) the information includes information about a third party under section 30 and further time is required to seek the third party's views under that section. 27 Information cannot be identified or found or does not exist (1) If, after taking all reasonable steps to find the information, the public sector organisation decides that: (a) the information cannot be identified; or (b) the organisation holds the information but cannot find it; or (c) the information does not exist; -- 30 of 126 -- Part 3 Access and correction rights Division 2 Accessing government information Subdivision 2 What decisions may be made in relation to an application? Information Act 2002 23 the organisation must include in the notice of decision under section 20 a statement to that effect. (2) If the applicant is notified in the terms set out in subsection (1), the public sector organisation is taken to have refused access to the information. 28 Information not held by organisation (1) The public sector organisation may decide that it does not hold the information. (2) If the public sector organisation decides that it does not hold the information because it knows or believes on reasonable grounds that another public sector organisation holds the information, the organisation must transfer the application to that other organisation in accordance with section 29. 29 Transfer of application (1) If the public sector organisation: (a) knows or believes on reasonable grounds that another public sector organisation holds the information; or (b) is holding the information but knows or believes on reasonable grounds that the information originated from, and is more closely related to the operations of, another public sector organisation; the public sector organisation may decide to transfer the application to that other public sector organisation. (2) Despite the 30-day period mentioned in section 19(1), the public sector organisation must transfer the application within 15 days after receiving it. (3) The public sector organisation transferring the application must include in the notice of decision under section 20 a statement to the effect that the application has been transferred to another public sector organisation and specifying: (a) the date of the transfer; and (b) the name of the public sector organisation to whom the application has been transferred; and -- 31 of 126 -- Part 3 Access and correction rights Division 2 Accessing government information Subdivision 2 What decisions may be made in relation to an application? Information Act 2002 24 (c) the name, designation and contact details of an officer or employee of the organisation to whom the application has been transferred who may be contacted about the application; and (d) that, within 30 days after the date of the transfer, the organisation to whom the application has been transferred will give the applicant a further notice of decision in accordance with section 20. (4) Within 30 days after the date of the transfer, the public sector organisation to whom the application is transferred must deal with the application as if it had been made to that organisation and this Division applies (with the necessary changes) accordingly. 30 Information about third parties (1) For this section, information is about a third party if disclosure of the information might: (a) prejudice inter-governmental relations between an Australian body politic and a body politic overseas or between 2 or more bodies politic in Australia or in the Territory; or (b) be an interference with a person's privacy; or (c) disclose information about an Aboriginal sacred site or Aboriginal tradition; or (d) disclose information obtained by a public sector organisation from a business, commercial or financial undertaking that is: (i) a trade secret; or (ii) other information of a business, commercial or financial nature and the disclosure is likely to expose the undertaking unreasonably to disadvantage. (2) The public sector organisation must not decide to provide access to information about a third party unless the organisation has sought the views of the third party, the third party being: (a) if the disclosure would prejudice inter-governmental relations between 2 or more bodies politic – each of those bodies politic; or (b) if the disclosure would be an interference with a person's privacy: (i) the person whose privacy would be interfered with; or -- 32 of 126 -- Part 3 Access and correction rights Division 2 Accessing government information Subdivision 2 What decisions may be made in relation to an application? Information Act 2002 25 (ii) if that person is a child, has a disability or is deceased – a person who under section 155 may make a complaint on that person's behalf; or (c) if information about an Aboriginal sacred site would be disclosed – the Aboriginal custodians of the site; or (d) if information about Aboriginal tradition would be disclosed – the community or group to whom the tradition belongs; or (e) if information obtained from a business, commercial or financial undertaking would be disclosed – that undertaking. (3) The public sector organisation may decide to provide access to the information even though: (a) the third party's views were unable to be obtained after all reasonable attempts were made to do so; or (b) the third party did not respond to a request for his or her views within 30 days after receiving the request; or (c) the third party expressed the view that the organisation should not provide access to the information. (4) The public sector organisation must notify the third party in writing of its decision about the application. (5) The notices of decision under subsection (4) and section 20 are to include a statement to the effect that access will be provided: (a) 30 days after the third party receives the notice of decision; or (b) if within that 30-day period the third party makes a complaint to the Commissioner about the decision – subject to the Commissioner's determination of the complaint, after that determination is made. (6) If the third party is aggrieved by the decision of the public sector organisation to provide access to the information, the third party may make a complaint to the Commissioner about the decision within the 30-day period mentioned in subsection (5) and Parts 7 and 7A apply (with the necessary changes) as if the third party had made a complaint under section 103 and the organisation and the applicant were the respondents. (7) If the public sector organisation refuses to provide access to the information, for a complaint made by the applicant under section 103 in connection with that refusal, Parts 7 and 7A apply (with the necessary changes) as if the organisation and the third -- 33 of 126 -- Part 3 Access and correction rights Division 3 Correcting personal information Subdivision 1 How is an application made and how is it processed? Information Act 2002 26 party were the respondents. (8) All notices that the Commissioner is required to give to the complainant under Part 7 as applied by subsection (6) or (7) must also be given to the respondents. Division 3 Correcting personal information Subdivision 1 How is an application made and how is it processed? 31 Application to correct personal information (1) A person may apply to a public sector organisation to correct his or her personal information held by the organisation. (2) An application is to: (a) be in writing; and (b) specify the name of the applicant; and (c) include sufficient details to identify the information; and (d) give details of why the applicant believes that the information is inaccurate, incomplete or out of date; and (e) specify the correction the applicant wants to make to the information; and (f) specify an address to which correspondence regarding the application may be sent to the applicant. 32 Response to application (1) Within 30 days after receiving an application in accordance with section 31, a public sector organisation must: (a) consider the application and make a decision about it in accordance with this Division; and (b) notify the applicant in writing of that decision. (2) The notice under subsection (1)(b) is to be in accordance with section 33. (3) If the applicant is not notified in accordance with this section within 30 days after lodging the application, the public sector organisation is taken to have refused to correct the information. -- 34 of 126 -- Part 3 Access and correction rights Division 3 Correcting personal information Subdivision 2 What decisions may be made in relation to an application? Information Act 2002 27 (4) The kinds of decisions the public sector organisation may make about the application are set out in Subdivision 2 (What decisions may be made in relation to an application?). 33 Notice of decision on application For section 32(2), a notice of decision is to contain: (a) the matters required to be specified in the notice under sections 34 to 37; and (b) a statement setting out: (i) the applicant's rights of review under Division 4 (Review by public sector organisation), including that the applicant has 30 days after receiving the notice within which to make an application for review; and (ii) the applicant's rights of complaint under Part 7 (Complaints to Information Commissioner), including that the applicant has 90 days after receiving notice of the outcome of a review under Division 4 (Review by public sector organisation) to make a complaint. Subdivision 2 What decisions may be made in relation to an application? 34 Correcting information (1) The public sector organisation may decide to: (a) make the correction specified in the application; or (b) make a correction to the information that is different from the one specified in the application. (2) The public sector organisation must specify in the notice of decision under section 33: (a) the correction that was made; and (b) if different from the one specified in the application: (i) the reasons for the difference; and (ii) that, if in the applicant's opinion the information as corrected is inaccurate, incomplete or out of date, the applicant is entitled to request the organisation to take reasonable steps to associate with that information a statement by the applicant to that effect. -- 35 of 126 -- Part 3 Access and correction rights Division 3 Correcting personal information Subdivision 2 What decisions may be made in relation to an application? Information Act 2002 28 (3) The public sector organisation must take all reasonable steps to comply with a request made under subsection (2)(b)(ii). (4) This section does not require a public sector organisation to correct information that is historical only. 35 Refusing to correct information (1) The public sector organisation may decide to refuse to correct information. (2) The public sector organisation must specify in the notice of decision under section 33: (a) the reasons for refusing to correct the information; and (b) that, if the applicant remains of the opinion that the information is inaccurate, incomplete or out of date, the applicant is entitled to request the organisation to take reasonable steps to associate with that information a statement by the applicant to that effect. (3) The public sector organisation must take all reasonable steps to comply with a request made under subsection (2)(b). (4) This section does not require a public sector organisation to comply with a request made under subsection (2)(b) if the organisation refused to correct the information because it was historical only. 36 More time may be required to make decision (1) If the public sector organisation decides that it requires more than the 30 days mentioned in section 32(1) to make a decision about the application, the organisation must include in the notice of decision under section 33 a statement to that effect specifying: (a) the reasons why more time is required; and (b) the period within which the applicant will receive a further notice under section 32(1)(b) in respect of the application. (2) The public sector organisation may require more time because: (a) the application relates to a large amount of information; or (b) extensive searches are required to locate the information to which the application relates; or (c) complying with the 30-day period would unreasonably interfere with the conduct of the operations of the organisation. -- 36 of 126 -- Part 3 Access and correction rights Division 3 Correcting personal information Subdivision 2 What decisions may be made in relation to an application? Information Act 2002 29 37 Transfer of application (1) If the public sector organisation: (a) knows or believes on reasonable grounds that another public sector organisation holds the information; or (b) is holding the information but knows or believes on reasonable grounds that the information originated from, and is more closely related to the operations of, another public sector organisation; the public sector organisation may decide to transfer the application to that other public sector organisation. (2) Despite the 30-day period mentioned in section 32(1), the public sector organisation must transfer the application within 15 days after receiving it. (3) The public sector organisation transferring the application must include in the notice of decision under section 33 a statement to the effect that the application has been transferred to another public sector organisation and specifying: (a) the date of the transfer; and (b) the name of the public sector organisation to whom the application has been transferred; and (c) the name, designation and contact details of an officer or employee of the organisation to whom the application has been transferred who may be contacted about the application; and (d) that, within 30 days after the date of the transfer, the organisation to whom the application has been transferred will give the applicant a further notice of decision in accordance with section 33. (4) Within 30 days after the date of the transfer, the public sector organisation to whom the application is transferred must deal with the application as if it had been made to that organisation and this Division applies (with the necessary changes) accordingly. -- 37 of 126 -- Part 3 Access and correction rights Division 4 Review by public sector organisation Information Act 2002 30 Division 4 Review by public sector organisation 38 Application for review (1) A person who is aggrieved by a decision of a public sector organisation: (a) under Division 2 (Accessing government information) on an application for access to government information, including a decision to charge a fee for providing access to the information; or (b) under Division 3 (Correcting personal information) on an application to correct personal information; may apply to the public sector organisation for a review of the decision. (2) An application for review under subsection (1) is to: (a) be in writing; and (b) specify the name of the applicant; and (c) identify the decision and the application on which it was made; and (d) set out the reasons the applicant is seeking a review of the decision; and (e) specify an address to which correspondence regarding the review may be sent to the applicant. 39 Conduct of review (1) Within 30 days after receiving an application in accordance with section 38, a public sector organisation must: (a) subject to subsection (2), review the decision the subject of the application and notify the applicant in writing of the outcome of the review; or (b) send the application to the Commissioner under section 39A. (2) A public sector organisation may refuse to review a decision if satisfied that the application for review was not made within 30 days after the applicant was notified of the decision the subject of the application, in which case, the organisation is taken to have confirmed the decision. -- 38 of 126 -- Part 3 Access and correction rights Division 4 Review by public sector organisation Information Act 2002 31 (2A) If a decision is required to be reviewed under this Division as the result of a referral by the Commissioner under section 103(2): (a) the reference in subsection (1) to 30 days after receiving an application in accordance with section 38 is taken to be a reference to 30 days after receiving the referral; and (b) subsection (2) does not apply to the review. (3) A review is to be conducted fairly and with as much expedition as a proper consideration of the matter permits. (4) Subject to this section and section 40: (a) a public sector organisation is to treat an application for review as if it were an application under Division 2 or 3, as the case requires; and (b) that Division applies (with the necessary changes) accordingly. (5) A review is not to be conducted by the officer or employee who made the decision the subject of the review. 39A Application for review may be sent to Commissioner (1) Instead of reviewing a decision, a public sector organisation may send an application mentioned in section 39(1) to the Commissioner to be dealt with under section 103(4). (2) If the public sector organisation is required under section 103(2)(b) to conduct a further review of the decision, subsection (1) does not apply and the decision must be reviewed under section 39. 40 Decision on review (1) After conducting a review, a public sector organisation may: (a) confirm or vary the decision reviewed in whole or part; or (b) revoke the decision reviewed in whole or part and substitute another decision that would have been available to the organisation under Division 2 (Accessing government information) or Division 3 (Correcting personal information). (2) If the applicant is not notified of the outcome of a review within 30 days after making the application, the public sector organisation is taken to have confirmed the decision the subject of the review. -- 39 of 126 -- Part 3 Access and correction rights Division 5 Miscellaneous Information Act 2002 32 41 Notice of outcome of review For section 39(1)(b), a notice of the outcome of a review is to: (a) include the reasons for the outcome; and (b) contain a statement setting out the applicant's rights of complaint under Part 7 (Complaints to Information Commissioner), including that the applicant has 90 days after receiving the notice within which to make a complaint. Division 5 Miscellaneous 42 Vexatious applicants (1) On the application of a public sector organisation, the Commissioner may declare in writing that a person is a vexatious applicant in relation to the organisation. (2) The Commissioner may only make a declaration if satisfied that: (a) over a period of time, the person has repeatedly applied to the public sector organisation: (i) for access under Division 2 (Accessing government information) to government information or a number of pieces of government information that share a common characteristic; or (ii) for review under Division 4 (Review by public sector organisation) of the organisation's decisions about access to government information or a number of pieces of government information that share a common characteristic; and (b) the repeated applications are: (i) unnecessary; or (ii) an improper use of the right of access or review; or (iii) made to harass, obstruct or otherwise interfere with the operations of the organisation. (3) A declaration has effect subject to the terms and conditions specified in the declaration, which may include a condition that the vexatious applicant may only make an application to the public sector organisation for access under Division 2 (Accessing government information) or review under Division 4 (Review by public sector organisation) with the written permission of -- 40 of 126 -- Part 4 Exemptions in the public interest Division 2 Disclosure generally is not in the public interest Information Act 2002 33 the Commissioner. Part 4 Exemptions in the public interest Division 1 Effect of exemption 43 Public sector organisation may provide access to exempt information If government information is exempt under this Part, a public sector organisation is not required to provide access to the information under Part 3 (Access and correction rights). Division 2 Disclosure generally is not in the public interest 44 Exemption Government information mentioned in this Division is exempt because it is not in the public interest to disclose the information. 45 Executive Council, Cabinet, Territory economy (1) Information is exempt under section 44 if: (a) the information: (i) was brought into existence for submission to and consideration by an Executive body, whether or not it has been submitted to or considered by the Executive body; or (ii) was brought into existence to brief a minister in relation to a matter to be considered by an Executive body; or (iii) was considered by an Executive body; or (iv) is an agenda, minute or other record of the deliberations or decisions of an Executive body; or (v) would disclose information about the deliberations or decisions of an Executive body, other than information that has been published in accordance with a decision of the Executive body; or (vi) would disclose a communication between ministers about the making of a decision or the formulation of a policy if the decision or policy is of a kind generally made or endorsed by an Executive body; or -- 41 of 126 -- Part 4 Exemptions in the public interest Division 2 Disclosure generally is not in the public interest Information Act 2002 34 (vii) was brought into existence to brief a minister in relation to a matter the subject of consultation between ministers about the making of a decision or the formulation of a policy if the decision or policy is of a kind generally made or endorsed by an Executive body; or (viii) is a draft of information mentioned in subparagraph (i), (ii), (iii), (iv), (v), (vi) or (vii); or (b) disclosure of the information would prejudice the ability of the Territory Government to manage the Territory economy or would otherwise seriously damage the Territory economy; or (c) disclosure of the information would result in an unfair benefit or detriment to a person by prematurely disclosing decisions in respect of government policy about one or more of the following: (i) taxation; (ii) the stability, control or adjustment of prices of goods or services, rents or other costs or of rates of wages, salaries or other incomes; (iii) borrowing of money by the Territory; (iv) entering into trade agreements with the Commonwealth, a State or another Territory of the Commonwealth or another country. (2) Information mentioned in subsection (1)(a) is not exempt under section 44 if the information is purely statistical, technical, scientific or factual material unless disclosure of the information would involve the disclosure of a deliberation or decision of an Executive body. (3) Information mentioned in subsection (1)(a) is not exempt under section 44 if a period of 10 years has elapsed since the information came into existence. (4) In this section: Executive body means: (a) the Executive Council or a committee of the Executive Council; or (b) Cabinet or a committee of Cabinet. -- 42 of 126 -- Part 4 Exemptions in the public interest Division 2 Disclosure generally is not in the public interest Information Act 2002 35 46 Security and law enforcement (1) Information is exempt under section 44 if disclosure of the information would prejudice: (a) the security or defence of the Commonwealth or a State or Territory of the Commonwealth; or (b) the maintenance of law and order in the Territory as specified in subsections (2) and (3). (2) The disclosure of information prejudices the maintenance of law and order in the Territory if it: (a) prejudices the investigation of a breach or possible breach of the law (whether generally or in a particular case); or (b) discloses the identity of a confidential source of information connected with the detection of unlawful conduct or the enforcement or administration of the law; or (c) discloses methods or procedures for preventing, detecting, investigating or otherwise dealing with matters connected with breaches or evasions of the law and disclosure of those methods or procedures prejudices or is likely to prejudice their effectiveness; or (d) discloses a matter that facilitates or is likely to facilitate a person's escape from lawful custody; or (e) endangers the life or physical safety of a person; or (f) is information, originating from a Police Force Intelligence Division, relating to an authorised operation or a corresponding authorised operation as defined in section 3 of the Police (Special Investigative and Other Powers) Act 2015; or (g) reveals that an assumed identity, acquired or used by a person in accordance with Part 3 of the Police (Special Investigative and Other Powers) Act 2015, is not the person's real identity; or (h) reveals the identity of an operative (as defined in section 73 of the Police (Special Investigative and Other Powers) Act 2015), or where the operative lives, where the disclosure is not: (i) authorised by leave or an order under section 81 of that Act; or -- 43 of 126 -- Part 4 Exemptions in the public interest Division 2 Disclosure generally is not in the public interest Information Act 2002 36 (ii) permitted under section 84 of that Act. (3) The disclosure of information does not prejudice the maintenance of law and order in the Territory if it discloses information that: (a) reveals that the scope of a law enforcement investigation has exceeded limits imposed by law; or (b) reveals the use of illegal methods or procedures for preventing, detecting, investigating, or dealing with matters arising out of, breaches or evasion of the law; or (c) contains a general outline of the structure of a program adopted by a public sector organisation for investigating breaches of, or enforcing or administering, the law; or (d) is a report on the degree of success achieved in a program adopted by a public sector organisation for investigating breaches of, or enforcing or administering, the law; or (e) is a report prepared in the course of routine law enforcement inspections or investigations by a public sector organisation that has a function of enforcing and regulating compliance with a particular law other than the criminal law; or (f) is a report on a law enforcement investigation where the substance of the report has been disclosed to the person or body the subject of the investigation. 47 Information exempt under corresponding FOI laws Information is exempt under section 44 if: (a) it is information that originated with, or has been received from, a person appointed, or a body established, by or under a law of the Commonwealth or of a State or another Territory of the Commonwealth; and (b) the person or body would not be required to disclose the information under the corresponding FOI law of that jurisdiction. -- 44 of 126 -- Part 4 Exemptions in the public interest Division 2 Disclosure generally is not in the public interest Information Act 2002 37 48 Secrecy provisions Information is exempt under section 44 for an applicant if its disclosure to the applicant would be an offence against a provision specified in Schedule 1. Note for section 48 Each provision in Schedule 1 creates an offence against disclosure of specified information in specified circumstances. 49 Preservation of system of justice Information is exempt under section 44 if disclosure of the information would: (a) prejudice the prosecution of an offence against a law of the Territory or elsewhere; or (b) prejudice the right of a person to a fair trial or impartial adjudication; or (c) disclose information about a proceeding or other matter before a court or tribunal; or (d) breach client legal privilege; or (e) infringe the privileges of the Legislative Assembly or another parliament; or (f) be in contempt of a court or tribunal, or a royal commission or other commission of inquiry, whether in the Territory or elsewhere. 49AA Criminal intelligence Information is exempt under section 44 if, under the Serious Crime Control Act 2009, the information has been classified by the Commissioner of Police as criminal intelligence. 49A Information obtained or created because of investigation Information is exempt under section 44 if it is obtained or created in the course of an action that is: (a) in the nature of an investigation, audit or inquiry; and (b) taken by any of the following: (i) the Children's Commissioner; (ii) the Health Complaints Commissioner; -- 45 of 126 -- Part 4 Exemptions in the public interest Division 2 Disclosure generally is not in the public interest Information Act 2002 38 (iii) the Auditor-General; (iv) a Board or Commissioner appointed under the Inquiries Act 1945; (v) a commission of inquiry established under the Local Government Act 2008. 49B Information under Public Interest Disclosure Act 2008 Information is exempt under section 44 if it is: (a) contained in a public interest disclosure as defined in the Public Interest Disclosure Act 2008, as in force immediately before its repeal; or (b) obtained or created under that Act in the course of, or for the conduct of an investigation of, a public interest disclosure under that Act. 49C Information under Ombudsman Act 2009 Information is exempt under section 44 if it is: (a) contained in a complaint under the Ombudsman Act 2009; or (b) obtained or created under that Act in the course of or for any of the following under that Act: (i) the making of preliminary inquiries; (ii) the conduct of conciliation or mediation of a complaint; (iii) the conduct of the police complaints resolution process; (iv) the conduct of an investigation. 49D Information under Anti-Discrimination Act 1992 Information is exempt under section 44 if it: (a) is obtained from a person seeking information, advice or assistance in relation to the operation of the Anti-Discrimination Act 1992; or (b) is contained in a complaint under that Act; or (c) is obtained or created under that Act in relation to a complaint. -- 46 of 126 -- Part 4 Exemptions in the public interest Division 3 Disclosure in a particular case is not in the public interest Information Act 2002 39 49E Information under Independent Commissioner Against Corruption Act 2017 (1) Information is exempt under section 44 if: (a) the information is obtained or created under the Independent Commissioner Against Corruption Act 2017 in the course of, or for the conduct or making of, any of the following under that Act: (i) an evaluation or review by the ICAC; (ii) preliminary inquiries by the ICAC; (iii) a referral by the ICAC; (iv) an investigation by the ICAC; (v) a report by the ICAC; or (b) the information is identifying information. (2) In this section: identifying information, see section 4 of the Independent Commissioner Against Corruption Act 2017. 49F Information under Integrity and Ethics Commissioner Act 2025 (1) Information is exempt under section 44 if the information is obtained or created by the Inspector in the performance of functions or exercise of powers under the Integrity and Ethics Commissioner Act 2025. (2) In this section: Inspector, see section 3 of the Integrity and Ethics Commissioner Act 2025. Division 3 Disclosure in a particular case is not in the public interest 50 Exemption (1) Government information mentioned in this Division is exempt only if it can be shown that, in the particular case, it is not in the public interest to disclose the information. -- 47 of 126 -- Part 4 Exemptions in the public interest Division 3 Disclosure in a particular case is not in the public interest Information Act 2002 40 (2) To show that, in a particular case, it is not in the public interest to disclose government information, the following matters are irrelevant: (a) the possibility that the disclosure may result in embarrassment to, or a lack of confidence in, the Territory Government or a public sector organisation; (b) the possibility that the applicant may misunderstand the information disclosed. 51 Inter-governmental relations Information may be exempt under section 50 if disclosure of the information would prejudice inter-governmental relations between an Australian body politic and a body politic overseas or between 2 or more bodies politic in Australia or in the Territory. 52 Deliberative processes (1) Information may be exempt under section 50 if disclosure of the information would disclose: (a) an opinion, advice or recommendation brought into existence by or on behalf of a public sector organisation in the course of, or for the purposes of, the deliberative processes that are part of the functions of the organisation; or (b) a record of consultations or deliberations of a public sector organisation in the course of, or for the purposes of, such deliberative processes. (2) Information mentioned in subsection (1) is not exempt under section 50 if the information is purely statistical, technical, scientific or factual. (3) Information mentioned in subsection (1) is not exempt under section 50 if the information is: (a) a final decision, order or ruling given or made in the exercise of an adjudicative function; or (b) the reasons for such a decision, order or ruling. (4) Information mentioned in subsection (1) is not exempt under section 50 if a period of 10 years has elapsed since the information was brought into existence. -- 48 of 126 -- Part 4 Exemptions in the public interest Division 3 Disclosure in a particular case is not in the public interest Information Act 2002 41 (5) To show that, in a particular case, it is not in the public interest to disclose government information mentioned in subsection (1), a public sector organisation may have regard to the following factors: (a) the more senior the person who created, annotated or considered the information and the more sensitive the information, the more likely it will be that the information should not be disclosed (but the seniority of the person is not by itself a sufficient reason not to disclose the information); (b) the disclosure of information that was brought into existence in the course of the development and subsequent promulgation of policy tends not to be in the public interest; (c) the disclosure of information that will inhibit frankness and candour in future pre-decisional considerations is likely not to be in the public interest; (d) the disclosure of information that has the potential to inhibit the independence of the decision-maker because of the possibility that the disclosure could result in the decision- maker being unduly pressured or harassed is likely not to be in the public interest; (e) the disclosure of information where there is a risk that the disclosure will result in a mischievous interpretation of the information is likely not to be in the public interest; (f) the disclosure of information that will lead to confusion and unnecessary debate resulting from disclosure of possibilities considered tends not to be in the public interest (but a tentative or optional quality of the information is not by itself a sufficient reason not to disclose the information); (g) the disclosure of information that does not fairly disclose the reasons for a decision subsequently taken may be unfair to a decision-maker and may prejudice the integrity of the decision-making process. 53 Effective operations of public sector organisations Information may be exempt under section 50 if disclosure of the information is reasonably likely to: (a) prejudice the effectiveness of a method or procedure for the conduct of a test, examination or audit by a public sector organisation; or (b) prejudice the attainment of the objects of a test, assessment or audit conducted by a public sector organisation; or -- 49 of 126 -- Part 4 Exemptions in the public interest Division 3 Disclosure in a particular case is not in the public interest Information Act 2002 42 (c) have a substantial, adverse effect on the management by a public sector organisation of the officers or employees of the organisation; or (d) have a substantial, adverse effect on the conduct of industrial relations by a public sector organisation. 54 Health, safety, environment and place of significance Information may be exempt under section 50 if disclosure of the information would: (a) pose a serious threat to the life or health of a person; or (b) prejudice measures for the protection of the health or safety of the public; or (c) harm the habitats of, or prejudice measures to protect or manage, species of flora or fauna the continued survival of which are at risk; or (ca) harm, or prejudice measures to protect, a place of scientific, cultural or historical significance (including anything situated in the place); or (d) prejudice the administration, management or security of a custodial correctional facility (as defined in section 11(1)(a) of the Correctional Services Act 2014) or detention centre. 55 Confidentiality obligations, confidential sources (1) Information may be exempt under section 50 if disclosure of the information (otherwise under this Act or another Act) would be a breach of confidence for which a legal remedy could be obtained. (2) Information mentioned in subsection (1) is not exempt under section 50 unless its disclosure would enable a legal remedy to be obtained for a breach of confidence owed to a person other than: (a) a person in their capacity as: (i) a minister; or (ii) a member of the staff of a minister; or (iii) a member of a public sector organisation; or (b) the Territory or a public sector organisation. -- 50 of 126 -- Part 4 Exemptions in the public interest Division 3 Disclosure in a particular case is not in the public interest Information Act 2002 43 (3) Information may be exempt under section 50 if: (a) the information was communicated in confidence to a public sector organisation; and (b) either: (i) the information would be exempt under this Part if it had been brought into existence by a public sector organisation; or (ii) disclosure of the information would be reasonably likely to impair the ability of a public sector organisation to obtain similar information in the future and it is in the public interest that such similar information continues to be so obtained. (4) Information mentioned in subsection (3) does not include information that: (a) was obtained by a public sector organisation from a business, commercial or financial undertaking; and (b) is a trade secret or other information of a business, commercial or financial nature. (5) Information mentioned in subsection (3) is not exempt under section 50 if a period of 5 years has elapsed since the information was communicated to the public sector organisation. (6) The Commissioner may, on application and if of the opinion that it is in the public interest to do so, extend the period mentioned in subsection (5) in its application to particular information on one or more occasions and on each such occasion for a limited, specified period or for an unlimited period. 56 Privacy and cultural information (1) Information may be exempt under section 50 if disclosure of the information would: (a) be an unreasonable interference with a person's privacy; or (b) disclose information about an Aboriginal sacred site or Aboriginal tradition. (2) Disclosure of information may be an unreasonable interference with a person's privacy even though the information arises from or out of the performance of a public duty. -- 51 of 126 -- Part 4 Exemptions in the public interest Division 3 Disclosure in a particular case is not in the public interest Information Act 2002 44 57 Commercial and business information, research, examination papers (1) Information may be exempt under section 50 if disclosure of the information would disclose information obtained by a public sector organisation from a business, commercial or financial undertaking that is: (a) a trade secret; or (b) other information of a business, commercial or financial nature and the disclosure is likely to expose the undertaking unreasonably to disadvantage. (2) To decide whether disclosure of information is likely to expose an undertaking unreasonably to disadvantage, a public sector organisation may have regard to the following considerations: (a) whether the information is generally available to the undertaking's competitors; (b) whether the information would be exempt under this Part if it had been brought into existence by a public sector organisation; (c) whether the information could be disclosed without causing substantial harm to the competitive position of the undertaking; (d) whether there are any considerations in the public interest in favour of disclosure that outweigh considerations of competitive disadvantage to the undertaking (for example, the public interest in evaluating aspects of government regulation of corporate practices or environmental controls); (e) any other considerations that in the opinion of the public sector organisation are relevant. (3) Information may be exempt under section 50 if disclosure of the information would disclose: (a) a trade secret of a public sector organisation; or (b) information about a public sector organisation that is engaged in trade or commerce where the information is of a business, commercial or financial nature and the disclosure is reasonably likely to expose the organisation unreasonably to disadvantage; or -- 52 of 126 -- Part 4 Exemptions in the public interest Division 4 Exemption certificates Information Act 2002 45 (c) the results of scientific or technical research undertaken or being undertaken by a public sector organisation where: (i) the research could lead to a patentable invention; or (ii) the disclosure of the results in an incomplete state is reasonably likely to expose a business, commercial or financial undertaking unreasonably to disadvantage; or (iii) the disclosure of the results before completion of the research is reasonably likely to expose the public sector organisation unreasonably to disadvantage; or (d) an examination paper, a paper submitted by a student in the course of an examination, an examiner's report or any other similar document where the uses to which the paper, report or other document have not been completed. (4) Information mentioned in subsection (1) is not exempt under section 50 if a period of 5 years has elapsed since the information was obtained by the public sector organisation. (5) Information mentioned in subsection (3) is not exempt under section 50 if a period of 5 years has elapsed since the information came into existence. (6) The Commissioner may, if of the opinion that it is in the public interest to do so, extend the period mentioned in subsection (4) or (5) on one or more occasions and on each such occasion for a limited, specified period or for an unlimited period. 58 Financial and property interests of Territory or public sector organisation Information may be exempt under section 50 if disclosure of the information is reasonably likely to have a substantial, adverse effect on the financial or property interests of the Territory or of a public sector organisation. Division 4 Exemption certificates 59 Exemption (1) Government information the subject of an exemption certificate is exempt. (2) An exemption certificate is conclusive evidence that it is not in the public interest to disclose government information identified in the certificate (whether the information exists or not). -- 53 of 126 -- Part 4 Exemptions in the public interest Division 4 Exemption certificates Information Act 2002 46 60 Issuing exemption certificate (1) The Chief Minister may issue an exemption certificate certifying that government information identified in the certificate is exempt because it is: (a) information mentioned in section 45(1)(a) other than information to which section 45(2) or (3) applies; or (b) information mentioned in section 46(1); or (c) information mentioned in section 56. (2) The Chief Minister is not required to confirm or deny in the exemption certificate that the information identified in the certificate exists. (3) If the Chief Minister does confirm in the exemption certificate that the information exists, he or she must also specify in the certificate that it is: (a) information mentioned in section 45(1)(a) other than information to which section 45(2) or (3) applies; or (b) information mentioned in section 46(1); or (c) information mentioned in section 56. 61 Duration of exemption certificate (1) An exemption certificate has effect: (a) for 2 years from the date on which the Chief Minister signs it; or (b) until it is revoked by him or her; whichever occurs first. (2) There is no limit to the number of times the Chief Minister may issue an exemption certificate in respect of the same information. 62 Exemption certificate not to be queried Despite any other Act, no person or body is entitled to investigate, inquire into, review or otherwise call into question: (a) the issue of an exemption certificate in respect of government information; or -- 54 of 126 -- Part 5 Protection of privacy Division 1 Information privacy principles Information Act 2002 47 (b) the number of times an exemption certificate has been issued in respect of government information. 63 Exemption certificate not to be issued after complaint made (1) Once a complaint under section 103 has been made, the Chief Minister is not entitled to issue an exemption certificate in respect of the government information the subject of the complaint. (2) Subsection (1) operates only in respect of the complaint mentioned in that subsection. 64 Delegation not permitted The Chief Minister must not delegate any of his or her functions or powers under this Division. Part 5 Protection of privacy Division 1 Information privacy principles 65 What are IPPs? (1) The information privacy principles (IPPs) are the principles for collecting and handling personal information by public sector organisations that are specified in Schedule 2. (2) If there is an inconsistency between an IPP and another provision of this Act, to the extent of the inconsistency, the other provision applies and the IPP does not apply. 66 What information do IPPs apply to? (1) IPP 1 (Collection) and IPP 10 (Sensitive information) apply in relation to personal information that a public sector organisation collects at any time after this Part commences. (2) IPPs 2 to 9 (inclusive) apply in relation to personal information that a public sector organisation handles at any time after this Part commences, regardless of when the organisation collected the information. 67 What is an interference with a person's privacy? A public sector organisation interferes with a person's privacy if the organisation contravenes an IPP, a code of practice or an authorisation. -- 55 of 126 -- Part 5 Protection of privacy Division 2 Exemptions from IPPs Information Act 2002 48 Division 2 Exemptions from IPPs 68 Publicly available information (1) The IPPs (other than IPP 1 (Collection) and IPP 3 (Data quality)) do not apply in relation to personal information that: (a) is published in a publication (which may be an electronic publication) generally available to members of the public; or (b) is on a public register, except to the extent specified in subsection (2); or (c) is in an archive available to the public under Part 9, Division 4 (Managing archives); or (d) is recorded information of permanent value that forms part of the Territory Archives but is not a record; or (e) is in a collection of a library, art gallery or museum if the collection is on public exhibition or is available to the public for reference or study purposes. (2) A public register is to be kept in compliance with the IPPs to the extent that it is reasonably practicable to do so given the requirements imposed by or under an Act for keeping the register and making it available for public inspection. 69 Courts and tribunals (1) The IPPs do not apply in relation to a proceeding or other matter before a court or tribunal. (2) The IPPs do not apply in relation to information given to a person or entity by a court, or a tribunal prescribed by regulation, to enable the person or entity to give effect to a condition in an order relating to: (a) the treatment, counselling or other intervention to be given to the person who is subject to the order; or (b) the assessment of that person for income management. -- 56 of 126 -- Part 5 Protection of privacy Division 3 Codes of practice Information Act 2002 49 70 Law enforcement agencies A law enforcement agency is not required to comply with an IPP if the agency believes on reasonable grounds that non-compliance is necessary for one or more of its or another law enforcement agency's functions, including the following: (a) to prevent, detect, investigate, prosecute or punish the commission of an offence against a law of the Territory or any other offence or breach of a law imposing a penalty or sanction for a breach; (b) to manage property seized or restrained under laws relating to the confiscation of the proceeds of crime or the enforcement of those laws or orders under those laws; (c) to execute or implement an order or decision of a court or tribunal, including to execute warrants, to provide correctional services and to make decisions relating to the release of a person from lawful custody; (d) to locate missing persons and next of kin; (e) to provide services in emergency and disaster situations; (f) if the agency is the Police Force of the Northern Territory – its community policing function. Division 3 Codes of practice 72 Public sector organisation may prepare draft code of practice (1) A public sector organisation may prepare a draft code of practice. (2) The draft code may: (a) specify: (i) the manner in which the organisation is to apply one or more IPPs; or (ii) the manner in which the organisation is to comply with one or more IPPs; or (b) apply in relation to: (i) specified personal information or a specified class of personal information; or (ii) a specified activity or a specified class of activities; or -- 57 of 126 -- Part 5 Protection of privacy Division 3 Codes of practice Information Act 2002 50 (c) modify an IPP, but only if: (i) the organisation is not otherwise capable of complying with the IPP; and (ii) the draft code modifies the IPP only to the extent necessary to enable the organisation to comply with the IPP; and (iii) the draft code gives effect as nearly as possible to the objects of the IPP. (3) The matters that the draft code may provide for include but are not limited to the following: (a) the control of data matching and data linkage for the purpose of producing or verifying personal information; (b) how a public register is to be kept so as to comply with the IPPs to the extent that it is reasonably practicable to do so given the requirements imposed by or under an Act for keeping the register and making it available for public inspection; (c) the review of the draft code by the organisation, including the review procedure; (d) when the draft code is to cease to have effect. (4) In preparing the draft code, the organisation may: (a) consult with the Commissioner or any other person it considers appropriate; or (b) seek comment or submissions from the public. (5) For this section, a draft code of practice may be prepared by or on behalf of a public sector organisation or a group of public sector organisations, including a local government council or a group of local government councils. 73 Commissioner may approve code of practice (1) A public sector organisation may submit a draft code of practice to the Commissioner for approval. -- 58 of 126 -- Part 5 Protection of privacy Division 3 Codes of practice Information Act 2002 51 (2) The Commissioner may, by Gazette notice, approve the draft code as a code of practice, if the Commissioner is satisfied that: (a) the draft code substantially complies with the objects of this Act in relation to the personal information to which it applies; and (b) the public sector organisation will be able to comply with the draft code; and (c) the draft code is not contrary to the public interest. (3) A notice of approval is to specify the public sector organisation to whom the code of practice applies. 76 When does a code of practice take effect? A code of practice approved under section 73 takes effect on: (a) the date the notice of approval is published in the Gazette; or (b) the date specified in that notice, whichever is later. 77 Variation of code of practice (1) A code of practice may be varied at any time. (2) This Division applies in respect of a variation of a code of practice as if references to a code of practice were references to a variation of a code of practice. 78 Revocation of code of practice The minister responsible for the public sector organisation to whom a code of practice applies may, by Gazette notice, revoke the code of practice. 79 Compliance with code of practice (1) A public sector organisation must comply with a code of practice. (2) If there is an inconsistency between an IPP and a code of practice, to the extent of the inconsistency, the IPP does not apply to the public sector organisation and the organisation must comply with the code of practice. 80 Register of codes of practice (1) The Commissioner must keep a register of codes of practice. -- 59 of 126 -- Part 5 Protection of privacy Division 4 Authorisations Information Act 2002 52 (2) The register must include a copy of each code of practice. (3) The register is to contain the following details in respect of each code of practice registered: (a) the public sector organisation or organisations to which it applies; (b) the date the code was approved and, if different, the date the code took effect; (c) the date any variation of the code was approved and, if different, the date the variation took effect. (4) The Commissioner must: (a) publish the register on the Commissioner's website; and (b) if requested by a member of the public – provide a copy of an entry in or extract from the register on payment of the prescribed fee. Division 4 Authorisations 81 Grant of authorisation generally (1) On the application of a public sector organisation, the Commissioner may authorise in writing the organisation to collect, use or disclose personal information in a manner that would otherwise contravene or be inconsistent with the IPPs. (2) The Commissioner may only grant an authorisation if, having regard to the purpose for collecting, using or disclosing the personal information, the Commissioner is satisfied that: (a) the public interest in collecting, using or disclosing the information outweighs to a substantial degree the interference with the privacy of persons that might result from collecting, using or disclosing the information; or (b) the benefit to persons of collecting, using or disclosing the information outweighs the interference with the privacy of those persons that might result from collecting, using or disclosing the information. (3) An authorisation is subject to the terms and conditions specified in the authorisation. -- 60 of 126 -- Part 5 Protection of privacy Division 4 Authorisations Information Act 2002 53 81A Authorisation related to an emergency situation or a public health emergency (1) A public sector organisation is authorised to collect, use or disclose personal information in a manner that would otherwise contravene or be inconsistent with the IPPs: (a) during an emergency situation or a public health emergency; and (b) if the information is to be collected, used or disclosed for a permitted purpose in relation to the emergency situation or public health emergency. (2) On the application of a public sector organisation, the Commissioner may authorise in writing the organisation to collect, use or disclose personal information in a manner that would otherwise contravene or be inconsistent with the IPPs: (a) for a period of time after the end of an emergency situation or a public health emergency; and (b) if the information is to be collected, used or disclosed for a permitted purpose in relation to the emergency situation or public health emergency. (3) In this section: permitted purpose, in relation to an emergency situation or a public health emergency, means a purpose that directly relates to the Territory's response to, management of or recovery from the emergency situation or public health emergency and may include the purpose of: (a) coordinating operations for the response, management or recovery; and (b) identifying individuals who: (i) are or may be injured, missing or dead as a result of the emergency situation or public health emergency; or (ii) are or may be otherwise involved in the emergency situation or public health emergency; and (c) assisting individuals involved in the emergency situation or public health emergency in obtaining services such as repatriation services, medical or other treatment, health services, financial and other humanitarian assistance; and -- 61 of 126 -- Part 5 Protection of privacy Division 5 Compliance notices Information Act 2002 54 (d) assisting with law enforcement in relation to the emergency situation or public health emergency. Division 5 Compliance notices 82 Commissioner may serve compliance notice (1) The Commissioner may serve a compliance notice on a public sector organisation if it appears to the Commissioner that: (a) the organisation has contravened an IPP or a code of practice; and (b) the contravention: (i) is serious or flagrant; or (ii) is of a kind that has been done by the organisation on at least 3 separate occasions within the previous 2 years. (2) A compliance notice is a notice in writing requiring the public sector organisation to take specified action within a specified period to ensure the organisation complies with the IPP or code of practice in the future. (3) The Commissioner may serve a compliance notice: (a) on his or her own initiative; or (b) because of a complaint made under Part 7. 83 Extension of time to comply (1) A public sector organisation on whom a compliance notice has been served may apply to the Commissioner for an extension of the period within which to comply with the notice. (2) The Commissioner must not consider an application for an extension unless the application is made before the period sought to be extended expires. (3) The Commissioner may grant an extension if: (a) satisfied that it is not reasonably possible for the public sector organisation to take the action specified in the notice within the period specified in the notice; and (b) the organisation gives the Commissioner an undertaking to take that action within the extended period. -- 62 of 126 -- Part 6 Information commissioner Division 1 Establishment, functions and powers Information Act 2002 55 (4) If the Commissioner grants an extension, the compliance notice is taken to have been amended accordingly. 84 Report about non-compliance (1) If the Commissioner is satisfied that a public sector organisation has failed to comply with a compliance notice, the Commissioner may report to the Minister on: (a) the organisation's contravention mentioned in section 82(1); and (b) the specified action that the compliance notice required the organisation to take; and (c) the organisation's failure to take that action. (2) Before giving the report to the Minister, the Commissioner must: (a) give the public sector organisation a reasonable opportunity to consider and comment on its content; and (b) take into account those comments in finalising the report. (3) The Minister must table a copy of the report in the Legislative Assembly within 6 sitting days after receiving it. (4) Section 101(3) does not apply to a public sector organisation's failure to comply with a compliance notice. Part 6 Information commissioner Division 1 Establishment, functions and powers 85 Information Commissioner There is to be an Information Commissioner. Notes for section 85 1 Section 11 of the Integrity and Ethics Commissioner Act 2025 provides that while a person holds office as the Integrity and Ethics Commissioner, the person also holds office as the Information Commissioner. 2 Section 21 of the Integrity and Ethics Commissioner Act 2025 provides that while a person is appointed to act as the Integrity and Ethics Commissioner, the person also acts as the Information Commissioner. 3 Section 61 of the Integrity and Ethics Commissioner Act 2025 also provides for the appointment of an acting Information Commissioner. -- 63 of 126 -- Part 6 Information commissioner Division 1 Establishment, functions and powers Information Act 2002 56 86 Functions of Commissioner (1) In addition to the functions conferred on the Commissioner elsewhere under this Act, the functions of the Commissioner include the following: (a) to develop and issue guidelines to public sector organisations about the following: (i) freedom of information; (ii) the correction of personal information; (iii) the protection of privacy; (iv) for IPP 2.1(ca) – the use and disclosure of health information; (b) to promote within public sector organisations an understanding and acceptance of the principles of freedom of information; (c) to promote within public sector organisations an understanding and acceptance of the IPPs and their objects; (d) to provide advice and training to public sector organisations on the freedom of information and privacy provisions of this Act; (e) to conduct audits of the records held by public sector organisations to determine the extent to which those organisations are complying with the privacy provisions of this Act; (f) to examine and assess proposed legislation and policies relevant to freedom of information and privacy; (g) to research and monitor developments in relation to freedom of information and the protection of privacy; (h) to undertake educational programs to promote public awareness of freedom of information and privacy; (i) to make public statements about matters relevant to freedom of information and privacy; (j) to consult and co-operate with other persons and bodies in relation to freedom of information and the protection of privacy; -- 64 of 126 -- Part 6 Information commissioner Division 1 Establishment, functions and powers Information Act 2002 57 (k) the functions conferred on the Commissioner under any other Act. (2) In performing his or her functions under this Act, the Commissioner must have regard to and act consistently with the objects of this Act. 87 Powers of Commissioner (1) In addition to the specific powers provided elsewhere under this Act or under any other Act, the Commissioner has the powers that are necessary and convenient for the performance of his or her functions under this Act and any other Act. (2) For: (a) dealing with a complaint; or (b) deciding whether or not to serve a compliance notice; or (c) conducting an audit under section 86(1)(e); the Commissioner: (d) is entitled to full and free access at all reasonable times to the records, or other things, of a public sector organisation; and (e) may require a public sector organisation to answer a question or to produce a record or other thing. 88 Duty to assist persons to exercise rights (1) Subject to subsection (2), the Commissioner's staff must provide appropriate assistance to persons to enable them to exercise their rights under this Act, including assisting persons to make applications or complaints. (2) The Commissioner or a member of the Commissioner's staff must not give legal advice to a person. 89 Delegation (1) Subject to subsection (2), the Commissioner may delegate in writing to a person any of his or her powers or functions under this Act or any other Act. (2) The Commissioner must not delegate a power or function under subsection (1) without the approval of the Minister. -- 65 of 126 -- Part 6 Information commissioner Division 3 Miscellaneous Information Act 2002 58 Division 3 Miscellaneous 96 Staff and consultants (1) All members of the staff of the Commissioner are to be public sector employees. (3) The Commissioner may engage the consultants he or she considers necessary for performance of his or her functions under this Act or any other Act. 98 Annual report (1) The Commissioner must provide the Minister with a report on the operations of the Commissioner's office during each financial year. (2) The report must: (a) contain details of anything done by or on behalf of a public sector organisation that, in the Commissioner's opinion, interfered with a person's privacy, whether what was done was the subject of a complaint or not; and (b) specify the following in respect of each public sector organisation: (i) the number of requests for access to government information the organisation received and dealt with; (ii) the number of decisions the organisation made providing access to government information, providing access to edited copies of government information or refusing access to government information; (iii) the number of times the organisation refused access to government information on the ground that it was exempt or that the applicant was not entitled to access under this Act; (iv) the number of requests to correct personal information the organisation received and dealt with; (v) the number of decisions the organisation made correcting personal information or refusing to correct personal information; (vi) the number of requests for review under Part 3, Division 4 (Review by public sector organisation) the organisation received and the outcomes of those reviews; -- 66 of 126 -- Part 6 Information commissioner Division 3 Miscellaneous Information Act 2002 59 (vii) the number of complaints made under Part 7 (Complaints to Information Commissioner) about the organisation and the outcomes of those complaints; (viii) the number of times the Commissioner has granted an authorisation to the organisation and the nature of each of those authorisations; (ix) the number of times the Commissioner has made a declaration under section 42 that a person is a vexatious applicant in relation to the organisation and the nature of each of those declarations; (x) the fees charged by the organisation under this Act and details of any fees reduced or waived by the organisation; and (c) specify the number of exemption certificates issued, including how many of those certificates neither confirmed nor denied the existence of the information the subject of the certificate; and (d) include financial statements in respect of the operations of the Commissioner's office during the financial year to which the report relates; and (e) include any matter that the Minister directs in writing the Commissioner to include in the report; and (f) include any matter prescribed by regulation to be included in the report. (3) A public sector organisation must comply with a request from the Commissioner for the information mentioned in subsection (2)(b)(i) to (vi) and (x). (4) The Chief Minister must comply with a request from the Commissioner for the information mentioned in subsection (2)(c). (5) The Commissioner must forward the report to the Minister within 3 months after the end of the financial year to which it relates. (6) The Minister must table a copy of the report in the Legislative Assembly within 6 sitting days after receiving it. 99 Special report (1) The Minister may direct in writing the Commissioner to report to him or her on a matter connected with the operation of this Act. -- 67 of 126 -- Part 6 Information commissioner Division 3 Miscellaneous Information Act 2002 60 (2) The Commissioner must comply with the Minister's direction. 101 Obstruction, improper influence and contravention of requirement or direction (1) A person commits an offence if: (a) the person intentionally obstructs another person; and (b) the other person is the Commissioner; and (c) the person knows the Commissioner is acting in an official capacity. Maximum penalty: 200 penalty units or imprisonment for 12 months. (2) A person commits an offence if: (a) the person intentionally and improperly influences another person; and (b) the other person is the Commissioner; and (c) the person knows the Commissioner is acting in an official capacity. Maximum penalty: 200 penalty units or imprisonment for 12 months. (3) A person commits an offence if: (a) the Commissioner makes a requirement of, or gives a direction to, the person under this Act; and (b) the person intentionally engages in conduct; and (c) the conduct results in the person failing to comply with the requirement or direction. Maximum penalty: 200 penalty units or imprisonment for 12 months. (4) Strict liability applies to subsections (1)(b), (2)(b) and (3)(a). (5) It is a defence to a prosecution for an offence against subsection (1), (2) or (3) if the person has a reasonable excuse. -- 68 of 126 -- Part 7 Complaints to information commissioner Information Act 2002 61 (6) In this section: acting in an official capacity, in relation to the Commissioner, means the Commissioner is exercising powers or performing functions under, or otherwise related to the administration of, this Act. obstruct includes hinder and resist. 102 Commissioner must not disclose exempt information This Act does not authorise or permit the Commissioner to disclose government information that is exempt under Part 4 (Exemptions in the public interest) by publishing the information in: (a) a report under section 98 or 99; or (b) a decision or order made, or reasons for decision given, under Part 7; or (c) any other form. Part 7 Complaints to information commissioner 103 Complaint after review by public sector organisation (1) A person aggrieved by a decision of a public sector organisation on an application for review by the organisation under Part 3, Division 4 (including a decision made on a further review mentioned in subsection (2)(b)) may make a complaint to the Commissioner about the decision. (2) If the Commissioner considers it appropriate to do so, the Commissioner may: (a) refer the complaint back to the public sector organisation that made the decision; and (b) require the organisation to conduct a further review of the decision under Part 3, Division 4. (3) Subsection (2) does not apply to a complaint about a decision made on a further review mentioned in subsection (2)(b). (4) If an application for a review of a decision of a public sector organisation is sent to the Commissioner by the organisation under section 39A(1), the Commissioner must deal with the application as a complaint about the decision under subsection (1). -- 69 of 126 -- Part 7 Complaints to information commissioner Information Act 2002 62 (5) Subsections (2) and (3) apply to an application that is dealt with under subsection (4) as a complaint as if the references in subsection (2)(b) and (3) to a further review were references to a review. 104 Complaint about interference with privacy (1) A person may make a complaint to the Commissioner about a public sector organisation on one or both of the following grounds: (a) that the organisation has collected or handled the person's personal information in a manner that contravenes: (i) an IPP; or (ii) a code of practice; or (iii) an authorisation; or (iv) Chapter 5A of the Domestic and Family Violence Act 2007; (b) that the organisation has otherwise interfered with the person's privacy. (2) A person is not entitled to make a complaint under subsection (1) unless the person: (a) has requested the public sector organisation to resolve or rectify the matter complained of; and (b) has not received a response or is not satisfied with the response received. (3) The Commissioner may deal with a complaint referred to him or her by: (a) the Ombudsman under section 32 of the Ombudsman Act 2009; or (b) the Health Complaints Commissioner under section 27 of the Health and Community Services Complaints Act 1998; or (c) a person or body under a corresponding privacy law, as if it were a complaint made under subsection (1). -- 70 of 126 -- Part 7 Complaints to information commissioner Information Act 2002 63 104A Complaints may be dealt with jointly The Commissioner may deal with 2 or more complaints jointly if: (a) the complaints concern the same or related facts or circumstances; or (b) the Commissioner is satisfied it is otherwise appropriate for the complaints to be dealt with jointly. 105 Form of complaint A complaint is to: (a) be in writing in a form approved by the Commissioner; and (b) specify the name of the complainant; and (c) specify the respondent; and (d) if the complaint is made under section 103 – identify the decision and the application for review on which the decision was made; and (e) if the complaint is made under section 104: (i) identify the matter complained of; and (ii) set out details of the attempts made by the person to have the organisation resolve or rectify that matter and the outcomes of those attempts; and (f) set out the reasons for making the complaint; and (g) specify an address to which correspondence regarding the complaint may be sent to the complainant. 106 Commissioner to accept, reject or refer complaint (1) Within 90 days after receiving a complaint, the Commissioner must: (a) decide whether to accept or reject the complaint or to refer the complaint under section 103(2); and (b) notify the complainant in writing of that decision. (2) In deciding whether to accept, reject or refer the complaint, the Commissioner may request the complainant: (a) to attend before the Commissioner to discuss the complaint; or -- 71 of 126 -- Part 7 Complaints to information commissioner Information Act 2002 64 (b) to provide records or other information to support the complaint. (3) The Commissioner may reject a complaint if the Commissioner is satisfied that: (a) if the complaint is made under section 103 – the complaint was not made within 90 days after the complainant was notified of the decision by the respondent; or (b) if the complaint is made under section 104 – the complaint does not disclose a contravention of an IPP, a code of practice, an authorisation or Chapter 5A of the Domestic and Family Violence Act 2007 in respect of the complainant's personal information or any other interference with the complainant's privacy; or (c) if the complaint is made under section 104: (i) the complainant has not requested the respondent to resolve or rectify the matter complained of; or (ii) the respondent is dealing with, or has dealt with, the matter adequately or has not had sufficient time to deal with the matter; or (d) if the complaint is made under section 104 – the complaint is made more than 12 months after the complainant became aware that there had been a contravention of an IPP, a code of practice, an authorisation or Chapter 5A of the Domestic and Family Violence Act 2007 in respect of the complainant's personal information or any other interference with the complainant's privacy; or (e) the complaint is trivial, frivolous or vexatious; or (f) the complaint is misconceived or lacking in substance; or (g) the matter complained of is more appropriately dealt with under another law or by a court or tribunal or by another person or body. (4) The Commissioner may reject a complaint if: (a) the matter complained of is being, or has been, dealt with already under this Division; or (b) there are currently proceedings before a court or tribunal in respect of the matter complained of. -- 72 of 126 -- Part 7 Complaints to information commissioner Information Act 2002 65 (5) If the Commissioner rejects a complaint for a reason other than a reason specified in subsection (3)(c)(i) or (ii), the complainant is not entitled to make another complaint about the same matter. 107 Notification of acceptance, rejection or referral (1) For section 106(1)(b), a notice of decision is to specify: (a) whether the Commissioner has decided to accept, reject or refer the complaint; and (b) if the Commissioner has decided to reject the complaint – the reason for the rejection. (2) If the Commissioner decides to accept a complaint, the Commissioner must notify the respondent in writing that the complaint has been made and of the substance of the complaint. 108 Referral of complaints to Ombudsman, Health Complaints Commissioner or interstate Privacy Commissioner (1) If a complaint under section 103 is about a matter that could be the subject of a complaint under the Ombudsman Act 2009, the Commissioner may refer the complaint to the Ombudsman. (2) If a complaint under section 103 is about a matter that could be the subject of a complaint under the Health and Community Services Complaints Act 1998, the Commissioner may refer the complaint to the Health Complaints Commissioner. (3) If a complaint under section 104 is about a matter that could be the subject of an application (however described) under a corresponding privacy law, the Commissioner may refer the complaint to the person or body under that law who has functions in relation to the privacy of persons that correspond with those of the Commissioner. (4) The Commissioner must notify: (a) the complainant; and (b) if the Commissioner has notified the respondent in accordance with section 107(2) – the respondent; in writing of the referral. 109 Withdrawal of complaint (1) A complainant may withdraw a complaint at any time by notice in writing to the Commissioner. -- 73 of 126 -- Part 7 Complaints to information commissioner Information Act 2002 66 (2) If a complaint is withdrawn, the Commissioner must notify the respondent in writing that the complaint has been withdrawn. (3) A complainant who withdraws a complaint is not entitled to make another complaint, or to take any other action under this Act, in respect of the matter complained of without the prior written permission of the Commissioner. 109A Commissioner may join person as party The Commissioner may, by written notice served on a person, join the person as a party to a complaint. 110 Investigation of complaint (1) If the Commissioner accepts a complaint, the Commissioner must investigate the matter complained of. (2) Subject to this section, the Commissioner may carry out an investigation in the manner the Commissioner considers appropriate. (2A) If the matter complained of is a decision of a public sector organisation relevant to providing access to information about a third party, the Commissioner may require the public sector organisation: (a) to seek the views of the third party in relation to the disclosure of the information; and (b) if the third party's views are obtained – to inform the Commissioner of those views. (2B) Subsection (2C) applies if: (a) the complaint is made by a third party under section 30(6) or section 103 in relation to a public sector organisation's decision to provide access to information about the third party (the third party information); and (b) during the investigation, the Commissioner is satisfied the applicant no longer wishes to be provided with access to the third party information; and (c) the public sector organisation consents to the Commissioner acting under subsection (2C). -- 74 of 126 -- Part 7 Complaints to information commissioner Information Act 2002 67 (2C) If this subsection applies, the Commissioner may, instead of completing the investigation, determine the complaint by deciding that the applicant must not be provided with access to the third party information. (2D) The Commissioner may dismiss the complaint if, during the investigation or mediation of the matter complained of, the Commissioner is satisfied for any reason, including the complainant not complying with a direction or requirement of the Commissioner, that the complainant no longer wishes to pursue the complaint. (2E) At any time after accepting a complaint, the Commissioner may refer the matter to mediation under section 111. (2F) If the matter is resolved by mediation or other agreement before the investigation is completed, the Commissioner must discontinue the investigation. (3) On completing an investigation, the Commissioner must decide whether there is sufficient prima facie evidence to substantiate the matter complained of. (4) If there is sufficient evidence and the matter has not been referred under subsection (2E) to mediation, the Commissioner must refer the matter to mediation under section 111. (5) If there is insufficient evidence, the Commissioner must dismiss the complaint. (6) The Commissioner must notify the relevant parties in writing of how the Commissioner has dealt with the complaint under this section. 110A Powers to compel evidence For an investigation under section 110, the Commissioner may, in writing, require a person to do one or more of the following: (a) to attend before the Commissioner and produce a record or other thing in the person's possession or control; (b) to give evidence on oath; (c) to answer a question; (d) without attending before the Commissioner, to give the Commissioner a record or other thing in the person's possession or control. -- 75 of 126 -- Part 7 Complaints to information commissioner Information Act 2002 68 111 Mediation is pre-condition to Tribunal proceeding (1) The Tribunal must not conduct a proceeding in relation to a complaint referred to the Tribunal under section 112A(4) unless there has been an attempt to resolve the matter complained of by mediation and the attempt has been unsuccessful. (1A) Subsection (1) does not apply to a complaint that is the subject of an application under section 112A(1)(b). (2) A mediation may be conducted by: (a) the Commissioner if the Commissioner considers that by doing so the matter is more likely to be resolved by mediation; or (b) if paragraph (a) does not apply: (i) a person agreed to by the complainant and the respondent; or (ii) if they cannot agree – a person appointed by the Commissioner. (3) The Commissioner may give directions in relation to the conduct of a mediation. (4) At the conclusion of a mediation, the mediator must issue to the complainant and to the respondent a certificate in a form approved by the Commissioner: (a) stating that mediation has taken place; and (b) setting out any records provided to the mediator by the parties; and (c) setting out any recommendations of the mediator; and (d) setting out the outcome of the mediation. (5) Anything said, recorded or done in the course of mediation under this section (including a certificate under subsection (4)) is not admissible in any proceedings whatsoever. 112 Resolution of complaint by mediation or other agreement (1) If the matter complained of is resolved by mediation or other agreement, the complainant and the respondent may apply jointly to the Commissioner for the orders that, in the opinion of the Commissioner, are sufficient to give effect to the resolution. -- 76 of 126 -- Part 7 Complaints to information commissioner Information Act 2002 69 (2) The Commissioner must not make an order under subsection (1) unless it is an order that the Tribunal could have made under section 114 or 115 in respect of the complaint. (3) The Commissioner must provide in writing to the complainant and to the respondent the orders made under subsection (2). 112A Referral of complaints to Tribunal (1) The complainant may apply to the Commissioner to refer a complaint to the Tribunal if: (a) the Commissioner decides under section 110(3) there is sufficient prima facie evidence to substantiate the matter complained of and that matter is not resolved by mediation or other agreement; or (b) the Commissioner dismisses the complaint under section 110(5). (2) The respondent may apply to the Commissioner to refer a complaint to the Tribunal if the Commissioner decides under section 110(3) there is sufficient prima facie evidence to substantiate the matter complained of and that matter is not resolved by mediation or other agreement. (3) For subsections (1)(a) and (2), the application must be made within 28 days after the applicant has been given both of the following: (a) notification under section 110(6) of the Commissioner's decision under section 110(3) that there is sufficient prima facie evidence to substantiate the matter complained of; (b) a mediator's certificate under section 111(4) in relation to the matter complained of. (4) For subsection (1)(b), the application must be made within 28 days after the complainant has been given notification under section 110(6) of the Commissioner's decision to dismiss the complaint. (5) If the Commissioner receives an application under this section, the Commissioner must: (a) refer the complaint to the Tribunal; and (b) inform the Tribunal whether or not there has been an attempt to resolve the matter complained of by mediation. -- 77 of 126 -- Part 7 Complaints to information commissioner Information Act 2002 70 112B Commissioner to prepare report if complaint is referred to Tribunal (1) Within 60 days after referring a complaint to the Tribunal under section 112A(5), the Commissioner must: (a) prepare a written report in relation to the complaint and the investigation under section 110 of the matter complained of; and (b) provide a copy of the report, and any document or other material the Commissioner believes on reasonable grounds will be relevant to the proceeding, to the Tribunal, the complainant and the respondent. (2) The Commissioner may modify a copy of the report or material provided to the complainant or respondent under subsection (1) to omit any information if the Commissioner is satisfied: (a) the information is not sought by the complainant or is otherwise not relevant to the complaint; or (b) the disclosure of the information: (i) is a matter to be determined by the Tribunal in the proceeding; or (ii) is otherwise not permitted under this Act. (3) This section does not prevent the Tribunal from taking any other evidence in relation to the proceeding. (4) This section does not apply if a report in relation to the complaint has previously been prepared and provided to the Tribunal, unless a further report would provide additional information to the Tribunal. 112C Effect of complaints on acts and decisions (1) The making of a complaint under section 103 does not affect the operation of the decision complained of unless the Commissioner or Tribunal orders otherwise. (2) The making of a complaint under section 104 does not prevent the respondent from repeating or continuing the act complained of, or similar acts, unless the Commissioner or Tribunal orders otherwise. -- 78 of 126 -- Part 7A Tribunal Division 2 Jurisdiction of Tribunal to deal with complaints Information Act 2002 71 112D Role of Ombudsman or Health Complaints Commissioner The Ombudsman or the Health Complaints Commissioner is not entitled to investigate a matter that could be the subject of a complaint under section 103 or 104 unless the Commissioner: (a) refers the complaint to the Ombudsman or the Health Complaints Commissioner under section 108; or (b) otherwise agrees that the Ombudsman or the Health Complaints Commissioner may investigate the matter. Part 7A Tribunal Division 1 Definitions 113 Definitions In this Part: proceeding means the hearing of a matter by the Tribunal in the jurisdiction conferred by section 113A(1). referred to the Tribunal means referred to the Tribunal under section 112A(4). Division 2 Jurisdiction of Tribunal to deal with complaints 113A Jurisdiction (1) The Tribunal has the jurisdiction specified in this Part in relation to a complaint referred to the Tribunal. (2) To avoid doubt, the jurisdiction conferred by subsection (1) forms part of the Tribunal's review jurisdiction mentioned in section 33 of the Northern Territory Civil and Administrative Tribunal Act 2014. 113B Tribunal must conduct proceeding The Tribunal must conduct a proceeding in relation to a complaint referred to the Tribunal. -- 79 of 126 -- Part 7A Tribunal Division 2 Jurisdiction of Tribunal to deal with complaints Information Act 2002 72 113C Tribunal may require public sector organisation to seek views of third party before conducting proceeding If a complaint referred to the Tribunal relates to a decision of a public sector organisation relevant to providing access to information about a third party, before conducting a proceeding the Tribunal may require the public sector organisation: (a) to seek the views of the third party in relation to the disclosure of the information; and (b) if the third party's views are obtained – to inform the Tribunal of those views. 113D Proceeding in relation to dismissed complaint (1) This section applies if the Commissioner decides to dismiss a complaint under section 110(5) on the grounds that there was insufficient prima facie evidence to substantiate the matter complained of. (2) If the Tribunal confirms the Commissioner's decision, the Tribunal may make the orders the Tribunal considers necessary or incidental to give effect to the Tribunal's decision. (3) If the Tribunal decides there was sufficient prima facie evidence to substantiate the matter complained of, the Tribunal may: (a) refer the complaint to the Commissioner for mediation under section 111, whether or not there was an attempt to resolve the matter complained of by mediation before the complaint was dismissed by the Commissioner under section 110(5); or (b) conduct a proceeding in relation to the matter complained of. (4) Sections 114 and 115 apply to a proceeding mentioned in subsection (3)(b). (5) If a complaint is referred to the Commissioner under subsection (3)(a) and the matter complained of is not resolved by mediation or other agreement, the complainant or respondent may apply to the Commissioner under section 112A to refer the complaint to the Tribunal. (6) For section 112A as applied by subsection (5): (a) the Commissioner is taken to have decided under section 110(3) that there is sufficient prima facie evidence to substantiate the matter complained of; and -- 80 of 126 -- Part 7A Tribunal Division 2 Jurisdiction of Tribunal to deal with complaints Information Act 2002 73 (b) section 112A(3)(a) does not apply. 114 Determination of complaint about accessing or correcting information (1) After conducting a proceeding in relation to a complaint under section 103 that is referred to the Tribunal, the Tribunal must: (a) confirm or vary the decision complained of in whole or in part; or (b) revoke the decision in whole or in part and substitute another decision that would have been available to the respondent under Part 3, Division 2 or 3. (2) The Tribunal may make the orders that the Tribunal considers necessary or incidental to give effect to a decision under subsection (1). 115 Determination of complaint about interference with privacy (1) After conducting a proceeding in relation to a complaint under section 104 that is referred to the Tribunal, the Tribunal must make a finding as to whether the matter complained of has been proved in whole or in part or not. (2) In respect of so much of the matter complained of as has been proved, the Tribunal may: (a) make the orders mentioned in subsection (4) that the Tribunal considers appropriate; or (b) decline to make any orders. (3) In respect of so much of the matter complained of as has not been proved, the Tribunal must dismiss the complaint. (4) For subsection (2)(a), the Tribunal may make one or more of the following orders: (a) that the respondent refrain from repeating or continuing to do an act specified in the order; (b) that the respondent redress the loss or damage suffered by the complainant (including injury to feelings and humiliation suffered) in the manner specified in the order, which may include the payment of compensation not exceeding $60 000 or the making of an apology; -- 81 of 126 -- Part 7A Tribunal Division 2 Jurisdiction of Tribunal to deal with complaints Information Act 2002 74 (c) that the respondent correct the complainant's personal information; (d) that the respondent attach a statement provided by the Tribunal to the complainant's personal information. (5) The Tribunal may make the orders that the Tribunal considers necessary or incidental to give effect to a decision or order under this section. 116 Notice of decision (1) The Tribunal must provide in writing to: (a) the complainant; and (b) the respondent; and (c) any other party to the proceeding in relation to the complaint; and (ca) if the Commissioner is not a party to the proceeding, the Commissioner; each of the following: (d) the decision made under section 113D, 114 or 115 in respect of the complaint; (e) any orders made under section 113D, 114 or 115 to give effect to that decision; (f) the reasons for the decision, including any relevant findings of fact. (2) If the Tribunal makes an order of a kind mentioned in section 115(4) in respect of the respondent, the Commissioner: (a) must give to the minister responsible for the respondent a report about the order made; and (b) may include in the report recommendations about the collection or handling of personal information by the respondent. 118 Tribunal may dismiss complaint (1) The Tribunal may dismiss a complaint if the Tribunal is satisfied for any reason, including the complainant not complying with a direction or requirement of the Tribunal, that the complainant no longer wishes to pursue the complaint. -- 82 of 126 -- Part 7A Tribunal Division 3 Procedures Information Act 2002 75 (2) If the Tribunal dismisses a complaint, the Tribunal must notify the Commissioner, the complainant and the respondent as soon as practicable, in writing, that the complaint has been dismissed. (3) A complainant whose complaint has been dismissed is not entitled to make another complaint, or to take any other action under this Act, in respect of the matter complained of without the prior written permission of the Commissioner. Division 3 Procedures 119 Parties (1) The parties to a proceeding are: (a) the complainant; and (b) the respondent; and (c) if the proceeding relates to a complaint dismissed by the Commissioner under section 110(5) – the Commissioner; and (d) any other person who is joined as a party by the Tribunal. (2) The Commissioner is not a party to a proceeding referred to in subsection (1)(c) if: (a) the Commissioner informs the Tribunal, in writing, that the Commissioner does not wish to be a party; and (b) the Commissioner is not joined as a party by the Tribunal under subsection (1)(d). 123 Matters relating to proceeding (1) Despite section 60 of the Northern Territory Civil and Administrative Tribunal Act 2014, a proceeding is closed to the public unless the Tribunal orders otherwise. (2) The following persons are entitled to be present during a proceeding: (a) the parties; (b) the representatives of the parties; (c) the Commissioner; (d) members of the Commissioner's or Tribunal's staff; -- 83 of 126 -- Part 8 Appeals from decisions of Information Commissioner or Tribunal Information Act 2002 76 (e) a person giving evidence or producing a record at the proceeding, but only while giving evidence or producing the record; (f) a person whom the Tribunal directs to be, or directs is entitled to be, present. (3) The Tribunal may direct: (a) that evidence given, or a record or other thing produced, at a proceeding is not to be published except in accordance with a direction of the Tribunal; or (b) that the identity of a party to, or a person giving evidence or producing a record or other thing at, a proceeding is not to be disclosed except in accordance with a direction of the Tribunal. 125 Onus and burden of proof where access refused If the matter the subject of a proceeding is a decision by the respondent to refuse access to government information, the respondent must prove on the balance of probabilities: (a) that the information is exempt under Part 4; or (b) that the complainant is not entitled to access under this Act. Part 8 Appeals from decisions of Information Commissioner or Tribunal 129 Appeal to Supreme Court (1) A person aggrieved by an appealable decision may appeal to the Supreme Court on a question of law only. (1A) An appeal must be made within 60 days after the appealable decision is made. (2) On an appeal, the Supreme Court may: (a) confirm or vary the decision in whole or in part; or (b) revoke the decision in whole or in part and substitute another decision that would have been available to the Commissioner or Tribunal, as the case requires; or (c) remit the matter to the Commissioner or Tribunal, as the case requires, for further consideration; or -- 84 of 126 -- Part 9 Records and archives management Division 1 Preliminary Information Act 2002 77 (d) dismiss the appeal; and, for that purpose, may make the orders and give the directions that the Court considers appropriate. (3) Section 141 of the Northern Territory Civil and Administrative Tribunal Act 2014 does not apply to a decision of the Tribunal that is an appealable decision. (4) In this section: appealable decision means: (a) a decision of the Commissioner under this Act; or (b) a decision of the Tribunal in the jurisdiction conferred by section 113A(1). Part 9 Records and archives management Division 1 Preliminary 130 Application of Part (1) Subject to subsection (2), this Part applies in relation to all records of a public sector organisation even though the organisation is a public sector organisation for personal information only. (2) This Part does not apply in relation to any records of: (a) a contract service provider; or (b) an employee or agent of a contract service provider; or (c) a person (other than a contract service provider) who provides services to a public sector organisation under a contract between the organisation or the Territory and that person or another person. 131 Duties of chief executive officers (1) The chief executive officer of a public sector organisation has a duty to ensure that the organisation complies with this Part. (2) The chief executive officer of a public sector organisation must ensure that the organisation's annual report includes a statement about its compliance with this Part. -- 85 of 126 -- Part 9 Records and archives management Division 2 Obligations of public sector organisations Information Act 2002 78 131A Records functions The records functions are: (a) to prepare, promote and monitor compliance with records standards; and (b) to facilitate and promote policy and systems to enable cost effective compliance with records standards; and (c) to provide advice (including training) to enable compliance with records standards; and (d) to facilitate the preparation of records retention and disposal schedules. 131B Archives functions The archives functions are: (a) to appraise records; and (b) to collect, transfer and preserve archives and permanent records; and (c) to provide access to Territory Archives; and (d) to maintain a register of records retention and disposal schedules; and (e) to prepare, promote and monitor compliance with archives standards; and (f) to provide advice (including training) to enable compliance with archives standards. 132 Performance of functions consistent with objects of Act The archives service and records service must perform their functions in a way that is consistent with the objects of this Act. Division 2 Obligations of public sector organisations 133 Protecting records (1) A public sector organisation must: (a) implement practices and procedures to safeguard the custody and ensure proper preservation of its records; and -- 86 of 126 -- Part 9 Records and archives management Division 2 Obligations of public sector organisations Information Act 2002 79 (b) if any of its records are in the possession, custody or control of another person – enter into arrangements with the person for the safekeeping, proper preservation and return of the record. (2) If a public sector organisation: (a) is not in control of a record of the organisation; or (b) is responsible for a record of another public sector organisation but does not have control of the record; the organisation must take reasonable steps to recover control of the record. (3) Subsection (2) does not apply in relation to a record that: (a) has been transferred to another public sector organisation or to the Territory Archives; or (b) is in the lawful control of another person. 134 Managing records A public sector organisation must: (a) keep full and accurate records of its activities and operations; and (b) implement the practices and procedures for managing its records necessary for compliance with the standards applicable to the organisation; and (c) make arrangements for the records service and archives service to monitor the management of its records. 135 Transferring records Where a function is transferred from one public sector organisation to another public sector organisation, the first-mentioned organisation must transfer to the other organisation all of its records relating to that function (including records relating to the control of those records). 136 Form of records (1) A public sector organisation must keep records created at any time after the commencement of this section in a form in which they are capable of being read and reproduced, which may be an electronic form. -- 87 of 126 -- Part 9 Records and archives management Division 3 Standards Information Act 2002 80 (2) A public sector organisation must take all reasonably practicable steps to keep records created before the commencement of this section in a form in which they are capable of being read and reproduced, which may be an electronic form. (3) A public sector organisation in possession or control of a record (whether its own or that of another public sector organisation) must ensure that it has access to the equipment and technology necessary to read and reproduce the record. Division 2A Records retention and disposal schedules 136A Preparation of records retention and disposal schedule (1) The records service must facilitate the preparation of records retention and disposal schedules. (2) A records retention and disposal schedule must be consistent with relevant records standards and archives standards. (3) A records retention and disposal schedule must specify classes of records and determine the following: (a) whether a class of record has temporary or permanent status; (b) the retention period for a temporary class of record; (c) authorised disposal actions for a class of record. 136B Approval of records retention and disposal schedule (1) A records retention and disposal schedule must be approved by the records service and archives service. (2) If the records retention and disposal schedule is prepared for records relating to a function or activity that a particular public sector organisation is specifically responsible for, the schedule must also be approved by the chief executive officer of the public sector organisation. Division 3 Standards 137 Definitions In this Division: other service means: (a) for the records service – the archives service; and -- 88 of 126 -- Part 9 Records and archives management Division 3 Standards Information Act 2002 81 (b) for the archives service – the records service. responsible service, for a standard, means the service responsible for preparing the standard under section 137A or 137B. 137A Records standards (1) The records service must prepare standards for managing records (other than archives and permanent records) for approval by the Minister. (2) The matters that must be dealt with in the standards include, but are not limited to, the creation, maintenance and security of records. 137B Archives standards (1) The archives service must prepare standards for managing archives and permanent records (whether those records are in the custody of the archives service or not) for approval by the Minister. (2) The matters that must be dealt with in the standards include, but are not limited to, the following: (a) the transfer of permanent records from a public sector organisation to the archives service; (b) access to Territory Archives; (c) preservation formats for digital records (including archives). 137C Preparation of standards When preparing a standard, the responsible service: (a) must seek comments or submissions from the public sector organisation to which the standard is intended to apply; and (b) must consult with the Commissioner to ensure that, if the standard is approved by the Minister, compliance with the standard will be consistent with the objects of this Act; and (c) must seek comments or submissions from the other service; and (d) may seek comments or submissions from any other person. 138 Minister may approve standards (1) The responsible service for a standard must submit the standard to the Minister for approval. -- 89 of 126 -- Part 9 Records and archives management Division 4 Managing archives Information Act 2002 82 (2) The Minister may, by Gazette notice, approve the standard if the Minister is satisfied: (a) the responsible service has complied with section 137C in the preparation of the standard; and (b) the standard is consistent with the objects of this Act. (3) The Gazette notice must include: (a) the standard name and a short description of its contents; and (b) a statement about how to obtain a copy of the standard. (4) The standard takes effect on: (a) the date the notice is published in the Gazette; or (b) if the notice specifies a later date – that date. 139 Review of standards (1) The responsible service for a standard must review the standard at least once every 3 years and, as a result of that review, may submit a revised or replacement standard to the Minister for approval. (2) Sections 137 to 138 apply to the preparation and approval of a revised or replacement standard. 140 Advice to public sector organisations The responsible service for a standard must provide a public sector organisation with the advice (including training) the service considers appropriate to enable the organisation to comply with the standard. Division 4 Managing archives 141 Transfer of permanent records to the archives service (1AA) A public sector organisation must, within the time provided by this section, transfer a record to the archives service for inclusion in the Territory Archives if the record: (a) belongs to a class of record which has permanent status under a records retention and disposal schedule; or (b) having regard to any archives standard, is otherwise a permanent record. -- 90 of 126 -- Part 9 Records and archives management Division 4 Managing archives Information Act 2002 83 (1) A public sector organisation: (a) may transfer the record to the archives service for inclusion in the Territory Archives at any time; and (b) must, subject to this section, transfer the record to the archives service for inclusion in the Territory Archives not later than 30 years after the record was created. (2) The archives service may, on the application of a public sector organisation and if satisfied the organisation's operations require it, extend the 30-year period for one or more further periods, each of which must not exceed 5 years. (3) The application is to be in a form approved by the archives service. (4) The archives service: (a) must revoke the extension if requested by the public sector organisation; or (b) may revoke the extension if satisfied: (i) the operations of the organisation no longer require it; or (ii) the organisation is not complying with the standards applicable to the organisation for a record that would, apart from the extension, have been transferred to the archives service for inclusion in the Territory Archives. (5) If the extension is revoked, the public sector organisation must transfer the record to the archives service for inclusion in the Territory Archives as soon as practicable. 142 Determination of open access period (1) At the time a public sector organisation transfers a record to the archives service for inclusion in the Territory Archives, the archives service must (in consultation with the responsible chief executive officer) determine the open access period for the record while it is an archive. (2) The open access period for a record while it is an archive is the period that begins: (a) 30 years after the record was created; or (b) if it is in the public interest – 45 years after the record was created. -- 91 of 126 -- Part 9 Records and archives management Division 4 Managing archives Information Act 2002 84 (3) The archives service may, if requested by the responsible chief executive officer and it is in the public interest, extend the period that is required to expire before an archive is in the open access period for one or more further periods, each of which must not exceed 10 years. (4) The period that is required to expire before an archive is in the open access period (including all extensions of that period under subsection (3)) is not to exceed 100 years. (5) In this section: responsible chief executive officer, in relation to a record or an archive at any time, means the chief executive officer of the public sector organisation that is responsible at that time for the function to which the record or archive relates. 143 Archives in open access period to be publicly available The archives service must make available to the public all archives that are in the open access period under section 142. 144 Accessing and correcting archives not yet publicly available (1) Subject to subsections (3) to (5), an archive that is not yet available to members of the public under this Act may be accessed and corrected in the same way as any other government information and this Act applies accordingly. (2) A public sector organisation is taken to hold an archive mentioned in subsection (1) because of section 6(2). (3) If it is necessary for the protection or prevention of damage or further damage to a fragile or damaged archive, the provision of a copy of the archive is sufficient for providing access under section 21(2)(a). (4) Subsection (5) applies in relation to an application to correct personal information in an archive that is made to a public sector organisation that is taken to hold the archive. (5) When making a correction, if any, to the information in the archive on the application, the public sector organisation must not: (a) delete the information from the archive; or (b) otherwise destroy the archive. -- 92 of 126 -- Part 9 Records and archives management Division 5 Offence Information Act 2002 85 Division 5 Offence 145 Mishandling records (1) A person commits an offence if: (a) the person intentionally deletes or otherwise disposes of a record; or (b) the person intentionally transfers or offers to transfer the possession or control of a record; or (c) the person is knowingly a party to an arrangement to transfer the possession or control of a record; or (d) the person intentionally takes or sends a record out of the Territory; or (e) the person intentionally damages or alters a record; or (f) the person: (i) intentionally treats a record in a way that is likely to result in the record being damaged; and (ii) is reckless as to the record being damaged. Maximum penalty: 200 penalty units or imprisonment for 12 months. (2) Subsection (1) does not apply to a person who: (a) does an act mentioned in subsection (1) in compliance with a relevant practice or procedure of a public sector organisation; or (b) does an act mentioned in subsection (1) in compliance with a standard applicable to a public sector organisation; or (c) does an act mentioned in subsection (1) in compliance with this Act or another Act or with an instrument under this Act or another Act; or (d) does an act mentioned in subsection (1) in compliance with a decision, direction, order or other requirement of a court or tribunal; or (e) disposes of a record of the Legislative Assembly in accordance with a resolution of the Legislative Assembly; or (f) transfers a record to the Territory Archives; or -- 93 of 126 -- Part 10 General offences and matters relating to liability Division 1 General offences and related procedural matters Information Act 2002 86 (g) does an act mentioned in subsection (1) for the purpose of placing a record in the possession or control of a public sector organisation. (3) It is a defence to the prosecution of an offence against subsection (1) if: (a) the defendant was acting in the ordinary course of the operations of a public sector organisation; or (b) the defendant was acting in the course of his or her employment; or (c) the defendant did not know, and could not reasonably have known, that he or she was dealing with a record. Part 10 General offences and matters relating to liability Division 1 General offences and related procedural matters 146 Misleading information (1) A person commits an offence if: (a) the person intentionally gives information to another person or to a body; and (b) the other person or the body is the Commissioner or a public sector organisation; and (c) the person knows the information is misleading; and (d) the person knows the Commissioner or organisation is acting in an official capacity. Maximum penalty: 200 penalty units or imprisonment for 12 months. (2) A person commits an offence if: (a) the person intentionally gives a record to another person or to a body; and (b) the other person or the body is the Commissioner or a public sector organisation; and (c) the person knows the record contains misleading information; and -- 94 of 126 -- Part 10 General offences and matters relating to liability Division 1 General offences and related procedural matters Information Act 2002 87 (d) the person knows the Commissioner or organisation is acting in an official capacity. Maximum penalty: 200 penalty units or imprisonment for 12 months. (3) Strict liability applies to subsections (1)(b) and (2)(b). (4) Subsection (2) does not apply if the person, when giving the record: (a) draws the misleading aspect of the record to the attention of the Commissioner or public sector organisation; and (b) to the extent to which the person can reasonably do so – gives the Commissioner or organisation the information necessary to remedy the misleading aspect of the record. (5) A person commits an offence if: (a) the person makes a statement with the intention of gaining access under this Act to: (i) another person's personal information; or (ii) information about another person's business, professional, commercial or financial affairs; and (b) the person knows the statement contains misleading information. Maximum penalty: 100 penalty units or imprisonment for 6 months. (6) In this section: acting in an official capacity means: (a) in relation to the Commissioner – the Commissioner is exercising powers or performing functions under, or otherwise related to the administration of, this Act; and (b) in relation to a public sector organisation given information or a record – the organisation is given the information or record in connection with the administration of this Act. misleading information means information that is misleading in a material particular or because of the omission of a material particular. -- 95 of 126 -- Part 10 General offences and matters relating to liability Division 1 General offences and related procedural matters Information Act 2002 88 147 Concealing or disposing of government information to prevent access or correction (1) A person commits an offence if: (a) the person intentionally conceals, or destroys or otherwise disposes of, information; and (b) the information is government information; and (c) the person is reckless that concealing, or destroying or otherwise disposing of, the information prevents a public sector organisation from providing access to or correcting the information. Maximum penalty: 100 penalty units or imprisonment for 6 months. (1A) Strict liability applies to subsection (1)(b). (2) For subsection (1), it is irrelevant whether or not an application under Part 3, Division 2 for access to the information had been made. (3) Subsection (1) does not apply to a person who destroys or otherwise disposes of government information: (a) in the ordinary course of the operations of a public sector organisation; or (b) in compliance with a relevant practice or procedure of a public sector organisation; or (c) in compliance with a standard applicable to a public sector organisation; or (d) in compliance with this Act or another Act or with an instrument under this Act or another Act; or (e) in compliance with a decision, direction, order or other requirement of a court or tribunal; or (f) if the information had been held by or on behalf of the Legislative Assembly and the destruction or other disposal is in accordance with a resolution of the Legislative Assembly. -- 96 of 126 -- Part 10 General offences and matters relating to liability Division 1 General offences and related procedural matters Information Act 2002 89 148 Confidentiality of information (1) A person commits an offence if the person: (a) obtains information in the course of performing functions connected with the administration of this Act; and (b) intentionally engages in conduct; and (c) the conduct results in the disclosure or use of the information or a record being made of the information. Maximum penalty: 400 penalty units or imprisonment for 2 years. (2) Strict liability applies to subsection (1)(a). (3) Subsection (1) does not apply if: (a) the person discloses, uses or makes a record of the information: (i) for the administration of this Act; or (ii) with the consent of the person to whom the information relates; or (iii) for legal proceedings arising out of the operation of this Act; or (b) the information is otherwise available to the public. Note for subsection (3) In addition to the circumstances mentioned in section 148(3), a person who discloses confidential information or uses, or makes a record of, confidential information will not be criminally responsible for an offence if disclosing, using, or making a record of, the information is justified or excused by or under a law (see section 43BE of the Criminal Code). 149 Liability of and with respect to contract service providers (1) A service contract may provide that the contract service provider is required to comply with an IPP, a code of practice or an authorisation in the same way and to the same extent as the outsourcing organisation. (2) If a service contract contains a provision of the kind mentioned in subsection (1), the contract service provider must comply with the IPP, code of practice or authorisation in the same way and to the same extent as the outsourcing organisation. -- 97 of 126 -- Part 10 General offences and matters relating to liability Division 1 General offences and related procedural matters Information Act 2002 90 (3) Where: (a) the contract service provider does an act for a service contract; and (b) the act would, if it had been done by the outsourcing organisation, have contravened an IPP, a code of practice or an authorisation; the act is taken to have been done by the outsourcing organisation as well as by the contract service provider unless: (c) the service contract contains a provision of the kind mentioned in subsection (1); and (d) the IPP, code of practice or authorisation is capable of being enforced against the contract service provider in accordance with this Act. 150 Conduct of directors, employees and agents (1) If, in a prosecution for an offence against this Act, it is necessary to establish the state of mind of a body corporate or individual in relation to particular conduct, it is sufficient to show: (a) that the conduct was engaged in by a director, employee or agent of the body corporate, or an employee or agent of the individual, within the scope of his or her actual or apparent authority; and (b) that the director, employee or agent had that state of mind. (2) For a prosecution for an offence against this Act, conduct engaged in on behalf of a body corporate or individual by a director, employee or agent of the body corporate, or an employee or agent of the individual, within the scope of his or her actual or apparent authority is taken to have been engaged in also by the body corporate or individual. (3) An individual is not liable to be punished by imprisonment for an offence against this Act if the person would not have been found guilty of the offence if subsection (1) or (2) had not been enacted. (4) A reference in this section to engaging in conduct includes a reference to failing or refusing to engage in conduct. (5) A reference in this section to the director of a body corporate includes a reference to a member of a body corporate incorporated for a public purpose by a law of the Territory, the Commonwealth or a State or another Territory of the Commonwealth. -- 98 of 126 -- Part 10 General offences and matters relating to liability Division 2 Legal immunity Information Act 2002 91 Division 2 Legal immunity 151 Protection from liability (1) A person is not civilly or criminally liable for an act done or omitted to be done by the person in good faith: (a) in connection with the exercise of a power or performance of a function under this Act; or (b) in compliance with a requirement under this Act. (1A) To avoid doubt, subsection (1) extends to an act done or omitted to be done by a person in sharing information in accordance with a processing arrangement, or purportedly in accordance with a processing arrangement, between 2 public sector organisations. (2) This section does not affect any liability the Territory would, apart from this section, have for the act or omission. (3) In this section: compliance, with a requirement, includes the purported compliance with the requirement. exercise, of a power, includes the purported exercise of the power. performance, of a function, includes the purported performance of the function. 152 Acts done to exercise rights (1) No civil or criminal proceedings lie against a person because the person made an application or a complaint. (2) The provision of access to government information to a person by a public sector organisation in compliance with a requirement under this Act is not taken to be an authorisation or approval of the publication of the information by the person who is provided with access to it. 153 Information volunteered by public sector organisation For sections 151 and 152, a public sector organisation is taken to have provided access to government information in compliance with a requirement under this Act if the organisation voluntarily provides access to the information in circumstances where the organisation would have been required to provide that access had an application under Part 3, Division 2 (Accessing government information) been made. -- 99 of 126 -- Part 11 Miscellaneous Information Act 2002 92 Part 11 Miscellaneous 154 No review or other proceedings outside this Act (1) Despite any other Act and except as provided by this Act: (a) no person or body, other than the Inspector, is entitled to investigate, inquire into, review or otherwise call into question an act or decision of a public sector organisation or the Commissioner under this Act; and (b) no proceedings for an injunction, a declaration or an order for prohibition or mandamus are to be brought in relation to an act or decision of a public sector organisation or the Commissioner under this Act. (2) In this section: Inspector, see section 3 of the Integrity and Ethics Commissioner Act 2025. 155 Applications and complaints on behalf of children, persons with disabilities or deceased persons (1) An application or a complaint may be made: (a) by a child; or (b) subject to subsection (2), on behalf of a child by: (i) the child's parent; or (ii) a person chosen by the child or the child's parent; or (iii) a person who has a sufficient interest in the application or complaint. (2) An application relating to health information about treatment received by a child with the child's consent may only be made on behalf of the child with the child's consent. (3) An application or a complaint may be made on behalf of a person who has a disability by: (a) a person authorised by the person with the disability to do so; or (b) a person who has a sufficient interest in the application or complaint. -- 100 of 126 -- Part 11 Miscellaneous Information Act 2002 93 (4) An application or a complaint may be made on behalf of a deceased person within the first 5 years after death by: (a) the administrator or executor of the deceased person's estate; or (b) a person who has a sufficient interest in the application or complaint. 155A Processing arrangements between public sector organisations for applications and complaints (1) A public sector organisation (the client organisation) may enter into an arrangement or agreement (a processing arrangement) with another public sector organisation (the supporting organisation) for: (a) the officers or employees of the supporting organisation to provide administrative assistance to the client organisation in: (i) dealing with applications made to the client organisation from time to time; and (ii) responding to complaints made in relation to the client organisation from time to time; and (b) the sharing of information held by the client organisation with the supporting organisation for the purpose of enabling administrative assistance to be provided to the client organisation. (2) Despite any law of the Territory to the contrary, the following information held by the client organisation may be shared with the supporting organisation in accordance with the processing arrangement: (a) any information relevant to, or potentially relevant to, the determination of an application: (i) made to the client organisation; and (ii) for which administrative assistance is to be provided to the client organisation under the arrangement; (b) any information relevant to, or potentially relevant to, the resolution of a complaint: (i) made in relation to the client organisation; and -- 101 of 126 -- Part 11 Miscellaneous Information Act 2002 94 (ii) for which administrative assistance is to be provided to the client organisation under the arrangement. 156 Fees for applications and complaints (1) A public sector organisation may charge: (a) a fee in respect of the making of an application (an application fee); and (b) a fee in respect of the time taken, and the costs incurred, by the public sector organisation in response to an application (a processing fee). (1A) If the public sector organisation is a client organisation under a processing arrangement with a supporting organisation, the processing fee that may be charged under subsection (1)(b) may include time taken, and costs incurred, by officers or employees of the supporting organisation in response to the application. (2) The Commissioner may charge a fee in respect of the making of a complaint. (3) A fee charged under this section is to be reasonable and a processing fee is not to be charged for time spent locating government information that has been misplaced. (4) The Regulations may: (a) prescribe: (i) the amount of an application or processing fee; or (ii) the rate, formula or other method to be used to calculate an application or processing fee; or (b) for paragraph (a), prescribe different amounts, rates, formulae or other methods in respect of different government information or different classes of government information or different public sector organisations or different classes of public sector organisations; or (c) provide for the estimation of application or processing fees; or (ca) provide for the payment and refund of deposits for processing fees; or (d) provide for the recovery of unpaid application or processing fees; or -- 102 of 126 -- Part 11 Miscellaneous Information Act 2002 95 (e) prescribe the amount of a fee in respect of the making of a complaint. (5) A fee charged under this section is payable by the applicant or the complainant, as appropriate. (6) A public sector organisation or the Commissioner may waive or reduce a fee payable under this section if, having regard to: (a) the circumstances of the application or the complaint, including any impecuniosity or indigence of the applicant or the complainant; and (b) the objects of this Act, the organisation or the Commissioner considers a waiver or reduction appropriate. 157 Changes in functions of public sector organisations (1) If a function is transferred from one public sector organisation to another public sector organisation, the outstanding responsibilities of the first-mentioned organisation under this Act that are connected with the function are transferred with that function. (2) If a public sector organisation ceases to exist and its functions are taken over by another public sector organisation, the functions taken over include the outstanding responsibilities of the former public sector organisation under this Act. (3) If a public sector organisation ceases to exist and its functions are not taken over by another public sector organisation, a public sector organisation nominated by the Minister must take over the outstanding responsibilities of the former public sector organisation under this Act. 158 Regulations The Administrator may make regulations under this Act. 159 Application (1) This Act does not apply in relation to government information held by or a record of a local government council for the first 2 years after the commencement of this Act. (2) A public sector organisation is not required to publish any information under section 11 in the calendar year in which this Act commences but may do so if it wishes. -- 103 of 126 -- Part 12 Transitional matters for Information Amendment Act 2015 Information Act 2002 96 (3) A person is not entitled to apply under Part 3, Division 4 (Review by public sector organisation) for a review of a decision of a public sector organisation under Part 3, Division 2 (Accessing government information) or Part 3, Division 3 (Correcting personal information) if the decision is made within the first 12 months after the commencement of this Act. (4) A person is not entitled to make a complaint under Part 7 (Complaints to Information Commissioner) about the collection or handling of the person's personal information, or any other interference with the person's privacy, by a public sector organisation if the collection, handling or other interference occurs within the first 12 months after the commencement of this Act. 159A Interaction with Care and Protection of Children Act 2007 (1) Despite section 9, this Act does not affect any request for, or giving of, information under Part 5.1A of the Care and Protection of Children Act 2007. (2) This section does not otherwise affect the operation of this Act in relation to any other law of the Territory. 160 Review after 5 years There is to be a review of the first 5 years of operation of this Act. Part 12 Transitional matters for Information Amendment Act 2015 161 Codes of practice (1) Section 73 as in force after the commencement applies in relation to the consideration and approval of a code of practice by the Commissioner if, before the commencement: (a) a public sector organisation had submitted a draft code of practice to the Commissioner; and (b) the Commissioner had not yet decided whether or not to recommend that the draft code be submitted to the Administrator for approval. -- 104 of 126 -- Part 13 Transitional matters for Information Amendment Act (No. 2) 2015 Information Act 2002 97 (2) Despite the repeal of sections 74 and 75, those sections as in force immediately before the commencement continue to apply in relation to the consideration and approval of a draft code of practice if, before the commencement: (a) the Commissioner had recommended the draft code be submitted to the Administrator for approval; and (b) the code of practice had not been approved by the Administrator. (3) A code of practice in force immediately before the commencement continues in force as if the code had been made by the Commissioner under section 73 of the Act. (4) In this section: commencement means the day on which the Information Amendment Act 2015 commences. Part 13 Transitional matters for Information Amendment Act (No. 2) 2015 162 Definition In this Part: commencement means the commencement of the Information Amendment Act (No. 2) 2015. 163 Complaints made before commencement This Act, as in force before the commencement, continues to apply in relation to a complaint that was made before the commencement. 164 Offence provisions – before and after commencement (1) The offence provisions, as amended by the Information Amendment Act (No. 2) 2015, apply only in relation to offences committed after the commencement. (2) The offence provisions, as in force before the commencement, continue to apply in relation to offences committed before the commencement. (3) For this section, if any of the conduct constituting an offence occurred before the commencement, the offence is taken to have been committed before the commencement. -- 105 of 126 -- Part 14 Transitional matters for Integrity and Ethics Commissioner Act 2025 Information Act 2002 98 (4) In this section: offence provisions means the provisions of this Act that create or relate to offences (including in relation to criminal responsibility, defences and penalties). Part 14 Transitional matters for Integrity and Ethics Commissioner Act 2025 164A Definitions In this Part: amending Act means the Integrity and Ethics Commissioner Act 2025. commencement means the commencement of section 126 of the amending Act. 165 Application of amendment to section 94 The amendment to this Act by section 85 of the Integrity and Ethics Commissioner Act 2025 applies to an acting Information Commissioner in office on the commencement of that section. 166 Inspector's information remains exempt (1) Despite the amendments made to section 49E by section 128 of the amending Act, the historical Inspector records continue to be exempt under section 44 after the commencement. (2) In this section: former Inspector means the Inspector as defined in section 49E(2) as in force immediately before the commencement. historical Inspector records means information obtained or created under the Independent Commissioner Against Corruption Act 2017 before the commencement: (a) in the course of, or for the conduct of, an evaluation by the former Inspector; or (b) in the course of the former Inspector dealing with a complaint. -- 106 of 126 -- Part 15 Transitional matter for Attorney-General and Police Legislation Amendment Act 2025 Information Act 2002 99 167 Current investigations, complaints and audits (1) This section applies to the Information Commissioner if, immediately before the commencement, the Information Commissioner was investigating or otherwise dealing with a complaint relating to, or was conducting an audit of, the records of any of the following: (a) the Health Complaints Commissioner; (b) the ICAC; (c) the Ombudsman referred to in section 9 of the Ombudsman Act 2009; (d) the Auditor-General. (2) On the commencement, the Information Commissioner must cease investigating or otherwise dealing with the complaint or conducting the audit. (3) As soon as practicable after the commencement, the Information Commissioner must notify the Inspector under section 40 of the Integrity and Ethics Commissioner Act 2025 that the Information Commissioner has a conflict of interest in relation to the investigation, complaint or audit. (4) In this section: Inspector, see section 3 of the Integrity and Ethics Commissioner Act 2025. Part 15 Transitional matter for Attorney-General and Police Legislation Amendment Act 2025 168 Application of amendment to section 5 Section 5(6A) applies in relation to information created or received by a ministerial entity, as defined in that subsection, before or after the commencement of section 7 of the Attorney-General and Police Legislation Amendment Act 2025. -- 107 of 126 -- Schedule 1 Secrecy provisions Information Act 2002 100 Schedule 1 Secrecy provisions section 48 Act Provision Adoption of Children Act 1994 section 71(1) Care and Protection of Children Act 2007 section 301(1) Child Protection (Offender Reporting and Registration) Act 2004 section 66(1) Coroners Act 1993 section 43(2) Criminal Property Forfeiture Act 2002 section 31(1) Criminal Records (Spent Convictions) Act 1992 section 12(1) and (2) Electoral Act 2004 section 293(2) Transplantation and Anatomy Act 1979 section 28(1) Mineral Royalty Act 1982 section 50(1) Misuse of Drugs Act 1990 section 24(2) Northern Territory Aboriginal Sacred Sites Act 1989 section 38(1) Serious Sex Offenders Act 2013 section 112 Sexual Offences (Evidence and Procedure) Act 1983 section 6(1), 7(1) or 10 Surveillance Devices Act 2007 sections 15(1), 16(1) and 52(1) and (2) Taxation Administration Act 2007 section 102(1) Witness Protection (Northern Territory) Act 2002 section 33(1) and (3) -- 108 of 126 -- Schedule 2 Information Privacy Principles Information Act 2002 101 Schedule 2 Information Privacy Principles section 65(1) IPP 1 Collection 1.1 A public sector organisation must not collect personal information unless the information is necessary for one or more of its functions or activities. 1.2 A public sector organisation must collect personal information only by lawful and fair means and not in an unreasonably intrusive way. 1.3 At or before the time (or, if that is not practicable, as soon as practicable after) a public sector organisation collects personal information about an individual from the individual, the organisation must take reasonable steps to ensure that the individual is aware of: (a) the identity of the organisation and how to contact it; and (b) the fact that the individual is able to have access to the information; and (c) the purpose for which the information is collected; and (d) the persons or bodies, or classes of persons or bodies, to which the organisation usually discloses information of the same kind; and (e) any law that requires the particular information to be collected; and (f) any consequences for the individual if all or part of the information is not provided. 1.4 If it is reasonable and practicable to do so, a public sector organisation must collect personal information about an individual only from the individual. 1.5 If a public sector organisation collects personal information about an individual from another person, it must take reasonable steps to ensure that the individual is or has been made aware of the matters listed in IPP 1.3 except to the extent that making the individual aware of the matters would pose a serious threat to the life or health of the individual or another individual. -- 109 of 126 -- Schedule 2 Information Privacy Principles Information Act 2002 102 IPP 2 Use and disclosure 2.1 A public sector organisation must not use or disclose personal information about an individual for a purpose (the secondary purpose) other than the primary purpose for collecting it unless one or more of the following apply: (a) if the information is sensitive information: (i) the secondary purpose is directly related to the primary purpose; and (ii) the individual would reasonably expect the organisation to use or disclose the information for the secondary purpose; (b) if the information is not sensitive information: (i) the secondary purpose is related to the primary purpose; and (ii) the individual would reasonably expect the organisation to use or disclose the information for the secondary purpose; (c) the individual consents to the use or disclosure of the information; (ca) the use or disclosure is necessary for research, or the compilation or analysis of statistics, in the public interest and the following apply: (i) the research, compilation or analysis will not be published in a form that identifies the individual; (ii) it is impracticable for the organisation to seek the individual's consent before the use or disclosure; (iii) in the case of disclosure – the organisation reasonably believes the recipient of the information will not disclose the information; (iv) if the information is health information – the use or disclosure is in accordance with guidelines issued by the Commissioner under section 86(1)(a)(iv) for this paragraph; -- 110 of 126 -- Schedule 2 Information Privacy Principles Information Act 2002 103 (d) the organisation reasonably believes that the use or disclosure is necessary to lessen or prevent: (i) a serious or imminent threat to the individual's or another individual's life, health or safety; or (ii) a serious or imminent threat of harm to, or exploitation of, a child; or (iii) a serious threat to public health or public safety; (e) the organisation has reason to suspect that unlawful activity has been, is being or may be engaged in and uses or discloses the information as a necessary part of its investigation of the matter or in reporting its concerns to relevant persons or authorities; (f) the use or disclosure is required or authorised by law; (fa) the use or disclosure of the information is in accordance with a processing arrangement between the organisation and another public sector organisation; (g) the organisation reasonably believes that the use or disclosure is reasonably necessary for one or more of the following by or on behalf of a law enforcement agency: (i) preventing, detecting, investigating, prosecuting or punishing an offence or a breach of a prescribed law; (ii) enforcing a law relating to the confiscation of proceeds of crime; (iii) protecting public revenue; (iv) preventing, detecting, investigating or remedying seriously improper conduct or prescribed conduct; (v) preparing for or conducting proceedings before a court or tribunal or implementing the orders of a court or tribunal; (h) the Australian Security Intelligence Organisation (ASIO) has requested the organisation to disclose the information, the disclosure is made to an officer or employee of ASIO authorised by the Director-General of ASIO to receive the information and an officer or employee of ASIO authorised by the Director-General of ASIO to do so has certified in writing that the information is required in connection with the performance of the functions of ASIO; -- 111 of 126 -- Schedule 2 Information Privacy Principles Information Act 2002 104 (i) the Australian Secret Intelligence Service (ASIS) has requested the organisation to disclose the information, the disclosure is made to an officer or employee of ASIS authorised by the Director-General of ASIS to receive the information and an officer or employee of ASIS authorised by the Director-General of ASIS to do so has certified in writing that the information is required in connection with the performance of the functions of ASIS. Note 1: It is not intended to deter public sector organisations from lawfully co-operating with law enforcement agencies in the performance of their functions. Note 2: IPP 2.1 does not override any existing legal obligations not to disclose personal information. IPP 2.1 does not require a public sector organisation to disclose personal information – a public sector organisation is always entitled not to disclose personal information in the absence of a legal obligation to disclose it. Note 3: A public sector organisation is also liable to the requirements of IPP 9 if it transfers personal information to a person outside the Territory. 2.2 If a public sector organisation uses or discloses personal information under IPP 2.1(g), the organisation must make a written note of the use or disclosure. 2.3 In this IPP: child, see section 13 of the Care and Protection of Children Act 2007. exploitation, see section 16 of the Care and Protection of Children Act 2007. harm, see section 15 of the Care and Protection of Children Act 2007. IPP 3 Data quality 3.1 A public sector organisation must take reasonable steps to ensure that the personal information it collects, uses or discloses is accurate, complete and up to date. IPP 4 Data security 4.1 A public sector organisation must take reasonable steps to protect the personal information it holds from misuse and loss and from unauthorised access, modification or disclosure. 4.2 A public sector organisation must take reasonable steps to destroy or permanently de-identify personal information if it is no longer needed for any purpose. -- 112 of 126 -- Schedule 2 Information Privacy Principles Information Act 2002 105 IPP 5 Openness 5.1 A public sector organisation must make available to the public a document in which it clearly expresses its policies for the management of personal information that it holds. 5.2 On the request of an individual, a public sector organisation must take reasonable steps to inform the individual of the kind of personal information it holds, why it holds the information and how it collects, holds, uses and discloses the information. IPP 6 Access and correction 6.1 If an individual requests a public sector organisation holding personal information about the individual for access to the personal information, the organisation must provide the individual with access to the information except to the extent that: (a) providing access would pose a serious threat to the life or health of the individual or another individual; or (b) providing access would prejudice measures for the protection of the health or safety of the public; or (c) providing access would unreasonably interfere with the privacy of another individual; or (d) the request for access is frivolous or vexatious; or (e) the information relates to existing or anticipated legal proceedings between the organisation and the individual and the information would not be accessible by the process of discovery or subpoena in those proceedings; or (f) providing access would reveal the intentions of the organisation in relation to negotiations with the individual in such a way that would prejudice the negotiations; or (g) providing access would be unlawful; or (h) denying access is required or authorised by law; or (i) providing access would be likely to prejudice an investigation of possible unlawful activity; or (j) providing access would be likely to prejudice one or more of the following by or on behalf of a law enforcement agency: (i) preventing, detecting, investigating, prosecuting or punishing an offence or a breach of a prescribed law; -- 113 of 126 -- Schedule 2 Information Privacy Principles Information Act 2002 106 (ii) enforcing a law relating to the confiscation of proceeds of crime; (iii) protecting public revenue; (iv) preventing, detecting, investigating or remedying seriously improper conduct or prescribed conduct; (v) preparing for or conducting proceedings in a court or tribunal or implementing the orders of a court or tribunal; or (k) providing access would prejudice: (i) the security or defence of the Commonwealth or a State or Territory of the Commonwealth; or (ii) the maintenance of law and order in the Territory. 6.2 However, where providing access under IPP 6.1 would reveal evaluative information generated within a public sector organisation in connection with a commercially sensitive decision-making process, the organisation may give the individual an explanation for the commercially sensitive decision rather than access to the decision. 6.3 If a public sector organisation holds personal information about an individual and the individual establishes that the information is not accurate, complete or up to date, the organisation must take reasonable steps to correct the information so that it is accurate, complete and up to date. 6.4 If: (a) an individual and a public sector organisation disagree about whether personal information about the individual held by the organisation is accurate, complete or up to date; and (b) the individual requests the organisation to associate with the information a statement to the effect that, in the individual's opinion, the information is inaccurate, incomplete or out of date; the organisation must take reasonable steps to comply with that request. 6.5 A public sector organisation must provide reasons for refusing to provide access to or correct personal information. -- 114 of 126 -- Schedule 2 Information Privacy Principles Information Act 2002 107 6.6 If a public sector organisation charges a fee for providing access to personal information, the fee is not to be excessive. 6.7 If an individual requests a public sector organisation for access to or to correct personal information held by the organisation, the organisation must: (a) provide access or reasons for refusing access; or (b) make the correction or provide reasons for refusing to make it; or (c) provide reasons for the delay in responding to the request; within a reasonable time. IPP 7 Identifiers 7.1 A public sector organisation must not assign unique identifiers to individuals unless it is necessary to enable the organisation to perform its functions efficiently. 7.2 A public sector organisation must not adopt a unique identifier of an individual that has been assigned by another public sector organisation unless: (a) it is necessary to enable the organisation to perform its functions efficiently; or (b) it has obtained the consent of the individual to do so; or (c) it is an outsourcing organisation adopting the unique identifier created by a contract service provider in the performance of its obligations to the outsourcing organisation under a service contract. 7.3 A public sector organisation must not use or disclose a unique identifier assigned to an individual by another public sector organisation unless: (a) the use or disclosure is necessary for the organisation to fulfil its obligations to that other organisation; or (b) IPP 2.1(d), (e), (f) or (g) applies to the use or disclosure; or (c) it has obtained the consent of the individual to the use or disclosure. -- 115 of 126 -- Schedule 2 Information Privacy Principles Information Act 2002 108 7.4 A public sector organisation must not require an individual to provide a unique identifier in order to obtain a service unless its provision: (a) is required or authorised by law; or (b) is in connection with the purpose for which the unique identifier was assigned or for a directly related purpose. IPP 8 Anonymity 8.1 A public sector organisation must give an individual entering transactions with the organisation the option of not identifying himself or herself unless it is required by law or it is not practicable that the individual is not identified. IPP 9 Transborder data flows 9.1 A public sector organisation must not transfer personal information about an individual to a person (other than the individual) outside the Territory unless: (a) the transfer is required or authorised under a law of the Territory or the Commonwealth; or (b) the organisation reasonably believes that the person receiving the information is subject to a law, or a contract or other legally binding arrangement, that requires the person to comply with principles for handling the information that are substantially similar to these IPPs; or (c) the individual consents to the transfer; or (d) the transfer is necessary for the performance of a contract between the organisation and the individual or for the implementation of pre-contractual measures taken in response to the individual's request; or (e) the transfer is necessary for the performance or completion of a contract between the organisation and a third party, the performance or completion of which benefits the individual; or (f) all of the following apply: (i) the transfer is for the benefit of the individual; (ii) it is impracticable to obtain the consent of the individual to the transfer; -- 116 of 126 -- Schedule 2 Information Privacy Principles Information Act 2002 109 (iii) it is likely that the individual would consent to the transfer; or (g) the organisation has taken reasonable steps to ensure that the information will not be held, used or disclosed by the person to whom it is transferred in a manner that is inconsistent with these IPPs. IPP 10 Sensitive information 10.1 A public sector organisation must not collect sensitive information about an individual unless: (a) the individual consents to the collection; or (b) the organisation is authorised or required by law to collect the information; or (c) the individual is: (i) physically or legally incapable of giving consent to the collection; or (ii) physically unable to communicate his or her consent to the collection; and collecting the information is necessary to prevent or lessen a serious or imminent threat to the life or health of the individual or another individual; or (d) collecting the information is necessary to establish, exercise or defend a legal or equitable claim. 10.2 Despite IPP 10.1, a public sector organisation may collect sensitive information about an individual if: (a) the collection: (i) is necessary for research, or the compilation or analysis of statistics, relevant to government funded targeted welfare or educational services; or (ii) is of information relating to an individual's racial or ethnic origin and is for the purpose of providing government funded targeted welfare or educational services; and (b) there is no other reasonably practicable alternative to collecting the information for that purpose; and -- 117 of 126 -- Schedule 2 Information Privacy Principles Information Act 2002 110 (c) it is impracticable for the organisation to seek the individual's consent to the collection. -- 118 of 126 -- ENDNOTES Information Act 2002 111 ENDNOTES 1 KEY Key to abbreviations amd = amended od = order app = appendix om = omitted bl = by-law pt = Part ch = Chapter r = regulation/rule cl = clause rem = remainder div = Division renum = renumbered exp = expires/expired rep = repealed f = forms s = section Gaz = Gazette sch = Schedule hdg = heading sdiv = Subdivision ins = inserted SL = Subordinate Legislation lt = long title sub = substituted nc = not commenced 2 LIST OF LEGISLATION Information Act 2002 (Act No. 62, 2002) Assent date 8 November 2002 Commenced 1 July 2003 (s 2(2)) Information Amendment Act 2003 (Act No. 26, 2003) Assent date 26 June 2003 Commenced 26 June 2003 Statute Law Revision Act 2004 (Act No. 18, 2004) Assent date 15 March 2004 Commenced 5 May 2004 (s 2(1), s 2 Associations Act 2003 (Act No. 56, 2003) and Gaz G18, 5 May 2004, p 2) Australian Crime Commission (Consequential Amendments) Act 2005 (Act No. 7, 2005) Assent date 17 March 2005 Commenced 18 May 2005 (s 2, s 2 Australian Crime Commission Act 2005 (Act No. 6, 2005) and Gaz G20, 18 May 2005, p 2) Information Amendment Act 2006 (Act No. 20, 2006) Assent date 28 June 2006 Commenced 1 July 2006 (s 2) Surveillance Devices Act 2007 (Act No. 19, 2007) Assent date 18 September 2007 Commenced 1 January 2008 (Gaz G51, 19 December 2007, p 3) -- 119 of 126 -- ENDNOTES Information Act 2002 112 Care and Protection of Children Act 2007 (Act No. 37, 2007) Assent date 12 December 2007 Commenced Ch 1 and pts 3.3 and 5.1: 7 May 2008 (Gaz G18, 7 May 2008, p 4); Ch 2 (exc pt 2.1, div 6 and s 127), Ch 3, pts 3.1 and 3.2 (exc s 187) and Ch 5, pts 5.2 to 5.6: 8 December 2008 (Gaz G47, 26 November 2008, p 6); Ch 4: 9 June 2009 (Gaz S27, 1 June 2009); Ch 2, pt 2.1, div 6: 18 August 2010 (Gaz S43, 18 August 2010); s 187: 1 July 2011 (Gaz S32, 20 June 2011); s 127: nc Revenue Law Reform (Budget Initiatives) Act 2008 (Act No. 23, 2008) Assent date 30 June 2008 Commenced pt 1, ss 3, 12(1), 18 and 19: 1 January 2008; ss 7, 10 and 11(1): 6 May 2008; rem 1 July 2008 (s 2) Local Government (Consequential Amendments) Act 2008 (Act No. 28, 2008) Assent date 19 November 2008 Commenced 1 July 2008 (s 2) Public Interest Disclosure Act 2008 (Act No. 38, 2008) Assent date 8 December 2008 Commenced 31 July 2009 (Gaz, G25, 24 June 2009, p 2) Ombudsman Act 2009 (Act No. 5, 2009) Assent date 12 March 2009 Commenced 1 July 2009 (Gaz G21, 27 May 2009, p 5) Information Amendment Act 2009 (Act No. 11, 2009) Assent date 26 May 2009 Commenced 26 May 2009 Serious Crime Control Act 2009 (Act No. 32, 2009) Assent date 11 November 2009 Commenced 1 December 2011 (Gaz S69, 1 December 2011) Justice Legislation Amendment (Penalties) Act 2010 (Act No. 12, 2010) Assent date 20 May 2010 Commenced 1 July 2010 (Gaz, G, 2010, p ) Statute Law Revision Act 2010 (Act No. 29, 2010) Assent date 9 September 2010 Commenced 13 October 2010 (Gaz G41, 13 October 2010, p 2) Oaths, Affidavits and Declarations (Consequential Amendments) Act 2010 (Act No. 40, 2010) Assent date 18 November 2010 Commenced 1 March 2011 (s 2, s 2 Oaths, Affidavits and Declarations Act 2010 (Act No. 39, 2010) and Gaz G7, 16 February 2011, p 4) Human Tissue Transplant Amendment Act 2010 (Act No. 46, 2010) Assent date 13 December 2010 Commenced 13 April 2011 (Gaz S17, 13 April 2011) Information Amendment Act 2011 (Act No. 3, 2011) Assent date 14 March 2011 Commenced 30 March 2011 (Gaz G13, 30 March 2011, p 14) -- 120 of 126 -- ENDNOTES Information Act 2002 113 Public and Environmental Health Act 2011 (Act No. 7, 2011) Assent date 16 March 2011 Commenced 1 July 2011 (Gaz S28, 3 June 2011) Alcohol Reform (Prevention of Alcohol-related Crime and Substance Misuse) Act 2011 (Act No. 18, 2011) Assent date 20 May 2011 Commenced ss 16 and 22(2), (3) and (5): 1 January 2012; pt 3 (except s 22(2), (3) and (5)): 1 November 2011 (Gaz S60, 27 October 2011); rem: 1 July 2011 (s 16 and pt 3: 1 January 2012 (Gaz G36, 7 September 2011, p 2 – notice revoked by Gaz S60, 27 October 2011) Care and Protection of Children Amendment (Information Sharing) Act 2012 (Act No. 9, 2012) Assent date 27 April 2012 Commenced 1 July 2012 (Gaz G24, 13 June 2012, p 4) Evidence (National Uniform Legislation) (Consequential Amendments) Act 2012 (Act No. 23, 2012) Assent date 21 November 2012 Commenced 1 January 2013 (Gaz G51, 19 December 2012, p 4) Alcohol Mandatory Treatment Act 2013 (Act No. 17, 2013) Assent date 28 June 2013 Commenced 1 July 2013 (s 2) Children's Commissioner Act 2013 (Act No. 33, 2013) Assent date 18 December 2013 Commenced 1 January 2014 (Gaz S72, 23 December 2013) Local Government Amendment Act 2014 (Act No. 19, 2014) Assent date 2 June 2014 Commenced s 16: 1 July 2014; s 18: 1 December 2014; rem: 2 June 2014 (s 2) Correctional Services (Related and Consequential Amendments) Act 2014 (Act No. 27, 2014) Assent date 4 September 2014 Commenced 9 September 2014 (Gaz S80, 9 September 2014, p 2) Information Amendment Act 2015 (Act No. 1, 2015) Assent date 25 March 2015 Commenced 6 May 2015 (Gaz G18, 6 May 2015, p 2) Police (Special Investigative and Other Powers) Act 2015 (Act No. 4, 2015) Assent date 25 March 2015 Commenced 1 July 2015 (Gaz G23, 10 June 2015, p 1) Justice Legislation Amendment Act 2015 (Act No. 14, 2015) Assent date 22 May 2015 Commenced pts 4, 6, 7 and 9: 1 June 2015; rem: 1 July 2015 (Gaz S53, 29 May 2015, p 1) Information Amendment Act (No. 2) 2015 (Act No. 29, 2015) Assent date 18 December 2015 Commenced 1 May 2016 (Gaz 17, 27 April 2016, p 2) -- 121 of 126 -- ENDNOTES Information Act 2002 114 Local Court (Related Amendments) Act 2016 (Act No. 8, 2016) Assent date 6 April 2016 Commenced 1 May 2016 (s 2, s 2 Local Court (Repeals and Related Amendments) Act 2016 (Act No. 9, 2016) and Gaz S34, 29 April 2016) Statute Law Revision Act 2017 (Act No. 4, 2017) Assent date 10 March 2017 Commenced 12 April 2017 (Gaz G15, 12 April 2017, p 3) Independent Commissioner Against Corruption Act 2017 (Act No. 23, 2017) Assent date 8 December 2017 Commenced 30 November 2018 (Gaz S94, 30 November 2018) Domestic and Family Violence Amendment (Information Sharing) Act 2018 (Act No. 21, 2018) Assent date 8 November 2018 Commenced 30 August 2019 (Gaz G33, 14 August 2019, p 2) Emergency Legislation Amendment Act 2020 (Act No. 8, 2020) Assent date 25 March 2020 Commenced 26 March 2020 (s 2) Serious Sex Offenders Amendment Act 2021 (Act No. 12, 2021) Assent date 20 May 2021 Commenced 5 July 2021 (Gaz G25, 23 June 2021, p 1) Criminal Justice Legislation Amendment (Sexual Offences) Act 2023 (Act No. 20, 2023) Assent date 17 August 2023 Commenced 25 March 2024 (Gaz S20, 22 March 2024) Justice and Other Legislation Further Amendment Act 2024 (Act No. 9, 2024) Assent date 24 May 2024 Commenced pt 4: 1 July 2024 (s 2(2)), s 2 Health Care Decision Making Act 2023 (Act No. 19, 2023) and Gaz G13, 20 June 2024, p 2); pts 9 and 10: 1 July 2024 (s 2(3)); pt 8: nc; rem: 25 May 2024 (s 2(1)) Attorney-General Legislation Amendment Act 2025 (Act No. 14, 2025) Assent date 6 June 2025 Commenced 1 August 2025 (Gaz G14, 10 July 2025, p 1) Integrity and Ethics Commissioner Act 2025 (Act No. 32, 2025) Assent date 27 November 2025 Commenced ss 3 to 7 and pts 2 to 6 and 8: 1 June 2026 (s 2(2) and Gaz S39, 29 May 2026); rem: 28 November 2025 (s 2(1)) Attorney-General and Police Legislation Amendment Act 2025 (Act No. 35, 2025) Assent date 5 December 2025 Commenced 6 December 2025 (s 2) Statute Law Revision and Repeals Act 2026 (Act No. 3, 2026) Assent date 9 February 2026 Commenced 10 February 2026 (s 2) -- 122 of 126 -- ENDNOTES Information Act 2002 115 3 GENERAL AMENDMENTS General amendments of a formal nature (which are not referred to in the table of amendments to this reprint) are made by the Interpretation Legislation Amendment Act 2018 (Act No. 22, 2018) to: ss 1, 4, 5, 46, 49AA, 49A, 49B, 49C, 49D, 49E, 54, 91, 104, 106, 108, 113A, 123, 129 and 159A and sch 1 and 2. 4 LIST OF AMENDMENTS s 3 amd No. 29, 2010, s 7 s 4 amd No. 18, 2004, s 3; No. 7, 2005, s 3; No. 20, 2006, s 4; No. 28, 2008, s 3; No. 11, 2009, s 3; No. 5, 2009, s 170; No. 29, 2010, s 7; No. 3, 2011, s 11; No. 33, 2013, s 72; No. 19, 2014, s 26; No. 1, 2015, s 3; No. 29, 2015, s 4; No. 8, 2020, s 6; No. 9, 2024, s 16; No. 32, 2025, s 127 ss 4A – 4B ins No. 29, 2015, s 5 s 5 amd No. 26, 2003, s 3; No. 29, 2010, s 7; No. 3, 2011, s 11; No. 19, 2014, s 26; No. 29, 2015, s 6; No. 8, 2016, s 45; No. 35, 2025, s 7 s 9 sub No. 20, 2006, s 5 s 9A ins No. 29, 2015, s 7 s 10 amd No. 29, 2010, s 7; No. 3, 2011, s 11 s 11 amd No. 29, 2010, s 7; No. 3, 2011, s 11; No. 35, 2025, s 8 s 12 amd No. 29, 2010, s 7; No. 3, 2011, s 11 s 16 amd No. 29, 2010, s 7 s 17 amd No. 3, 2011, s 11 s 18 amd No. 26, 2003, s 4; No. 29, 2010, s 7; No. 3, 2011, s 11 ss 20 – 21 amd No. 3, 2011, s 11 s 23 amd No. 3, 2011, s 11 ss 26 – 27 amd No. 29, 2010, s 7; No. 3, 2011, s 11 s 29 amd No. 29, 2010, s 7; No. 3, 2011, s 11 s 30 amd No. 29, 2010, s 7; No. 3, 2011, s 11; No. 29, 2015, s 8 s 31 amd No. 29, 2010, s 7 s 33 amd No. 3, 2011, s 11 ss 36 – 38 amd No. 29, 2010, s 7; No. 3, 2011, s 11 s 39 amd No. 26, 2003, s 5; No. 29, 2015, s 9 s 39A ins No. 29, 2015, s 10 ss 40 – 41 amd No. 3, 2011, s 11 s 42 amd No. 29, 2010, s 7; No. 3, 2011, s 11 s 44 amd No. 3, 2011, s 11 s 45 amd No. 29, 2010, s 7; No. 3, 2011, s 11 s 46 amd No. 29, 2010, s 7; No. 4, 2015, s 98 s 48 sub No. 20, 2006, s 6 amd No. 3, 2011, s 11 s 49 amd No. 29, 2010, s 7; No. 23, 2012, s 32; No. 14, 2025, s 33 s 49AA ins No. 32, 2009, s 90 s 49A ins No. 20, 2006, s 7 amd No. 5, 2009, s 171; No. 3, 2011, s 4; No. 33, 2013, s 73 s 49B ins No. 38, 2008, s 60 amd No. 23, 2017, s 171 s 49C ins No. 5, 2009, s 172 s 49D ins No. 14, 2015, s 49 s 49E ins No. 23, 2017, s 172 amd No. 3, 2026, s 64; No. 32, 2025, s 128 s 49F ins No. 32, 2025, s 129 s 50 amd No. 3, 2011, s 11 -- 123 of 126 -- ENDNOTES Information Act 2002 116 s 52 amd No. 3, 2011, s 11 s 53 amd No. 29, 2010, s 7 s 54 amd No. 20, 2006, s 8; No. 27, 2014, s 57 s 55 amd No. 29, 2010, s 7; No. 3, 2011, s 11; No. 35, 2025, s 9 s 57 amd No. 29, 2010, s 7; No. 3, 2011, s 11 s 60 amd No. 29, 2010, s 7; No. 3, 2011, s 11 s 61 amd No. 3, 2011, s 11 s 63 amd No. 3, 2011, s 11 s 65 amd No. 20, 2006, s 9 s 68 amd No. 29, 2010, s 7 s 69 amd No. 18, 2011, s 80; No. 17, 2013, s 155 s 70 amd No. 3, 2011, s 11 s 71 rep No. 3, 2011, s 5 s 72 amd No. 29, 2010, s 7; No. 3, 2011, s 11; No. 19, 2014, s 26 s 73 amd No. 29, 2010, s 7; No. 3, 2011, s 11; No. 1, 2015, s 4 ss 74 – 75 amd No. 3, 2011, s 11 rep No. 1, 2015, s 5 s 76 amd No. 1, 2015, s 6 s 80 amd No. 3, 2011, s 11; No. 1, 2015, s 7 pt 5 div 4 hdg amd No. 1, 2015, s 8 s 81 amd No. 3, 2011, ss 6 and 11; No. 1, 2015, s 9 s 81A ins No. 1, 2015, s 10 amd No. 8, 2020, s 7 s 82 amd No. 29, 2015, s 11 s 84 amd No. 12, 2010, s 3 sub No. 29, 2015, s 12 s 85 amd No. 3, 2011, s 11 sub No. 32, 2025, s 130 s 86 amd No. 3, 2011, s 7 s 87 amd No. 29, 2010, s 7; No. 3, 2011, s 11; No. 29, 2015, s 13 pt 6 div 2 hdg rep No. 32, 2025, s 131 s 90 rep No. 32, 2025, s 131 s 91 amd No. 29, 2010, s 7; No. 3, 2011, s 11 rep No. 32, 2025, s 131 ss 92 – 93 rep No. 32, 2025, s 131 s 94 amd No. 3, 2011, s 11; No. 32, 2025, s 85 rep No. 32, 2025, s 131 s 95 amd No. 29, 2015, s 14 rep No. 32, 2025, s 131 s 96 amd No. 3, 2011, s 11; No. 32, 2025, s 132 s 97 rep No. 32, 2025, s 133 s 98 amd No. 29, 2010, s 7; No. 3, 2011, s 11; No. 29, 2015, s 15 s 100 amd No. 3, 2011, s 11 rep No. 32, 2025, s 133 s 101 amd No. 12, 2010, s 3; No. 29, 2010, s 7 sub No. 29, 2015, s 16 s 102 amd No. 29, 2010, s 7; No. 29, 2015, s 17 pt 7 div 1 hdg om No. 29, 2015, s 18 s 103 sub No. 29, 2015, s 19 s 104 amd No. 5, 2009, s 173; No. 29, 2010, s 7; No. 21, 2018, s 9 s 104A ins No. 29, 2015, s 20 s 105 amd No. 29, 2010, s 7 s 106 amd No. 29, 2010, s 7; No. 29, 2015, s 21; No. 21, 2018, s 10 s 107 amd No. 3, 2011, s 11; No. 29, 2015, s 22 s 108 amd No. 5, 2009, s 174; No. 3, 2011, s 11 -- 124 of 126 -- ENDNOTES Information Act 2002 117 s 109A ins No. 29, 2015, s 23 s 110 amd No. 29, 2015, s 24 s 110A ins No. 29, 2015, s 25 s 111 amd No. 29, 2010, s 7; No. 3, 2011, s 11; No. 29, 2015, s 26 s 112 amd No. 29, 2015, s 27 ss 112A – 112D ins No. 29, 2015, s 28 pt 7A hdg ins No. 29, 2015, s 29 pt 7A div 1 hdg ins No. 29, 2015, s 29 s 113 sub No. 29, 2015, s 29 pt 7A div 2 hdg ins No. 29, 2015, s 29 ss 113A – 113D ins No. 29, 2015, s 29 s 114 amd No. 29, 2015, s 30 s 115 amd No. 3, 2011, s 11; No. 29, 2015, s 31 s 116 amd No. 29, 2010, s 7; No. 3, 2011, s 11; No. 29, 2015, s 32 s 117 rep No. 29, 2015, s 33 s 118 amd No. 29, 2010, s 7; No. 3, 2011, s 11; No. 29, 2015, s 34 pt 7A div 3 hdg ins No. 29, 2015, s 35 s 119 sub No. 29, 2015, s 35 s 120 rep No. 29, 2015, s 35 pt 7 div 2 hdg om No. 29, 2015, s 36 s 121 rep No. 29, 2015, s 37 s 122 amd No. 29, 2010, s 7 rep No. 29, 2015, s 37 s 123 amd No. 12, 2010, s 3; No. 29, 2015, s 38 s 124 amd No. 12, 2010, s 3; No. 40, 2010, s 118 rep No. 29, 2015, s 39 s 125 amd No. 29, 2015, s 40 s 126 rep No. 29, 2015, s 41 s 127 amd No. 12, 2010, s 3 rep No. 29, 2015, s 41 s 128 amd No. 29, 2010, s 7; No. 3, 2011, s 11 rep No. 29, 2015, s 41 pt 8 hdg amd No. 29, 2015, s 42 s 129 amd No. 29, 2010, s 7; No. 3, 2011, s 11; No. 29, 2015, s 43 s 130 amd No. 26, 2003, s 6; No. 29, 2010, s 7 ss 131A – 131B ins No. 11, 2009, s 4 s 132 sub No. 11, 2009, s 4 s 133 amd No. 3, 2011, s 11 s 134 amd No. 11, 2009, s 5; No. 29, 2010, s 7 pt 9 div 2A hdg ins No. 11, 2009, s 6 s 136A ins No. 11, 2009, s 6 s 136B ins No. 11, 2009, s 6 amd No. 9, 2024, s 17 pt 9 div 3 hdg sub No. 11, 2009, s 6 s 137 sub No. 11, 2009, s 6 ss 137A – 137C ins No. 11, 2009, s 6 ss 138 – 140 sub No. 11, 2009, s 6 -- 125 of 126 -- ENDNOTES Information Act 2002 118 s 141 amd No. 26, 2003, s 7; No. 9, 2024, s 18 s 143 amd No. 9, 2024, s 19 s 144 amd No. 3, 2011, s 11; No. 9, 2024, s 20 s 145 amd No. 11, 2009, s 7; No. 12, 2010, s 3; No. 3, 2011, s 11; No. 29, 2015, s 44 s 146 amd No. 12, 2010, s 3; No. 3, 2011, s 8 sub No. 29, 2015, s 45 s 147 amd No. 11, 2009, s 8; No. 12, 2010, s 3; No. 3, 2011, s 11; No. 29, 2015, s 46 s 148 amd No. 26, 2003, s 8; No. 12, 2010, s 3; No. 3, 2011, s 11 sub No. 29, 2015, s 47 ss 149 – 150 amd No. 3, 2011, s 11 s 151 amd No. 3, 2011, s 11 sub No. 29, 2015, s 48 amd No. 9, 2024, s 21 s 153 amd No. 3, 2011, s 11 s 154 amd No. 32, 2025, s 134 s 155 amd No. 29, 2010, s 7 s 155A ins No. 9, 2024, s 22 s 156 amd No. 26, 2003, s 9; No. 29, 2010, s 7; No. 3, 2011, s 11; No. 9, 2024, s 23 s 158 sub No. 3, 2011, s 9 s 159 amd No. 19, 2014, s 26 s 159A ins No. 9, 2012, s 10 pt 12 hdg ins No. 1, 2015, s 11 s 161 ins No. 1, 2015, s 11 pt 13 hdg ins No. 29, 2015, s 49 ss 162 – 164 ins No. 29, 2015, s 49 pt 14 hdg ins No. 32, 2025, s 86 s 164A ins No. 32, 2025, s 135 s 165 ins No. 32, 2025, s 86 ss 166 – 167 ins No. 32, 2025, s 136 pt 15 hdg ins No. 35, 2025, s 10 s 168 ins No. 35, 2025, s 10 sch 1 hdg ins No. 20, 2006, s 10 sch 1 amd No. 19, 2007, s 85; No. 23, 2008, s 21; No. 37, 2007, s 339; No. 3, 2011, s 11; No. 46, 2010, s 23; No. 4, 2017, s 34; No. 12, 2021, s 20; No. 20, 2023, s 22 sch hdg sub No. 20, 2006, s 11 sch 2 amd No. 29, 2010, s 7; No. 3, 2011, s 10; No. 7, 2011, s 140; No. 21, 2018, s 11; No. 9, 2024, s 24 -- 126 of 126 --