Scrutiny of Acts and Regulations Committee
Report on an Interim Privacy Code of Conduct
for Members of the Victorian Parliament, May 2001
1. INTRODUCTION
The law, or best practice?
A Privacy Code of Conduct for Members of
the Victorian Parliament is being considered because they are exempt from
the provisions of the Information Privacy Act which will apply to most
of the Victorian Public Service from 1 September 2001[1].
The legislation as introduced expressly covered Members[2].
The exemption was introduced because of concerns about the possible interference
with the work of MPs, and of Parliament, if MPs were subject to the Act,
and about inconsistency with federal legislation[3].
There was however cross-party agreement that it would not be acceptable
to leave MPs entirely outside a privacy protection framework[4],
and the Minister gave a reference to the Scrutiny of Acts and Regulations
Committee to draft a Code of Conduct an interim Code by 31 May
2001, with a final version by 31 December 2001.
The fact that MPs would be adopting a voluntary
code rather than being bound by the law would have both advantages and
disadvantages.
On the one hand it would allow a flexibility
to avoid technical compliance issues which might interfere with the conduct
of MPs work without doing anything substantive for privacy protection.
It would also allow for the Information Privacy Principles to be modified
if necessary where other important public interests, such as Parliamentary
Privilege, outweigh privacy interests.
On the other hand, it would remove the excuse
that something might technically be exempt from the law and would
put a greater onus on MPs to do the right thing as perceived
by individuals. For example, arguing that electoral roll or white pages
information may technically be exempt from some of the Information Privacy
Principles (because they are generally available publications) would not
be likely to be received sympathetically by the public if the way MPs
handle that information did not accord with community expectations.
In other words, the freedom of a voluntary
code may in some cases lead to the adoption of higher standards than the
law would have required.
Scope of a Code the different roles of Members of Parliament
MPs hold personal information about individuals
in a variety of capacities. They hold information about constituents and
community contacts in their capacity as representatives, but they also
hold information about many of the same people as electors in their capacity
as candidates for election, in most cases as the nominated candidate of
a political party. It is this information about constituents/electors
and others, held in these two capacities, which the Code seeks to protect.
The issue of separating the two roles is discussed further below.
Those MPs who are Ministers or parliamentary
secretaries will also hold personal information in that capacity. For
this information, they are subject to the Act[5],
and will be guided by the privacy policies of the agency or agencies for
which they are responsible.
Many MPs will also play other roles
as members or office holders of non-government organizations; as appointed
or elected members of various boards, trusts or other bodies; and as private
individuals with business and personal interests. In some of these roles
they will handle personal information, and will be subject to whatever
privacy principles apply either under the Victorian Act, or for
private sector activities, under the Privacy Act 1988 (Clth)[6].
They should receive guidance on their obligations when operating in these
other capacities from the relevant organization.
The interim Code does not deal with the
protection of the personal information about MPs themselves and their
employees held in the context of human resource functions. While these
individuals have as much of an interest in having their personnel
information protected as anyone else, the IPA exempts the Joint Services
Department (JSD).[7] The JSD, as the
employer of MPs staff and as the administrator of MPs remuneration
and allowances and conditions, holds the same range of personal information
as does any other employer. Whether the JSD should voluntarily adopt a
privacy policy, perhaps based on work already under way in other Victorian
government agencies, is a separate matter for the Parliament to decide.
If it chose to do so, the existing Code of Conduct for parliamentary employees,
which already deals with confidentiality and security[8],
could also be updated to include compliance with all of the privacy principles,
reflecting the policy.
Representative or Party?
In practice, MPs do not clearly distinguish
the capacities in which they deal with individuals a constituent
with a problem will also be a voter at the next election, and all electors
are potential cases. Knowledge acquired about an individual
in one context will inevitably be taken into account in the other. At
a legal level this merging of roles could be confusing, given that political
parties are wholly exempt from the Privacy Act 1988 (Clth). But
at a practical level this need not create any difficulty if Victorian
MPs are prepared to treat personal information they hold about constituents
and others in the same way whether it comes to them, or is used by them,
in a party political or representative context.
The only other way of dealing with the two
roles would be to try to separate the records, and say that all party
or campaigning information (such as assessments of voting intentions)
should be outside the scope of the Code. This would leave the Code applying
only to information collected about constituents in the course of constituency
casework. While this distinction might be easy to apply to paper files,
it would be very difficult to apply to computerised records, where MPs
typically use party supplied software programs to store both basic information
about electors provided by the Electoral Commission; voting intentions
and at least brief details of casework. Unless the Parliament decides
otherwise, it is recommended that no attempt be made to separate
campaign information from constituency information for the purposes of
this Code. Internal party information held separately (such as papers
of caucus, branch and faction meetings), will be outside the scope of
the Code in line with the exemption from the Privacy Act 1988
(Clth).
Inconsistency with federal law
One of the reasons given for exempting Members
from the IPA was potential inconsistency with the Privacy Act 1988
(Clth), which exempts members of (all Australian) parliaments, political
parties and their contractors and volunteers for all acts and practices
relating to the political or electoral process[9].
Reference was made in debate to the practical problem of co-located federal
and state electorate offices[10].
If the Victorian Parliament voluntarily
adopts a Code of Conduct on privacy, some inconsistency is inevitable
and unavoidable, unless members voluntarily extend their compliance with
the Code to any information they deal with in relation to all political
activities. This has been suggested above in relation to campaign
information but not internal party information. For the latter information,
and in the case of co-located offices, Members will have to work out an
arrangement to differentiate information subject to the Code.
2. PERSONAL INFORMATION HELD BY MPs
It is helpful to set out the typical way
in which personal information is collected and held by Victorian MPs,
as a context for the draft Code:
Basic personal details about all electors
in the Members constituency are received on disk from the Electoral
Commission, with monthly updates. This information comprises name, address
and gender. Most members will enter this information to a computerised
database which also contains telephone numbers and other contact details,
and at least a coded reference to the electors characteristics or
dealings with the member. In some cases the database may contain free
text details of any casework or other intelligence about
the elector, although most members will keep the bulk of correspondence
with constituents on a paper file. In some constituencies, the database
will also be used to record party affiliations and assessments of voting
intentions (more so in marginal electorates).
Members of the main political parties use
party supplied software programs, and the electoral roll information is
supplied and updated by the party offices, with additional information
such as telephone numbers and party affiliations already added.
All Members have at least two desktop computers
and a portable notebook computer, with standard proprietary software including
Microsoft Office, Internet Explorer for accessing the World Wide Web (Internet)
and Lotus Notes for E-mail. Members will typically use this equipment
to record details of community, media and other contacts, and to prepare
and store word-processed correspondence. While this basic infrastructure
is supplied and supported by the Joint Services Department, there is no
restriction on what other computing or communications equipment a member
may use, and some Members will keep some personal information on other
computers as well as in paper files.
The physical location of files and computers
varies, with most of them held in electorate offices (some shared) but
some information held at least temporarily in Parliament House offices
or at the Members home. The notebook computers can of course be
anywhere they can access the Parliament network (ParlyNet) by wireless
connection within the Parliamentary precinct and by dial-up connection
elsewhere.
E-mail between members and between members
and third parties is facilitated by the ParlyNet, with each members
mailboxes residing on servers in Parliament House.
3. MPs AND THEIR STAFF
Although electorate office staff are employed
by the Parliament, they are responsible on a day to day basis to the Member
to whom they are assigned. It is suggested that this Code should apply
to staff as well as to MPs themselves (although some provisions such as
those concerning privilege will only apply to MPs). In the event of any
breach of the Code it would be a matter of fact, to be determined by investigation,
as to who was actually responsible. If the staff member had been following
specific or general instructions, the Member could be responsible, just
as they are for their own actions. If on the other hand a staff member
undertook some action on their own account outside the accepted policies,
they may be liable in their own right.
Many MPs make use of volunteer workers.
Whether they are engaged by the Member or by a political party, they should
be required to sign a confidentiality agreement before being given access
to any personal information. Because there may be limited recourse to
sanctions and remedies for breaches committed by volunteers, Members should
consider carefully whether it is appropriate for volunteer workers to
be given access to some categories of personal information.
4. THE INFORMATION PRIVACY PRINCIPLES APPLIED TO MEMBERS OF PARLIAMENT
The discussion in this chapter supports
the interim Code which is contained in Appendix 1.
Collection IPP 1 (all personal information) & IPP 10 (sensitive
information)
Members main concerns with the application
of the Collection principles are:
Sources
The electoral roll information is fairly
and lawfully obtained and in any case is arguably partially exempt. Information
provided by individuals and others in the course of casework, and from
canvassing can also be justified and can comply with the principle.
While electors and constituents will expect
MPs to keep basic particulars about them, and to record any direct communications,
they may be less sympathetic to the collection of information about them
from other sources. At one end of the spectrum, no-one could reasonably
object to matching with the white pages to add telephone numbers
people have the choice of not listing their phone numbers (although there
is a separate privacy issue as to whether this should be free of charge
and/or the default). Members (and political parties) should not however
use reverse directories that allow one to find a name and
address from a number. Reverse directories are not allowed to be provided
within the telecommunications industry, and use of the few commercial
products that are still available would be arguably unlawful and certainly
unfair.
Matching to acquire other publicly available
information eg: chairman of community association; Telstra shareholder;
recent home improver would not technically be covered by the Information
Privacy Act, due to the exemption for generally available publications
(s.11), but individuals could be expected to be sensitive to such record-keeping
and Members could demonstrate their commitment by applying the Code to
all such information.
So-called soft information,
or intelligence, is perhaps the most difficult area of data collection.
Do people have a reasonable expectation, and awareness, that their MPs
may record opinions or unverified attributes about them, eg: green sympathies,
labor voter, anti-abortion? Even if they dont, perhaps they should
do given that recording such information is arguably a necessary and desirable
part of the democratic process? The Code should not place any restriction
in principle on recording of political intelligence, but should
deal with any concerns by adopting the access and correction principle
(see later).
Unsolicited information needs to be assessed
for relevance and quality to ensure that it is necessary, and caution
may be needed in some cases to assess whether the information may have
been obtained unlawfully as with leaks. Whether a Member
decides to record and use unlawfully acquired information will be a political
judgement, but Members should be aware that it could place them in breach
of this Principle, as well as potentially committing or aiding and abetting
a criminal offence.
Notification
It would be prohibitively expensive to write
to all electors notifying them retrospectively that information about
them is held by their members of parliament. The Act recognises this for
other agencies by applying IPP1 and 10 only to information collected after
commencement. There is in any case a reasonable expectation that this
information will be provided to MPs. The Electoral Commission will contribute
to creating this expectation by satisfying its obligation under the Act
to notify electors about uses of the roll when registering[11].
Members can comply with these principles
by taking advantage of opportunities for notice in course of future communications,
particularly those which solicit information eg circulars or advertisements
that invite constituents to call or write with any concerns. Such communications
could carry a brief reference to the fact that the Member is subject to
a Privacy Code of Conduct and invite individuals to enquire for further
details.
Sensitive Information
IPP10 imposes stricter conditions on collection
of sensitive information defined in the Act to include such things
as racial or ethnic origins, political opinions and religious affiliations
(but not health information see below). All of these categories
of information will be recorded for at least some constituents by MPs
and it would be unrealistic to apply the strict conditions of IPP 10,
which would usually require consent to collect. MPs need to have the freedom
to collect these categories of information the compensatory safeguard
being the right of access and correction and the proportionate use
principle that is suggested below.
Health information
Health information has been excluded from
the coverage of the Information Privacy Act and is protected instead by
the Health Records Act 2001, which does apply to MPs, although
not to the Parliamentary Departments. The collection principle under the
Health Records Act (HPP1) is similar but not identical to IPP1. Further
work is needed to establish exactly what the obligations of MPs are in
relation to any health related information that they collect and hold.
The draft Interim Code acknowledges that these obligations exist.
Use & Disclosure IPP 2
There will be no difficulty complying with
this principle for the majority of primary, uses. Information
provided by constituents can be used to pursue casework, including disclosure
to relevant agencies. Information about issues and preferences obtained
from individuals themselves while canvassing can be used to communicate
back to them during elections. These uses are justified on the basis of
being the primary purpose of collection (which should have been communicated
to the individuals while collecting). In many cases there will also be
either implied or express consent[12].
Casework
In relation to casework, MPs should be careful
not to exceed the reasonable expectations and wishes of constituents.
MPs should not assume that someone bringing a problem to their local member
necessarily authorises whatever uses and disclosures the MP thinks may
be required to resolve the issue. A dialogue is required, with MPs and
their staff making sure that the constituent understands and approves
of the proposed action at each step. Some may be willing to give the Member
free rein, but others will, for instance, not want an agency contacted
until they have explored their options. The same applies to referrals
the Member may decide that a constituents problem is best
handled by another agency or public official, but they should not simply
hand over the case to the other agency without the express consent of
the individual.
Political communication
Members main interest in secondary
uses of personal information about constituents and electors is in political
direct marketing. Members will typically wish to use information
about a voters activities and preferences obtained indirectly (from
third party sources) to convince them to vote for the Member at the next
election - or to become a more active supporter or helper.
Unlike the National Principle 2 in the Privacy
Act 1988 (Clth), the Victorian IPP 2 does not have a special exception
dealing with direct marketing (allowing businesses one unexpected
communication on condition that they then offer an opt-out).
If IPP 2 applied, political direct marketing, whether it is by personally
addressed letter or E-mail, or by phone call, would have to fit within
the exception for related purposes within the individuals
reasonable expectation[13].
Experience suggests that individuals
reasonable expectation about uses does not necessarily co-incide
with what MPs regard as normal and appropriate.
One solution to this mismatch would be to
voluntarily offer electors an opt-out from receipt of any
further personalised communication (this would not constrain non-personalised
communications such as letterbox drops of campaign leaflets). This should
be in the interests of Members and their parties as it would ensure that
materials were not wasted. But politicians are understandably reluctant
to close off channels of communication on the basis that voters
circumstances change and their voting preferences are volatile, and in
the hope that the next message may be the one that changes someones
mind. Some would argue that political communications are so important
in a participatory democracy that individuals preferences should
be overridden, leaving MPs free to direct market their message
to any elector at any time.
Whether they want to go as far as offering
a no communication option is something only MPs can collectively decide,
and needs further debate during the development of the final Code of Conduct.
In the meantime, the interim Code does not seek to place conditions on
political direct marketing, accepting it as an additional exception to
the principle.
Petitions and Privilege
Another practical example is petitions.
Do signatories to petitions expect that their support for a cause will
be made public? Under the procedures applying to petitions to Parliament,
signatories are asked to give their name and address to verify themselves
and prevent fictitious stacking[14].
Maybe they should expect their identity to be published, but there have
been complaints when petitions have been tabled in Parliament complete
with names and addresses of all signatories.
Disclosures in Parliament do of course attract
privilege, and are in a sense the ultimate case of disclosure authorised
by law. MPs may nevertheless wish to voluntarily bind themselves to exercise
restraint in the disclosure of personal information. The Code could require
consideration of whether the disclosure, and the amount of detail disclosed,
are really necessary to achieve the particular purpose such as
accountability. In the case of petitions, the purpose would usually be
served by the disclosure of the text, perhaps the names of the principal
sponsors and just the number (and perhaps the geographical distribution)
of other signatories. The Standing Orders and Rules of the House regarding
petitions already address privacy concerns by providing for the number
of signatures to be printed in Hansard and for a copy of the petition
(but not all the signatories) to be referred to the relevant Minister[15].
This example supports a provision in the
Code committing MPs to proportionate use of personal information
not just in Parliament itself but in all their activities. This
has been included in the draft Interim Code. In deciding what is proportionate,
the sensitivity of the personal information should be taken into account[16].
Most members already apply this rule in practice, and would for instance
not include a constituents name in a media release without express
consent.
Other exceptions
MPs will of course have to disclose personal
information to third parties if required to do so by law for instance
by a court, and will presumably wish to retain the discretion to use and
disclose where authorised by law, and in emergencies[17].
On the other hand, MPs may well see no need for exceptions that allow
use and disclosure of personal information for law enforcement, revenue
protection etc[18]. It is unlikely
that law enforcement or revenue authorities would see the routine bulk
information held by Members as useful they have their own channels
for appropriate access to the electoral roll. Presumably MPs would see
their constituents casework as at least potentially highly confidential,
and would not want to release details without their consent or a legal
requirement. The only exception might be if they became aware of unlawful
activity and felt a duty to report it for this reason MPs should
have the benefit of the appropriate exception in IPP 2[19].
Statistical analysis of their electorate
is becoming a common tool for MPs, and there is no reason why they cannot
use personal information for research and analysis, provided the results
are not published in a form which identifies any individual. This is provided
for as an exception in the Victorian IPP, where seeking consent is not
practicable, although it is arguably not a use of personal information
that needs protection no such exception has been provided in the
federal NPP 2. It is suggested that MPs should retain the discretion to
analyse personal information in this way subject only to the no-identification
condition.
Data Quality IPP 3
There is no reason why Victorian MPs cannot
comply with this principle in full. It requires that reasonable steps
be taken to ensure that personal information is accurate, complete and
up-to-date. In practical terms it means only that information recorded
about constituents, where it not recent, should wherever possible be verified
before use preferably by checking with the individual concerned.
MPs are entitled to assume that the latest version of the electoral roll
meets this principle, and that information provided by constituents themselves
can be taken at face value, except where it relates to another individual,
when judgement needs to be applied. It is acknowledged that some information
collected and held by MPs will by its nature be unverifiable and of uncertain
provenance and quality, in which case judgement is again called for in
its use.
Security IPP 4
There seems no reason why Victorian MPs
cannot meet the requirements of the security principle in full. The security
built into ParlyNet, partly to meet Members concerns about confidential
party communications, meets and exceeds the specifications required to
secure any personal information held on the servers or in transit. There
is however a need for continual monitoring and periodic audits of the
implementation of IT security.
Responsibility for security for personal
information held on the desktops or notebook PCs and for paper files,
rests with the individual MP and his or her electorate office staff.
MPs should make use of security features
of the computer hardware and software they use such as password controlled
access and automatic time-out log off. It may be appropriate for different
staff members, and any volunteers authorised to use the computers, to
have different access privileges. Regular use of back-up facilities is
an important precaution against loss of data, but appropriate care needs
to be taken to store back-up disks or tapes securely. Further guidance
from the Joint Services Department IT unit on computer security may be
required.
MPs should take advantage of the confidential
waste disposal service for paper waste available through the Joint Services
Department.
The inevitable use of Members homes
as an alternate office poses some additional security risks. Members will
not only use their notebook PC at home but will also often have paper
records at home. While acknowledging the importance of trust in family
members, there is always the prospect of visitors and tradespersons having
potential access to what could be quite sensitive information. Generally
only the members themselves (and staff) should be given password access
to constituents information on the notebook computer and it would
be desirable for members to have, and use, lockable filing cabinets for
storage of work related papers in their homes.
There is an unresolved issue concerning
the fate of an MPs records on retirement or defeat at an election.
The convention is for MPs in this position to be given a few weeks to
settle their affairs and vacate their electorate and Parliament House
offices. But there is no formal guidance on what they should do with their
records, including personal information about constituents. Practice varies
between transfer to the incoming member (usually only if of the same party);
transfer to party offices, or disposal.
This issue involves many other considerations
besides privacy. It is suggested that the Parliament should develop a
formal policy on transfer/disposal of records by retiring Members. The
outcome of this policy can then be reflected in the final Privacy Code
of Conduct.
Openness IPP 5
This is an important principle designed
to make information handling of personal information more open and transparent,
and to allow individuals to assess whether an organization might hold
personal information about them.
It would be unnecessary and onerous for
each MP to have to prepare a document to comply with this principle. There
is sufficient commonality in the way in which all MPs collect, hold and
use personal information to make a single document a more appropriate
means of compliance.
It is suggested that this Code of Conduct
be made publicly available and publicised, together with an explanatory
document to be prepared by one of the Parliamentary Departments, summarising
in general terms what sort of personal information MPs hold, for what
purposes, and how they collect, hold, use and disclose that information.
Access & Correction IPP 6
It is fundamental to any privacy regime
that individuals should, in principle, be able to see what information
is held about them and be able to challenge its accuracy, currency and
completeness. Having said that, all privacy laws accept that there is
a range of legitimate grounds for withholding information.
The question is what exemptions from the
access principle are appropriate for MPs which of those in IPP
6 are relevant and are additional grounds required? Protection of confidential
sources is one obvious area which may require additional grounds.
This is a complex issue which requires further
study and discussion as input to the final Code. It is suggested that
for the interim Code, there should be a general discretion for MPs to
withhold information on any grounds they think appropriate, but that this
should be balanced by a right to be informed of any withholding and a
right of appeal to a relevant officer of the Parliament (see section on
sanctions and remedies).
A common misunderstanding about the access
principle is that it will involve an exhaustive search for all the information
about an individual that may be held. On computer files it will be easy
to search for a name, but an individual may be mentioned in a letter filed
by topic or under the name of the sender. In practice, it is quite legitimate
to ask the requester for clues as to the context, and therefore likely
location of information about them, eg: have they been canvassed? are
they involved in a particular community issue? If information cannot be
located fairly easily, it does not need to be provided.
Members should be able to comply with those
parts of the principle that deal with explanations, use of intermediaries,
and with correction rights, and these have been retained in the interim
Code. The provision for charging for access has been removed pending further
consideration for the final Code.
Unique Identifiers IPP 7
This principle is intended to limit the
development of multi-function identifiers, which are widely seen as undesirable
incursions into personal privacy because of their role in facilitating
data matching and record linkage. It is not intended to prevent the use
of identifiers within an individual MPs record-keeping system -
only the assignment and use of identifiers in common between different
MPs or between MPs and other organizations.
It is suggested that MPs should commit to
a simplified version of this principle.
Anonymity IPP 8
This Principle aims to preserve the ability
of individuals to deal with agencies without revealing their identity
wherever that is lawful and practicable. Applied to MPs it simply means
that they should be prepared to respond to initial enquiries or complaints
from people who prefer to remain anonymous. There will be relatively few
cases where it will be possible to pursue an issue without needing to
be aware of a persons identity, but some where it may be essential
(ie whistleblowers).
Trans-border Data Flows IPP 9
IPP 9 is a response to the international
concerns about movement of personal information evading the
protection provided by the law in any particular jurisdiction. Australia
is moving towards a reasonably comprehensive framework of privacy protection,
with laws applying to the Commonwealth and NSW public sectors as well
as Victorias, and the Commonwealth Act covering, or expressly exempting,
the private sector. Transfers of personal information within these protected
areas should not be a problem. There remains an issue if personal information
is transferred to a public sector body in another State or Territory (except
NSW), or to anyone in another country that does not have adequate privacy
protection.
The Commonwealth and NSW Privacy Commissioners
will be issuing advice on adequacy in other jurisdictions and the European
Union will be making a judgement about the overall adequacy of Australias
privacy protection. In the meantime, it is suggested that the interim
Code simply acknowledges the issue and commits MPs to consult the Victorian
Privacy Commissioner before they transfer any personal information to
a jurisdiction without privacy laws.
Sensitive Information IPP 10
IPP 10 contains special rules for the collection
of sensitive information (excluding health information). It has already
been discussed under the Collection Principles heading above (see IPP
1).
5. SANCTIONS AND REMEDIES
It is obviously desirable that there should be some process
by which individuals who suspect a breach of the Code can seek redress.
The Act provides for investigation and conciliation
by the Privacy Commissioner, and determination of any outstanding disputes
by the Victorian Civil and Administrative Tribunal (VCAT). However, one
of the main reasons for the exemption of MPs from the Act was that it
was considered inappropriate to subject Members to the jurisdiction of
the Commissioner and the VCAT in relation to the performance of their
functions as Members of Parliament. This could be seen as inconsistent
with the doctrine of separation of powers[20].
One option would be to vest authority to
investigate breaches of the Code in a committee of the Parliament itself,
while another would be to leave this role to the Presiding Officers. Precedents
exist in relation to the Register of Members Interests[21];
and the right of reply in the Legislative Assembly[22].
While these initiatives each have a different origin and the precise mechanism
for investigation and dispute resolution varies, they share the common
characteristic of peer review, thereby avoiding any external interference
with Parliamentary sovereignty.
In contrast, the draft policies on E-mail
and Internet Use and on Equal Opportunity and Harassment[23]
do not specify any complaint or dispute resolution mechanisms, but only
refer in general terms to the prospect of legal liability. This carries
some weight because a range of criminal and civil actions could be taken
against MPs under various applicable laws. In the case of privacy however,
there would be no point in simply referring to alternative remedies, as
the avenues of redress through the Privacy Commissioner and the VCAT have
been expressly ruled out by the exemption of MPs from the IPA.
Consideration will need to be given to appropriate
sanctions for breaches of a privacy Code. Under the IPA, agencies can
be ordered by the VCAT to take a range of actions including apologies,
undertakings, remedial steps, and, where appropriate, payment of compensation
of up to $100,000[24]. Sanctions
against Members staff acting without authority could be disciplinary
action by the Joint Services Department, but there is at present no precedent
for specific sanctions against Members breaching the Code, other than
that wilful breaches of the Register of Interests code of conduct are
a contempt of the Parliament and can attract a fine of up to $2,000.
The details of a mechanism for handling
complaints about breaches of the Code, and the issue of appropriate sanctions,
should be considered during the development of the final Code. It is suggested
that the interim Code should simply commit MPs to be accountable for compliance
to an Presiding Officer or Committee of Parliament. The interim Code should
also make staff accountable to management of the relevant Parliamentary
Department (for electorate office staff, the JSD) for any of their actions
which breach the Code but which were undertaken outside the scope of their
authority (ie: contrary to instructions from their Member).
Footnotes |
|
[1] |
Public sector agencies have a further 12 months before they need
to comply with the Information Privacy Principles (IPPs) in the
Act, and before they can be the subject to complaints see
section 16. |
|
[2] |
Information Privacy Bill 2000, clause 9(1)(c). |
|
[3] |
See Parliamentary Debates, Legislative Assembly, 5 September
2000, p 498, The Hon. John Brumby MLA. |
|
[4] |
See Parliamentary
Debates, Legislative Assembly, 5 September 2000, p 499, Mr Victor
Perton MLA. |
|
[5] |
Information Privacy
Act 2000, sections 9(1)(a) and (b). |
|
[6] |
As amended
in 2000 the private sector coverage takes effect on 21 December
2001. |
|
[7] |
Formerly the Dept of Parliamentary Services see definition
of public sector agency in Information Privacy Act
2000, and s. 6(1)(i) of the Public Sector Management and
Employment Act 1998. |
|
[8] |
Code of Conduct for Employees of the Parliament of Victoria,
1996, paragraphs 28 & 29. |
|
[9] |
Privacy Act 1988 (Clth), sections 6C and 7C. |
|
[10] |
See Parliamentary Debates, Legislative Assembly, 5 September
2000, p 499, The Hon. John Brumby MLA. |
|
[11] |
Because the federal and state rolls are compiled and administered
jointly, the principle in the Privacy Act 1988 (Clth) that
requires notification even for generally available publications
(IPP2) will prevail over the collection principle in the Victorian
Act which does not apply to generally available publications, by
virtue of s.11. In any case, some information supplied to MPs by
the Electoral Commission (eg gender) is not publicly available. |
|
[12] |
IPP 2.1(b). |
|
[13] |
IPP 2.1(a). |
|
[14] |
Parliament of Victoria, Legislative Assembly, Fact Sheet 8
Petitions. |
|
[15] |
Fact Sheet 8. Also, the New Zealand Parliament has adopted a
policy which expressly addresses the right to privacy of signatories
to petitions (Clerks Office Policy "Access to Petitions"
endorsed by the Speaker on 22 June 1988). |
|
[16] |
The New Zealand Parliament has adopted a Standing Order (371(1)(a))
that names of persons should not be used in questions unless they
are strictly necessary to render the question intelligible. |
|
[17] |
IPP 2.1(f) and (d). |
|
[18] |
IPP 2.1(g) and (h). |
|
[19] |
IPP 2.1(e). |
|
[20] |
Although MPs have been made subject to the jurisdiction of the
Health Services Commissioner and VCAT under the Health Records
Act 2001. |
|
[21] |
Established under the Members of Parliament (Register of Interests)
Act 1978. |
|
[22] |
First established in 1998
and confirmed under the Sessional Orders adopted by the Legislative
Assembly on 4 November 1999. |
|
[23] |
Under development in 2001
as a voluntary initiative of the Parliament. |
|
[24] |
Information Privacy
Act 2000, section 43. |
Scrutiny
of Acts and Regulations Committee
©
Parliament of Victoria |