{"id":"C2004A04095","name":"Data-matching Program (Assistance and Tax) Act 1990","slug":"data-matching-program-assistance-and-tax-act-1990","collection":"act","jurisdiction":"commonwealth","status":"in_force","isInForce":true,"actNumber":"20 of 1991","makingDate":null,"administeringDepartment":null,"currentVersion":{"id":26517,"registerId":"commonwealth-C2004A04095-current","compilationNumber":null,"startDate":"2026-04-01","status":"InForce","reasons":null,"registeredAt":null},"sections":[{"sectionNumber":"Part 1","sectionType":"part","heading":"Preliminary","content":"## Part 1—Preliminary","sortOrder":0},{"sectionNumber":"1","sectionType":"section","heading":"Short title","content":"#### 1 Short title\n\n  This Act may be cited as the Data‑matching Program (Assistance and Tax) Act 1990.","sortOrder":1},{"sectionNumber":"2","sectionType":"section","heading":"Commencement","content":"#### 2 Commencement\n\n  This Act commences on the day on which it receives the Royal Assent.","sortOrder":2},{"sectionNumber":"2A","sectionType":"section","heading":"Application of the Criminal Code","content":"#### 2A Application of the Criminal Code\n\n  Chapter 2 of the Criminal Code applies to all offences against this Act.","sortOrder":3},{"sectionNumber":"3","sectionType":"section","heading":"Interpretation","content":"#### 3 Interpretation\n\n  (1) In this Act, unless the contrary intention appears:\n\n> agency means:\n\n    (a) the matching agency; or\n    (b) a source agency.\n\n> assistance agency means:\n\n    (b) the Education Department; or\n    (c) the Social Services Department; or\n    (d) the Veterans’ Affairs Department; or\n    (e) the Human Services Department.\n\n> assisted person means a person:\n\n    (a) to whom personal assistance is being, or has been, given; or\n    (b) who is claiming personal assistance.\n\n> basic data, in relation to a person, means:\n\n    (a) the person’s family identity data; or\n    (b) the person’s income data; or\n    (c) the person’s TFN data.\n\n> Chief Executive Centrelink has the same meaning as in the Human Services (Centrelink) Act 1997.\n\n> child, in relation to a person, includes anyone who is the person’s child for the purposes of any personal assistance or any tax law.\n\n> data matching cycle means a cycle the steps in which are set out in section 7.\n\n> data matching program means the program referred to in section 6.\n\n> declared income, in relation to a person, means any income, or income of a particular kind, of the person for the purposes of any personal assistance or tax law.\n\n> dependant, in relation to a person, includes anyone who is the person’s dependant for the purposes of any personal assistance or tax law.\n\n> Education Department means the Department that is responsible for administering the payments known as child care benefit and child care rebate.\n\n> family identity data, in relation to a person, means any of the following data about the person:\n\n    (a) surname;\n    (b) any other name;\n    (c) initial of any other name;\n    (d) any former surname;\n    (e) any other former name;\n    (f) the initial of any other former name;\n    (g) where the person is alive, current residential address or addresses and any other current address or addresses;\n    (h) an identification number for the purpose of personal assistance;\n    (j) sex;\n    (k) marital status;\n    (m) date of birth;\n    (n) where the person is dead, date of death;\n    (p) surname, any other name, initial of any other name, address or addresses and date of birth of any living spouse of the person;\n    (q) surname, any other name, initial of any other name, date of birth and date of death of any deceased spouse of the person;\n    (r) surname, any other name, initial of any other name, sex and date of birth of any living child of the person;\n    (s) surname, any other name, initial of any other name, sex, date of birth and date of death of any deceased child of the person;\n    (t) surname, any other name, initial of any other name, address or addresses and date of birth of any living parent of the person;\n    (u) surname, any other name, initial of any other name, last address and date of death of any deceased parent of the person;\n    (v) surname, any other name, initial of any other name, sex and date of birth of any other child of a parent of the person if the child:\n    (i) has not turned 25; and\n    (ii) is a dependant of a parent of the person;\n    (w) kind of personal assistance of the person.\n\n> Human Services Department means Services Australia.\n\n> identification number for the purpose of personal assistance has the meaning given by subsection (2).\n\n> income data, in relation to a person, means:\n\n    (a) declared income of the person; or\n    (b) declared income of a spouse of the person; or\n    (c) declared income of a parent of the person; or\n    (d) personal assistance data of the person; or\n    (e) spouse rebate of the person.\n\n> matching agency means:\n\n    (a) unless a direction under section 3A is in force—the officers of the Social Services Department referred to in subsection 4(1); or\n    (b) if a direction under section 3A is in force—the Departmental employees (within the meaning of the Human Services (Centrelink) Act 1997) referred to in subsection 4(2).\n\n> officer, in relation to a source agency, means a person with duties, powers or functions in relation to an Act matters under which are dealt with by the agency.\n\n> parent, in relation to a person, includes anyone who is the person’s parent for the purposes of any personal assistance or any tax law.\n\n> person means an individual whether alive or dead.\n\n> personal assistance means:\n\n    (b) assistance known as any of the following:\n    (i) assistance under the AUSTUDY Scheme;\n    (ii) assistance under the ABSTUDY Scheme;\n    (iia) financial supplement under the Student Financial Supplement Scheme constituted by Part 4A of the Student Assistance Act 1973;\n    (iii) assistance under the Assistance for Isolated Children Scheme;\n    (iv) assistance under the Aboriginal Overseas Study Assistance Scheme;\n    (v) assistance under the Scheme providing living allowances for English as a Second Language;\n    (vi) assistance under the Commonwealth rebate for apprentice full‑time training scheme; or\n    (c) a social security payment within the meaning of the Social Security Act 1991; or\n    (caa) a seniors health card referred to in subsection 1061ZG(1) of the Social Security Act 1991; or\n    (cb) a payment of financial supplement under:\n    (i) Chapter 2B of the Social Security Act 1991; or\n    (ii) the Student Financial Supplement Scheme established under Chapter 2B of the Social Security Act 1991 as in force before the commencement of Schedule 2 to the Youth Allowance Consolidation Act 2000; or\n    (d) any pension, allowance or other benefit or assistance given under the Veterans’ Entitlements Act 1986; or\n    (daa) any compensation or other benefit given under the Military Rehabilitation and Compensation Act 2004; or\n    (dd) family assistance within the meaning of the A New Tax System (Family Assistance) Act 1999; or\n    (e) an instalment of parental leave pay under the Paid Parental Leave Act 2010;\n  and, in relation to a person, means personal assistance given to, or claimed by, the person.\n\n> personal assistance data, in relation to a person, means:\n\n    (a) the type of the person’s personal assistance; and\n    (b) the rate or amount of that personal assistance; and\n    (c) any information regarding overpayments of personal assistance to the person.\n\n> personal identity data, in relation to a person, means any of the following data about the person:\n\n    (a) surname;\n    (b) first other name;\n    (c) second other name or initial of second other name (if any);\n    (d) current address or addresses;\n    (e) sex;\n    (f) date of birth.\n\n> Social Services Department means the Department administered by the Minister administering this Act.\n\n> source agency means:\n\n    (a) an assistance agency; or\n    (b) the tax agency.\n\n> spouse, in relation to a person, includes anyone who is:\n\n    (a) a spouse or a partner of the person for the purposes of any personal assistance; or\n    (b) a spouse of the person for the purposes of any tax law;\n  and marital status has a corresponding meaning.\n\n> spouse rebate, in relation to a person, means the dependent spouse rebate of the person within the meaning of the Tax Act.\n\n> Tax Act means the Income Tax Assessment Act 1936 and the Income Tax Assessment Act 1997.\n\n> tax agency means the Commissioner of Taxation.\n\n> tax data means:\n\n    (a) tax family identity data; or\n    (b) tax income data; or\n    (c) tax TFN data.\n\n> tax family identity data means the family identity data of persons that is held by the tax agency for the purposes of a tax law.\n\n> tax file number has the same meaning as in Part VA of the Tax Act.\n\n> tax income data means the income data of persons that is held by the tax agency for the purposes of a tax law.\n\n> tax law means any law of the Commonwealth relating to taxation.\n\n> tax TFN data means the TFN data of persons that is held by the tax agency for the purposes of a tax law.\n\n> TFN data, in relation to a person, means:\n\n    (a) the person’s tax file number; or\n    (b) the tax file number of any spouse of the person; or\n    (c) the tax file number of any parent of the person.\n\n> Veterans’ Affairs Department means the Department administered by the Minister administering the Veterans’ Entitlements Act 1986.\n\n  (2) In this Act, identification number for the purpose of personal assistance means:\n    (a) for the purposes of the definition of family identity data in subsection (1) and any references to family identity data—a number allocated to a person by an assistance agency for the purpose of assistance provided to the person; and\n    (b) for any other purpose—a number referred to in paragraph (a) as modified by the matching agency.\n  (3) The reference in paragraph 5 in Step 2 of the data‑matching cycle in section 7 to the matching agency extracting numbers from data includes a reference to the matching agency extracting numbers and modifying them as mentioned in paragraph (2)(b), and numbers so modified are taken to have been extracted from that data.","sortOrder":4},{"sectionNumber":"3A","sectionType":"section","heading":"Directions by Secretary of the Social Services Department","content":"#### 3A Directions by Secretary of the Social Services Department\n\n  (1) If:\n    (a) the Secretary of the Social Services Department delegates to:\n    (i) the Chief Executive Centrelink; or\n    (ii) a Departmental employee (within the meaning of the Human Services (Centrelink) Act 1997);\n    all or any of that Secretary’s powers under an Act; and\n    (b) as a result of the delegation it is not appropriate for that Department to be an assistance agency within the meaning of this Act;\n  that Secretary may, by legislative instrument, direct that despite subsection 3(1), while the direction remains in force, that Department is not taken to be an assistance agency.\n  (2) A direction has effect according to its terms.\n  (3) A direction comes into force on the first moment of the day next following the day when it is registered in the Federal Register of Legislation under the Legislation Act 2003, or on such later day as is specified in it, and remains in force until it is revoked.","sortOrder":5},{"sectionNumber":"3B","sectionType":"section","heading":"Norfolk Island","content":"#### 3B Norfolk Island\n\n  This Act extends to Norfolk Island.","sortOrder":6},{"sectionNumber":"Part 2","sectionType":"part","heading":"Data‑matching","content":"## Part 2—Data‑matching","sortOrder":7},{"sectionNumber":"4","sectionType":"section","heading":"Matching agency","content":"#### 4 Matching agency\n\n  (1) The Secretary of the Social Services Department is to ensure that there are officers of that Department who are responsible for the matching of data under this Act.\n  (2) While a direction under section 3A is in force, the Chief Executive Centrelink is to ensure that there are Departmental employees (within the meaning of the Human Services (Centrelink) Act 1997) who are responsible for the matching of data under this Act.","sortOrder":8},{"sectionNumber":"5","sectionType":"section","heading":"Effect of other Acts","content":"#### 5 Effect of other Acts\n\n  (1) This Act does not limit the application of other laws of the Commonwealth except to the extent (if any) that they are inconsistent with this Act.\n  (2) Rules in force under section 17 of the Privacy Act 1988, in relation to TFN data or tax‑file number information are not breached where an agency has complied with the provisions of this Act.\n  (3) Any oath or declaration made by an officer of a source agency in relation to the recording or disclosure of information is not broken by the officer doing anything for the purposes of, and in the course of, carrying out functions or duties under this Act.","sortOrder":9},{"sectionNumber":"6","sectionType":"section","heading":"Matching of data","content":"#### 6 Matching of data\n\n  (1) Subject to subsections (2) and (3):\n    (a) data about persons may be transferred between agencies; and\n    (b) data about persons may be matched or otherwise dealt with by the matching agency or the tax agency; and\n    (c) the results of the matching may be given to source agencies;\n  in accordance with the data matching program made up of data matching cycles the steps in which are set out in section 7.\n  (2) There are to be no more than 9 data matching cycles in any one year.\n  (3) Only one data matching cycle is to be in progress at any one time.","sortOrder":10},{"sectionNumber":"7","sectionType":"section","heading":"Steps in data matching cycle","content":"#### 7 Steps in data matching cycle\n\n  The steps in a data matching cycle are as follows:\n  STEP 1\n  1. The assistance agencies give the matching agency the basic data about persons that is held by those agencies for the purposes of personal assistance.\n  2. The matching agency checks the validity of the TFN data given under paragraph 1 by using any algorithm given to it for the purposes of this Act by the tax agency.\n  4. Where the check identifies TFN data that appears to be incorrect, the matching agency gives particulars of the data to the source agency that gave it.\n  STEP 2\n  5. The matching agency extracts from data given to it in Step 1 the TFN data, and any identification numbers for the purposes of personal assistance, of assisted persons.\n  6. The matching agency gives the tax agency the data extracted under paragraph 5.\n  STEP 3\n  7. The tax agency uses tax data from not more than the 4 financial years immediately before the current financial year and data given to it under Step 2 to find out the following available data in respect of each person who has a tax file number:\n    (a) tax file number;\n    (b) personal identity data;\n    (c) declared income;\n    (ca) the date of the most recent assessment under the Income Tax Assessment Act 1936 of the person’s declared income;\n    (cb) the amount of spouse rebate;\n    (d) surname and any other name or initial of any other name of a spouse in respect of whom spouse rebate is claimed;\n    (e) surname and any other name or initial of any other name of any spouse of the person.\n  8. The tax agency gives the matching agency the data found out under paragraph 7 and any identification numbers for the purposes of personal assistance of the person.\n  8A. If the tax agency gives the matching agency tax file numbers under paragraph 8, the tax agency may indicate to the matching agency which, if any, of those tax file numbers, according to the tax agency’s records, may have become known to, or used by, a person not authorised to know or use that tax file number.\n  STEP 4\n  9. The matching agency carries out identity matching by matching the personal identity data given under paragraph 8 with the family identity data given to it.\n  11. Where there is an unresolved discrepancy in data given to the matching agency by a source agency, the matching agency gives the source agency particulars of the discrepancy.\n  STEP 5\n  12. The matching agency carries out payment matching by matching the following data given by assistance agencies in Step 1:\n    (a) family identity data; and\n    (b) if it is necessary to do so—personal assistance data;\n  to find out:\n    (c) if personal assistance is being, or has been, given to, or is being claimed by, persons who might not be, or might not have been, entitled to it; and\n    (d) if personal assistance is not being, or has not been, given to, or claimed by, persons who might be, or might have been, entitled to it.\n  13. Where the matching of family identity data given by assistance agencies in Step 1 cannot identify a person for the purposes of paragraph 12, the matching agency matches TFN data given to it in Step 1 with the data being matched under that paragraph.\n  14. The matching agency carries out income matching of persons by using any identification number for the purposes of personal assistance of a person to match:\n    (a) income data of the person given to it by assistance agencies; and\n    (b) except where the matching agency has, under paragraph 11, given particulars of a discrepancy in data about the person to a source agency, the tax income data of the person given to the matching agency in earlier steps;\n  to find out if there are any inconsistencies in the income data of the person.\n  14A. If the source agency and the matching agency have agreed that this paragraph applies, the following subparagraphs apply:\n    (a) if the matching agency thinks that any results of a payment or income matching appear to be results to which paragraph 15 applies, the matching agency gives a sample to the source agency;\n    (b) the source agency tests the sample;\n    (c) if the source agency thinks the sample may be wrong, and that the error may be corrected by adjusting an algorithm used by the matching agency, the source agency suggests the adjustment;\n    (d) the matching agency makes the adjustment and repeats the relevant parts of the matching;\n    (e) subject to section 9, these subparagraphs apply as often as necessary until the matching is complete;\n    (f) if the source agency is an assistance agency, information exchanged under this paragraph may include the return of TFN data from the matching agency to the source agency;\n    (g) the source agency must destroy the sample as soon as practicable after the matching is complete.\n    STEP 6\n  15. The matching agency gives to each source agency the results of matching under earlier steps that are of concern to that other agency and have not been given to the other agency in an earlier step, being results that indicate:\n    (a) in the case of an assistance agency:\n    (i) that personal assistance is being, or has been, given to, or is being claimed by, persons who might not be, or might not have been, entitled to it; and\n    (ii) that personal assistance is not being, or has not been, given to, or claimed by, persons who might be, or might have been, entitled to it; or\n    (b) in the case of the tax agency—that a person might be evading, or might have evaded, tax.\n  16. Information exchanged in paragraph 15 may include the return of TFN data from the matching agency to an assistance agency.","sortOrder":11},{"sectionNumber":"8","sectionType":"section","heading":"Data may be sent on‑line","content":"#### 8 Data may be sent on‑line\n\n  Data may be transferred between agencies in the data matching program by on‑line computer connections.","sortOrder":12},{"sectionNumber":"9","sectionType":"section","heading":"Length of data matching cycle","content":"#### 9 Length of data matching cycle\n\n  (1) A data matching cycle is to be completed no later than 2 months after it began.\n  (2) Step 5 in a data matching cycle is to be completed no later than 7 days after it began.\n  (2A) The following times do not count for the purposes of subsection (2):\n    (a) any time during which the cycle is interrupted by a computer malfunction;\n    (b) any time during which the cycle is interrupted by industrial action.\n  (3) Step 6 in a data matching cycle is to be completed within 7 days after the completion of Step 5.","sortOrder":13},{"sectionNumber":"10","sectionType":"section","heading":"Source agencies may use results of data program","content":"#### 10 Source agencies may use results of data program\n\n  (1) Subject to subsection (2) and section 11, a source agency may take action on the basis of information received by it under Step 1, 4 or 6 of a data matching cycle to:\n    (a) in the case of an assistance agency:\n    (ia) inform a person that he or she may be entitled to personal assistance; or\n    (ib) grant a claim for personal assistance; or\n    (i) cancel or suspend personal assistance being given to a person; or\n    (ii) reject a claim for personal assistance; or\n    (iii) change the rate or amount of personal assistance being given to, or claimed by, a person; or\n    (iv) recover an overpayment of personal assistance; or\n    (v) correct the personal identity data it holds in relation to personal assistance that is being given to, has been given to, or claimed by, a person; or\n    (b) in the case of the tax agency:\n    (i) issue an assessment or an amended assessment of tax; or\n    (ii) correct the personal identity data it holds in relation to a person; or\n    (c) investigate the possible commission of an offence.\n  (1A) If the source agency is an assistance agency, then for the purposes of investigating further a discrepancy indicated in a data matching cycle under section 7, the source agency may quote a person’s tax file number to the tax agency.\n  (2) Where a source agency receives particular information under Step 1, 4 or 6 of a data matching cycle, the agency must destroy that particular information within 90 days of its receipt unless, within those days:\n    (a) the agency has considered that particular information and made a decision:\n    (i) to take action allowed by subsection (1) on the basis of that particular information; or\n    (ii) to carry out an investigation of the need to take action allowed by subsection (1) on the basis of that particular information; or\n    (b) the agency has, by using sampling procedures, identified that particular information as information that will form the basis for the agency:\n    (i) to take action allowed by subsection (1) on the basis of that particular information; or\n    (ii) to carry out an investigation of the need to take action allowed by subsection (1) on the basis of that particular information.\n  (3) Subject to subsection (3A), a source agency must commence any action in relation to information it receives under subsection (1) within 12 months from the date that it receives the information from the matching agency.\n  (3A) The Secretary of an assistance agency (other than the Human Services Department), the Chief Executive Centrelink, the Commissioner of Taxation or a Deputy Commissioner of Taxation may grant an extension or extensions of time for up to 12 months each of the 12 month period referred to in subsection (3).\n  (3B) The power to grant an extension or extensions of time referred to in subsection (3A) must not, despite any other law, be delegated.\n  (4) After the completion of action taken in accordance with subsection (1), a source agency must not retain any information obtained in the course of such action in a separate permanent register of individuals.\n  (5) In this section:\n\n> sampling procedures means sampling procedures established by the source agency in consultation with the Information Commissioner in relation to matters that relate to the privacy functions (within the meaning of the Australian Information Commissioner Act 2010).","sortOrder":14},{"sectionNumber":"11","sectionType":"section","heading":"Notice of proposed action","content":"#### 11 Notice of proposed action\n\n  (1) Subject to subsections (1A), (1B) and (4), where, solely or partly because of information given in Step 1, 4 or 6 of a data matching cycle, an assistance agency considers taking action:\n    (a) to cancel or suspend any personal assistance to; or\n    (b) to reject a claim for personal assistance to; or\n    (c) to reduce the rate or amount of personal assistance to; or\n    (d) to recover an overpayment of personal assistance made to;\n  a person, the agency:\n    (e) must not take that action unless it had given the person written notice:\n    (i) giving particulars of the information and the proposed action; and\n    (ii) stating that the person has 28 days from the giving of the notice in which to show cause orally or in writing why the action should not be taken; and\n    (f) must not take that action until the person has responded orally or in writing to the notice or the 28 days end, whichever occurs first.\n  (1A) Subsection (1) does not apply to action that is necessary to correct or avoid a result solely caused by an administrative error on the part of the assistance agency.\n  (1B) If the assistance agency takes action referred to in subsection (1A), it must give the person written notice, with particulars of the information and the action:\n    (a) if practicable—before the action is taken; or\n    (b) if not—as soon as practicable after the action has been taken.\n  (2) Subject to subsection (5), where, solely or partly because of information given in Step 1, 4 or 6 of a data matching cycle, the tax agency considers taking action to issue an assessment or an amended assessment of tax to a person, the agency:\n    (a) must not take that action unless it has given the person written notice:\n    (i) giving particulars of the information and the proposed action; and\n    (ii) stating that the person has 28 days from the giving of the notice in which to show cause in writing why the action should not be taken; and\n    (b) must not take that action until the person has responded in writing to the notice or the 28 days end, whichever occurs first.\n  (3) Notice under subsection (1) or (2) is to be given by post addressed to the person at the most recent address of the person known to the agency.\n  (4) The assistance agency may take action described in subsection (1) without complying with paragraphs (1)(e) and (f) if compliance would prejudice the effectiveness of an investigation into the possible commission of an offence.\n  (5) The tax agency may take action described in subsection (2) without complying with paragraphs (2)(a) and (b) if compliance would prejudice the effectiveness of an investigation into the possible commission of an offence.\n  (5A) If a person responds orally to a notice, the person receiving the oral response must make a written record of the response and note on the record the date of the response.\n  (6) Where:\n    (a) an assistance agency gives a person notice under subsection (1) of proposed action to cancel or suspend, or reduce the rate or amount, of any personal assistance; and\n    (b) the person does not show cause why the action should not be taken;\n  any personal assistance of that kind given, or any personal assistance of that kind given above the reduced rate or amount, as the case may be, to the person during the period specified in subparagraph (1)(e)(ii) is a debt due to the Commonwealth.","sortOrder":15},{"sectionNumber":"12","sectionType":"section","heading":"Rules relating to privacy","content":"#### 12 Rules relating to privacy\n\n  (1) The matching agency and the source agencies must comply with rules issued under this section.\n  (2) The Information Commissioner may, by legislative instrument, issue rules relating to the matching of data under this Act.\n  (3) The function conferred by subsection (2) is a privacy function for the purposes of the Australian Information Commissioner Act 2010.\n  (4) After the end of each financial year, each agency must give the Information Commissioner, and cause to be laid before each House of the Parliament, a report including the matters relating to the data‑matching program carried out during the financial year that are specified for the purposes of this subsection in rules issued under this section.\n  (5) After the 3‑year period ending on 30 June 1998, and after each successive 3‑year period, each agency must give the Minister responsible for the agency a report for presentation to the Parliament including all the details relating to the data‑matching program carried out during the period that are specified for the purposes of this subsection in rules issued under this section.\n\n> Note: Section 34C of the Acts Interpretation Act 1901 sets time limits for giving reports to Ministers and for presentation of reports to the Parliament.\n\n  (6) Despite section 12 of the Legislation Act 2003, rules issued under this section commence from:\n    (a) the first day on which the rules are no longer subject to disallowance; or\n    (b) if the rules make provision for their commencement after that day—in accordance with that provision.","sortOrder":16},{"sectionNumber":"13","sectionType":"section","heading":"Investigations of breaches of privacy","content":"#### 13 Investigations of breaches of privacy\n\n  (1) In this section:\n\n> Commissioner means the Information Commissioner acting in the performance of the privacy functions (within the meaning of the Australian Information Commissioner Act 2010).\n\n  (2) The Commissioner may investigate any act or practice which might be a breach of this Act or the rules issued under section 12.\n  (3) Where the Commissioner finds that an investigated act or investigated practice of the matching agency or a source agency was in breach of this Act or the rules, the Commissioner and the agency must endeavour to make arrangements satisfactory to the Commissioner in relation to the act or practice.\n  (4) Where the Commissioner finds that an act, or practice, investigated was in breach of this Act or the rules and arrangements have not been made under subsection (3) or the Commissioner considers a report under this subsection appropriate in all the circumstances, the Commissioner:\n    (a) must make a report to the Minister about the act or practice; and\n    (b) must set out in the report the Commissioner’s findings and the reasons for those findings; and\n    (c) may include in the report any recommendations by the Commissioner for preventing repetition of the act or a continuation of the practice; and\n    (d) may include in the report any recommendation by the Commissioner for either or both of the following:\n    (i) the payment of compensation in respect of a person who has suffered loss or damage as a result of the act or practice; or\n    (ii) the taking of other action to remedy or reduce loss or damage suffered by a person as a result of the act or practice; and\n    (e) must serve a copy of the report on the matching agency, any source agency concerned in the act or practice and the Minister responsible for such a source agency; and\n    (f) may serve a copy of the report on any person affected by the act or practice.\n  (5) Where, at the end of 60 days after a copy of a report about an act or practice was served under subsection (4), the Commissioner is not satisfied that reasonable steps have been taken to prevent a repetition of the act or a continuation of the practice, the Commissioner must give to the Minister a further report that:\n    (a) incorporates the earlier report and any background information that the Commissioner has received from an agency in response to the earlier report; and\n    (b) states whether, to the knowledge of the Commissioner, any action has been taken as a result of the findings and recommendations (if any) set out in the earlier report, and if so, the nature of that action; and\n    (c) states why the Commissioner is not satisfied that reasonable steps have been taken to prevent a repetition of the act or a continuation of the practice;\n  and, where the second report relates to an agency other than an agency administered by the Minister, must give a copy of the report to the Minister responsible for the agency.\n  (6) The Minister is to cause a copy of the report given under subsection (5) to be laid before each House of the Parliament within 15 sitting days of that House, after the report is received by the Minister.\n  (7) In conducting an investigation under this section, the Commissioner has all the powers of investigation that he or she has under Part V of the Privacy Act 1988.\n\n> Note: In addition, under paragraphs 80TB(1)(b) and (3)(b) of the Privacy Act 1988, the Commissioner has the power to monitor, under the Regulatory Powers Act, compliance with this Act or rules issued under section 12\\. See also paragraph 33C(1)(d) of that Act.\n\n  (8) Nothing in this section or in any other provision of this Act limits the rights of persons under the Privacy Act 1988 to complain to the Commissioner about interference with privacy.","sortOrder":17},{"sectionNumber":"14","sectionType":"section","heading":"Complaints of breaches of privacy","content":"#### 14 Complaints of breaches of privacy\n\n  (1) A breach of Part 2 of this Act or a breach of the rules referred to in section 12 constitutes an act or practice involving interference with the privacy of an individual for the purposes of section 13 of the Privacy Act 1988.\n  (2) An individual may complain to the Information Commissioner about an act or practice in relation to the operation of this Act which may be an interference with the privacy of the individual.\n  (3) In the event of a complaint being made by an individual, it shall be dealt with in accordance with the provisions of Part V of the Privacy Act 1988, which shall apply mutatis mutandis to this Act.","sortOrder":18},{"sectionNumber":"15","sectionType":"section","heading":"Confidentiality","content":"#### 15 Confidentiality\n\n  (1) An officer of an agency who has information only because of performing functions or duties under this Act, must not make a record of, or disclose, any of the information.\n\nPenalty: Imprisonment for 2 years.\n\n  (1A) Subsection (1) does not apply if the information is recorded or disclosed:\n    (a) in the course of carrying out functions or duties under this Act; or\n    (b) with the consent of the person to whom the information relates.\n  (2) Where:\n    (a) an officer of a source agency has information because of Step 1, 4 or 6 in a data matching cycle; and\n    (b) there is a law that relates to the recording or disclosure by the officer of information obtained by the officer (however the law is expressed);\n  that law applies to the information referred to in paragraph (a).\n  (3) A law referred to in subsection (2) does not prevent the giving of a notice under section 11.\n  (4) For the purposes of this section, the Commissioner of Taxation is an officer of the tax agency.","sortOrder":19},{"sectionNumber":"15A","sectionType":"section","heading":"Appropriation","content":"#### 15A Appropriation\n\n  Payments of any personal assistance made because of the operation of subsection 11(1) must be made out of the Consolidated Revenue Fund, which is appropriated accordingly.","sortOrder":20}],"analysis":{"summary":{"complexity_score":7,"scope_assessment":{"changed":true,"description":"The Act's original scope focused on matching welfare assistance data with tax records to detect fraud and underpayments. Over time, its scope expanded significantly through amendments to include many additional payment types — such as Paid Parental Leave, Military Rehabilitation and Compensation Act benefits, family assistance payments, and multiple student assistance schemes — and to accommodate major administrative restructures (e.g., creation of Services Australia/Centrelink as a separate entity). The inclusion of provisions allowing data-matching to identify people *entitled to but not receiving* benefits also broadened the program beyond pure fraud detection into a proactive entitlements-identification function."},"complexity_factors":["Multiple interacting government agencies with shifting roles depending on ministerial directions","Six-step data-matching cycle with precise procedural rules, time limits, and interdependencies between steps","Extensive defined terms (over 30 definitions) with cross-references to numerous other Acts including Social Security Act 1991, Privacy Act 1988, Veterans' Entitlements Act 1986, and multiple tax Acts","Layered exceptions to procedural requirements (e.g., notice obligations waived for criminal investigations, administrative errors)","Complex interaction between this Act and the Privacy Act 1988, including the Information Commissioner's dual role","Flexible agency structure — the 'matching agency' can shift between the Social Services Department and Centrelink depending on whether a ministerial direction is in force under s3A","Multiple time limitation regimes governing when agencies must act on or destroy data (90 days, 12 months, extensible by up to 12 months each)","Rules issued by the Information Commissioner have unusual commencement provisions (only after disallowance period expires)","The legislation has been amended many times to incorporate new payment types and agency restructures, creating historical references and transitional complexity"],"plain_english_summary":"## What This Law Does\n\nThe **Data-matching Program (Assistance and Tax) Act 1990** sets up a government program that cross-checks personal information held by different government agencies to detect:\n- **Welfare fraud** — people receiving payments they're not entitled to\n- **Underpayments** — people who *should* be getting benefits but aren't\n- **Tax evasion** — people who may not be paying the right amount of tax\n\n## Who Is Involved?\n\nSeveral government agencies participate:\n- **Services Australia** (formerly known as Human Services/Centrelink) — acts as the \"matching agency\" that does the actual data comparison\n- **The ATO (Australian Taxation Office)** — supplies tax records\n- **Social Services, Veterans' Affairs, Education departments** — supply welfare payment records\n\n## How It Works — The Data-Matching Cycle\n\nUp to **9 times per year**, the agencies run a structured 6-step process:\n1. Welfare agencies send personal data (names, addresses, incomes, Tax File Numbers) to the matching agency\n2. That data is sent to the ATO\n3. The ATO cross-references it with tax records from the past 4 financial years\n4. Discrepancies in personal identity information are flagged\n5. Payment and income inconsistencies are identified\n6. Results are shared back to the relevant agencies for action\n\nEach cycle must be completed within **2 months**.\n\n## What Can Happen to You?\n\nIf the data-matching flags an issue with your welfare payments or tax, the relevant agency can:\n- Cancel, suspend, or reduce your payments\n- Reject a claim for assistance\n- Recover money overpaid to you\n- Issue or amend a tax assessment\n- Investigate possible criminal offences\n\n**Important protection:** Before any adverse action is taken against you (e.g., cancelling your payments), you **must be given 28 days' written notice** and the chance to explain your situation. The agency cannot act until you respond or the 28 days expire — *unless* doing so would compromise a criminal investigation.\n\n## Your Privacy Rights\n\n- Information gathered can only be used for the specific purposes of this program\n- Agencies must **destroy your information within 90 days** if no action is taken based on it\n- Government officers who leak your information face **up to 2 years' imprisonment**\n- The **Information Commissioner** (Australia's privacy watchdog) can investigate breaches and recommend compensation\n- You can **lodge a privacy complaint** if you think the program has interfered with your privacy\n- Agencies must report annually to Parliament on how the program operates\n\n## Why It Matters\n\nThis law affects anyone who receives government welfare payments or lodges tax returns in Australia — which is essentially most Australians. It gives the government significant power to cross-check your financial and personal information across multiple agencies, but also includes important safeguards like mandatory notice before adverse action and strict rules on how long your data can be kept."},"flash_summary":{"complexity_score":7,"scope_assessment":{"changed":false,"description":"The instrument, as set out, defines a specific program for matching assistance and tax data, including its permissible data items, frequency limits, time limits, privacy rule‑making, and enforcement procedures (see sections 3, 6, 7, 9, 10, 12–15). The text contains no provision that alters that defined scope beyond the mechanisms for delegation or temporary departmental designation (section 3A) and the operational limits explicitly stated; therefore there is no indication in the supplied text that the scope has been changed from the scope expressed within these provisions."},"complexity_factors":["Extensive and detailed definitions that determine the scope of all matching, including many specific data categories (section 3).","Multi-stage, procedural data‑matching cycle with tightly specified steps and inter-agency handoffs (section 7).","Time limits and restrictions on frequency and concurrency of matching cycles (sections 6(2)–(3), 9).","Interplay between multiple agencies with distinct roles: assistance agencies, a designated matching agency, and the tax agency (sections 4, 6, 7, 10).","Privacy rule‑making, reporting obligations and investigatory/remedial powers vested in the Information Commissioner (sections 12–13).","Statutory constraints and exceptions on notice to affected persons, including narrow investigative and administrative‑error exceptions (section 11).","Data handling controls: 90‑day destruction rule, sampling procedures, TFN validation using tax agency algorithms, and allowable TFN returns in specific circumstances (sections 7, 10(2), 10(5), 7(8A), 7(14A)(f)).","Criminal confidentiality offence with specific penalty and express treatment of the Commissioner of Taxation (section 15).","Discretionary powers and non‑delegable authorities for time extensions and departmental designations (sections 3A, 10(3A), 10(3B)).","Operational exceptions and safeguards for interruptions such as computer malfunction or industrial action (section 9(2A))."],"plain_english_summary":"This Act sets up a formal, limited program for computerised matching of personal data between Commonwealth agencies that administer social assistance and the tax authority, and it prescribes how that matching must be done and governed.\n\nWhat the Act does, mechanically\n\n- It authorises assistance agencies (listed in the definitions) and the tax agency to transfer personal data to a designated matching agency, to carry out a defined data‑matching program made up of sequential \"data matching cycles\", and to share the results with source agencies (section 6 and the stepwise procedure in section 7).\n- Each data‑matching cycle must follow the steps in section 7: assistance agencies supply basic data; TFNs are checked using a taxation algorithm; TFNs and assistance identification numbers are extracted and sent to the tax agency; the tax agency returns tax records (limited to up to the 4 financial years before the current year) to the matching agency; identity, payment and income matching are carried out; and the matching agency gives each source agency any results of concern (section 7(1)–(16)).\n- The Act limits how often matching can occur (no more than 9 cycles a year, only one at a time) and sets strict time limits for completion of cycles and steps (sections 6(2)–(3), 9).\n- Source agencies may act on match results in specific ways: for assistance agencies this includes notifying people, granting, changing, suspending or recovering assistance; for the tax agency it includes issuing or amending assessments (section 10(1)).\n- Before an assistance agency or the tax agency takes adverse action that is based (solely or partly) on match information, it generally must give the person written notice with particulars and 28 days to respond (section 11). There are narrow exceptions (administrative error or where giving notice would prejudice an investigation) (section 11(1A), (4), (5)).\n- Privacy and oversight: the Information Commissioner issues binding rules about matching and privacy (section 12), receives reports from agencies (section 12(4)–(5)), and may investigate breaches and require remedies or report to Ministers (section 13). Individuals can complain to the Information Commissioner under the Privacy Act procedures (section 14).\n- Data handling safeguards and limits: agencies must destroy particular match information within 90 days unless they decide to act or use sampling (section 10(2)); sampling procedures must be established in consultation with the Information Commissioner (section 10(5)); there's a criminal confidentiality offence (two years' imprisonment) for unauthorised recording or disclosure by officers (section 15), and the Commissioner of Taxation is treated as an officer for confidentiality purposes (section 15(4)).\n- Payments altered because of the notice procedure are funded from the Consolidated Revenue Fund (section 15A).\n\nWho this affects and who decides\n\n- Affected people: any individual (alive or dead) whose personal, income, family identity or TFN data appear in assistance or tax agency records (definitions in section 3).\n- Decision-makers and roles: the Social Services Department (or Centrelink employees while a direction under section 3A is in force) supplies officers to act as the matching agency (section 4); the tax agency provides algorithms and tax records used for matching (section 7(2), (7)); source agencies receive results and decide whether to take administrative or enforcement actions (section 10).\n- Oversight and review: the Information Commissioner issues privacy rules and investigates breaches (sections 12–13); Ministers receive reports where the Commissioner finds unresolved breaches (section 13(4)–(6)).\n\nIncentives, compliance burdens, discretion and trade‑offs (mechanisms, not judgements)\n\n- Incentives created by the Act: matched information can lead source agencies to change assistance, recover overpayments or issue tax assessments (section 10). That creates an operational incentive for agencies to use matches as a trigger for administrative or enforcement action.\n- Compliance and administrative costs placed on agencies: agencies must (a) run or supply data for tightly scheduled matching cycles (sections 7, 9), (b) validate TFNs using the tax agency algorithm (section 7(2)), (c) destroy or retain particular information according to the 90‑day rule unless action or sampling occurs (section 10(2)), and (d) prepare year‑end reports for the Information Commissioner and triennial reports for Ministers as specified in rules (section 12(4)–(5)).\n- Operational discretion and delegation limits: the Secretary of Social Services may direct that a Department not be an assistance agency while certain delegations are in force (section 3A); senior officials may grant up to 12‑month extensions to the 12‑month action commencement period (section 10(3A)), but that power cannot be delegated (section 10(3B)). These provisions allocate particular decision-making powers to named officials.\n- Data‑scope and operational limits built into the Act: only up to 9 cycles per year, one at a time (section 6(2)–(3)); a cycle must complete within two months and Step 5 within 7 days (section 9); tax data used is limited to not more than the 4 financial years before the current financial year (section 7(7)). These constraints define the program’s operational footprint.\n- Privacy oversight and enforcement mechanisms: the Information Commissioner issues rules, investigates breaches, can require remedies or recommend compensation, and reports to Ministers if agencies do not remedy breaches (sections 12–13). A criminal penalty applies to unauthorised disclosure by officers (section 15).\n\nPractical implementation risks explicitly addressed in the Act\n\n- The Act recognises interruptions by computer malfunction or industrial action as pauses that do not count against some time limits (section 9(2A)).\n- The Act allows sample testing and algorithm adjustment between matching agency and a source agency to correct matching errors (section 7(14A)).\n\nWhy this matters (purpose claims in the Act and their concrete mechanisms)\n\n- The Act establishes a mechanism to compare assistance‑agency data with tax records so agencies can identify mismatches that may indicate incorrect assistance payments or tax non‑compliance (see section 7 steps and section 7(15) on results of concern). The concrete mechanisms to pursue those aims are the transfer of defined data elements, algorithm checks, controlled matching cycles, downstream agency actions (including notices and recoveries), and privacy/oversight rules (sections 6–12, 15).\n- These mechanisms impose resource and procedural obligations on agencies (data preparation, secure transfer, reporting, destroying or retaining records, coordinating with the Information Commissioner), allocate formal powers to named officials for certain exceptions or extensions, and create criminal sanctions for unauthorised disclosure (sections 7, 9, 10, 11, 12, 15). The Act also prescribes limits intended to contain the program’s scope in time and data vintage (sections 6(2)–(3), 7(7), 9)."},"kimi_summary":{"_metrics":{"source":"grok-batch-everything"},"content_quality":"ok","complexity_score":8,"scope_assessment":{"changed":true,"description":"The legislation has expanded significantly beyond its 1990 focus on core social security, AUSTUDY/ABSTUDY and veterans’ payments to now encompass family assistance under the A New Tax System (Family Assistance) Act 1999, paid parental leave, military rehabilitation compensation under the Military Rehabilitation and Compensation Act 2004, seniors health cards and updated departmental structures (including Services Australia), thereby widening the range of personal assistance programs subject to matching."},"complexity_factors":["Extensive interpretation section (s 3) containing over 40 heavily cross-referenced defined terms including 'basic data', 'family identity data', 'personal assistance' and 'tax TFN data'","Highly prescriptive six-step data matching cycle in s 7 with 16 numbered paragraphs, multiple conditional subparagraphs, exceptions to exceptions, and algorithmic validation requirements","Multiple timing restrictions, destruction rules, notice procedures and sampling protocols across ss 9–11 that contain nested conditions and carve-outs","Frequent cross-references to the Privacy Act 1988, Tax Act, Social Security Act 1991, Veterans’ Entitlements Act 1986, Paid Parental Leave Act 2010 and other portfolio legislation"],"plain_english_summary":"**This law sets up a government data-matching program** that lets specific Australian departments share and compare personal details about people who get or claim government payments (such as social security, veterans' benefits, family assistance, or student payments) with information held by the tax office.\n\nThe program runs in strict cycles (no more than nine per year) to spot problems like:\n\n- People receiving payments they are not entitled to\n- People who should be getting payments but are not\n- Possible tax under-reporting or evasion\n\nIt only allows sharing of limited data such as names, addresses, dates of birth, tax file numbers (TFNs), and income details. Strict privacy rules apply: data must be destroyed quickly, people must usually be given 28 days' written notice before any action is taken against them, and the Information Commissioner oversees compliance and can investigate breaches.\n\nThe law affects anyone receiving or claiming government assistance, their spouses, children or parents, and taxpayers whose records are matched. It matters because it aims to reduce incorrect spending of public money while including safeguards to protect personal privacy and prevent misuse of sensitive information like TFNs."}},"importantCases":[],"_links":{"self":"/api/acts/data-matching-program-assistance-and-tax-act-1990","history":"/api/acts/data-matching-program-assistance-and-tax-act-1990/history","analysis":"/api/acts/data-matching-program-assistance-and-tax-act-1990/analysis","conflicts":"/api/acts/data-matching-program-assistance-and-tax-act-1990/conflicts","importantCases":"/api/acts/data-matching-program-assistance-and-tax-act-1990/important-cases","documents":"/api/acts/data-matching-program-assistance-and-tax-act-1990/documents"}}