AZT15 v Minister for Immigration and Border Protection
[2018] FCA 1811
At a glance
Source factsCourt
Federal Court of Australia
Decision date
2018-10-31
Before
Lee J
Source
Original judgment source is linked above.
Judgment (10 paragraphs)
- The application be dismissed with costs. Note: Entry of orders is dealt with in Rule 39.32 of the Federal Court Rules 2011.
A Introduction 1 This is a matter with a long procedural history. The appellant migrated to Australia with his parents when he was aged four and, in 1994, was granted a Transitional (Permanent) Visa allowing him to remain in Australia indefinitely. 2 In 2004, the appellant was convicted of two counts of attempted incest against his stepdaughter, and later in 2005, he was convicted of the rape of his ex-de facto partner. He was sentenced to nine years and three months in gaol, which was reduced, on appeal, to seven years and six months, with a non-parole period of five years. 3 In May 2010, the appellant's visa was cancelled on character grounds pursuant to s 501(2) of the Migration Act 1958 (Cth) (Act) by a decision of a delegate of the Minister for Immigration of Citizenship (subsequently, the Minister for Immigration and Border Protection) (Minister). However, that decision was subsequently set aside by the Administrative Appeals Tribunal in August 2010. That decision was later affirmed by this Court in July 2011. 4 In February 2012, the Minister personally cancelled the appellant's visa pursuant to s 501A(2) of the Act on character grounds. As a consequence, the appellant was taken into immigration detention, where he presently remains. 5 On 12 March 2014, the appellant received a letter from Mr Martin Bowles, the then Secretary of the Department of Immigration and Border Protection, which dealt with unauthorised access to personal information. This letter was in similar terms as referred to in a number of cases, including the decision of the High Court in Minister for Immigration and Border Protection v SZSSJ [2016] HCA 29; (2016) 259 CLR 180 at 188 [8]. It is convenient to set out the description of the letter from the High Court's reasons in SZSSJ at [8]: In early March 2014, the Secretary of the Department sent a standard form letter to each of the affected applicants. The letter informed those applicants of the Data Breach and expressed deep regret. The letter continued: "The information that it was possible to access was your name, date of birth, nationality, gender, details about your detention (when you were detained, reason and where) and if you have other family members in detention. The information did not include your address (or any former address), phone numbers or any other contact information. It also did not include any information about protection claims that you or any other person may have made, and did not include any other information such as health information. The department will assess any implications for you personally as part of its normal processes. You may also raise any concerns you have during those processes." 6 On 24 November 2016, the appellant wrote to the Minister in response to the letter of Mr Bowles sent over two and a half years earlier. I will come back to this responsive letter shortly, but it is necessary to outline first what occurred in the interim. In November 2014, while in immigration detention, the appellant applied for a Protection (Class XA) visa. As the primary judge records at [11], this application was based on the grounds that the appellant: (a) was a convicted child sex offender and would be "attacked and seriously harmed" if he was returned to Malta; and (b) suffered from diabetes and depression and that he would be homeless if he was returned to Malta. 7 This application for a protection visa was refused by a delegate of the Minister in January 2015. The appellant then applied to the Refugee Review Tribunal (RRT) for a review of the delegate's decision and in May 2015, the RRT affirmed the decision of the delegate. The appellant then applied to the Federal Circuit Court for judicial review of the decision of the RRT. This application was determined adversely to the appellant in July 2016. 8 It was against this background that the appellant commenced proceedings in July 2016 in this Court, appealing the decision of the Federal Circuit Court. This was dismissed in March 2017 by Siopis J. Importantly, in both the reasons of the primary judge that were on appeal before Siopis J, and in his Honour's judgment, the issue of data breach was addressed: see AZT15 v Minister for Immigration [2016] FCCA 1786 at [15(i)], [21] and [29]; AZT15 v Minister for Immigration and Border Protection [2017] FCA 191 at [99] to [105]. 9 It is worth setting out what Siopis J said about the data breach at [99]-[105] in full: The fourth ground of appeal alleged that the Tribunal committed a jurisdictional error as it failed to acknowledge that a data breach by the department, which occurred in respect of information about the appellant in late January 2014, constituted a breach of s 14 of the Privacy Act 1988 (Cth). In support of ground four, the appellant referred to the decision of the Full Court of this Court in SZSSJ v Minister for Immigration and Border Protection (No 2) (2015) 234 FCR 1 (SZSSJ). In SZSSJ, the jurisdictional error which the Full Court found was not by reason of a breach of the Privacy Act, but rather that the department's data breach, and associated actions of the department, had constituted a failure to provide procedural fairness. I observe, in passing, that the Full Court's decision in SZSSJ was set aside by the High Court of Australia (Minister for Immigration and Border Protection v SZSSJ (2016) 334 ALR 653). The facts in SZSSJ are distinguishable, however, from the appellant's case. In SZSSJ, the applicant was at the time of the data breach, an applicant for a protection visa. After the data breach had occurred, the department had written to the applicant on 1 October 2014 informing him that an assessment process had commenced (called the "International Treaties Obligations Assessment" (ITOA) process) as a precursor to the Minister considering whether or not to exercise his dispensing powers under the Migration Act. The question in SZSSJ was whether the applicant had been accorded procedural fairness in the course of the ITOA process. However, the appellant in this case, unlike SZSSJ, was not an applicant for a protection visa at the time of the data breach and he did not allege he had received a letter about the initiation of an ITOA process. Accordingly, this was not a case, such as SZSSJ, in respect of which the process initiated after the data breach could found a possible finding of procedural unfairness. The Tribunal concluded that, while the appellant's data had been disclosed on the department's website, that data was of such a limited level of detail that it would be unlikely to expose the appellant to adverse attention from the Maltese public so as to give rise to a real risk of harm if he were to be returned to Malta. The Tribunal did not fall into jurisdictional error in its treatment of the data breach incident as it applied to the appellant. The primary judge did not err in so concluding. Accordingly, ground four of the appellant's grounds of appeal is dismissed. 10 The next event, which is really the point of departure for the current appeal, was that in the response letter sent on 24 November 2016, the appellant referred to the letter received in March 2014 and said: I Hereby Request to start an assessment under the International Treaties Obligations Assessments ("ITOA") in accordance with the Procedures Advice Manual ("PAM") 11 A response was sent to the appellant to this letter above the signature of the Assistant Secretary (A/g) Visa and Citizenship Services Group, dated 20 December 2016. The writer referred to the letter received from the appellant, thanked him for it, and said: The Minister appreciates the time you have taken to bring the matter to his attention and he asked that I reply on his behalf. 12 The letter went on to provide a summary of the procedural background that I have referred to above, and then went on: As you are able to raise any claims you may have in relation to the data breach through this process [that is, the appellant's application for a Permanent Protection (subclass 866) Visa (PPV) and subsequent application for judicial review of the RRT's decision], an International Treaties Obligations Assessment (ITOA) is not available to you. As advised in the letter you attach from the former Secretary of the Department, Mr Martin Bowles, you have had the implications of the data breach assessed through the normal process, which in your circumstances was a PPV Application. 13 The letter then went on to note the writer's understanding that at the time the letter was sent, the appellant was seeking judicial review of the RRT decision in the Full Court of this Court. Indeed, the letter was sent a few weeks after Siopis J had reserved, in late November 2016, but before the delivery of his Honour's judgment in March 2017. 14 In January 2017, the appellant sought judicial review in the Federal Circuit Court in relation to the decision made on 20 December 2016 to refuse to conduct an International Treaties Obligations Assessment (ITOA). This application was dismissed by the Federal Circuit Court and the orders made by the primary judge in dismissing the application are the subject of this appeal.