47 It is convenient to consider the proper construction of s 38 ahead of the other substantive provisions of the FOI Act on which reliance is placed by the parties because if it was established before the Tribunal that any document was an exempt document under s 38 of the FOI Act, the Tribunal had no power to decide that access to that document, so far as it contained exempt matter, was to be granted (see [14] and [59]).
48 Section 38 of the FOI Act relevantly provides:
'(1) Subject to subsection (1A), a document is an exempt document if:
(a) disclosure of the document, or information contained in the document, is prohibited under a provision of an enactment; and
(b) either:
(i) that provision is specified in Schedule 3; or
(ii) this section is expressly applied to the document, or information, by that provision, or by another provision of that or any other enactment.
(1A) A person's right of access to a document under section 11 or 22 is not affected merely because the document is an exempt document under subsection (1) of this section if disclosure of the document, or information contained in the document, to that person is not prohibited by the enactment concerned or any other enactment.'
49 Schedule 3 of the FOI Act specifies, amongst other statutory provisions:
'Aged Care Act 1997, subsection 86-2(1) and sections 86‑5, 86‑6 and 86‑7.'
50 It is accepted on these appeals that some information contained in each of the DAT report and the SCS record is 'protected information' within the meaning of Division 86 of the Aged Care Act. Subsection 86-2(1) renders the disclosure by a person of 'protected information' acquired by that person in the course of performing duties or exercising power or functions under that Act a criminal offence. Subsection 86-2(2) provides that the section does not apply to certain specified conduct or to a particular kind of disclosure.
51 It was submitted by Dr Duncan that subsection 86‑2(1) of the Aged Care Act does not in terms prohibit disclosure of protected information; it merely sets out the consequences of disclosure. This is literally true. However subsection 86‑2(1) provides that, subject to subsection 86‑2(2), a person who discloses 'protected information' that he or she has acquired in the course of performing duties, or exercising powers or functions, under the Aged Care Act is guilty of an offence and liable to be imprisoned for up to two years. It is, I conclude, clear that at least a disclosure of information by a person in circumstances that would render that person liable to be convicted of an offence under subsection 86‑2(1) of the Aged Care Act is a disclosure prohibited under a provision of the Aged Care Act for the purposes of s 38 of the FOI Act. The more difficult question, as it seems to me, is the significance so far as s 38 of the FOI Act is concerned of subs 86‑2(2) and s 86‑3.
52 Section 86-2 of the Aged Care Act relevantly provides:
'(1) A person is guilty of an offence if:
(a) the person makes a record of, discloses or otherwise uses information; and
(b) the information is *protected information; and
(c) the information was acquired by the person in the course of performing duties or exercising powers or functions under this Act.
Penalty: Imprisonment for 2 years.
Note: Chapter 2 of the Criminal Code sets out the general principles of criminal responsibility.
(2) This section does not apply to:
(a) conduct that is carried out in the performance of a function or duty under this Act or the exercise of a power under, or in relation to, this Act; or
(b) the disclosure of information only to the person to whom it relates; or
(c) conduct carried out by an approved provider; or
(d) conduct that is authorised by the person to whom the information relates; or
(e) conduct that is otherwise authorised under this or any other Act.'
Note: A defendant bears an evidential burden in relation to the matters in subsection (2) (see subsection 13.3(3) of the Criminal Code).'
53 It would, in my view, undermine the obvious purpose of Division 86 of the Aged Care Act if subs 86‑2(2) were construed in such a way that subs 86-2(1) were inoperative in the context of any application under the FOI Act. If par 86‑2(2)(e) is construed to include conduct authorised under the FOI Act, the inclusion of subs 86‑2(1) in Schedule 3 of the FOI Act would be meaningless. Plainly the legislature did not intend the inclusion of the subsection in Schedule 3 to be meaningless. The key to the proper interpretation of subs 38(1), as it seems to me, is to notice that the subsection is concerned to identify documents or information the disclosure of which is prohibited rather than with conduct which is proscribed. This explains, in my view, why Schedule 3 of the FOI Act specifies subs 86‑2(1) and ss 86‑5, 86‑6 and 86‑7 of the Aged Care Act but not subs 86‑2(2) or ss 86‑3, 86‑4, 86‑8 or 86‑9. Each of subs 86‑2(1) and ss 86‑5, 86‑6 and 86‑7 are concerned to prohibit the disclosure of information acquired in a particular way. Subs 86‑2(2) recognises that some disclosures of the information identified in subs 86‑2(1) may be authorised and ss 86‑3, 86‑4, 86‑8 and 86‑9 themselves authorise particular individuals or bodies in certain circumstances to disclose information otherwise protected from disclosure by Division 86. The apparent purpose of specifying in Schedule 3 of the FOI Act subs 86‑2(1) and ss 86‑5, 86‑6 and 86‑7 of the Aged Care Act is to ensure that information protected under Division 86 of the Aged Care Act is not disclosed other than as authorised by that Division.
54 I conclude that, for the purposes of subs 38(1) of the FOI Act, 'protected information' acquired in the circumstances identified in par 86‑2(1)(c) is information the disclosure of which is prohibited under subs 86‑2(1), being information acquired by a person in the course of performing duties or exercising powers or functions under the Aged Care Act. On this approach, pars 86‑2(2)(b) and (d) have significance for the purposes of subs 38(1A), in that they exempt from the proscription on disclosure contained in subs 86‑2(1) disclosure to particular classes of persons but they do not, other than indirectly by reason of the opening words of the subsection, have significance for the purposes of subs 38(1).
55 The significance of s 86‑3 of the Aged Care Act in the context of the FOI Act is, in my view, quite different from the significance of pars 86‑2(2)(b) and (d). Section 86‑3 authorises the Secretary of the Department ('the Secretary') to disclose protected information to specified classes of people or in specified circumstances. In particular, par 86‑3(b) authorises the Secretary to disclose protected information:
'to a person who is, in the opinion of the Secretary, expressly or impliedly authorised by the person to whom the information relates to obtain it.'
56 When the Secretary discloses protected information in circumstances authorised by s 86‑3 of the Aged Care Act, the disclosure is made under the Aged Care Act, not under the FOI Act. Section 86-3 has no relevance, in my view, to the operation of subs 38(1A) of the FOI Act as it does not affect a person's right to access to a document under the FOI Act. It is only the Secretary, acting under the Aged Care Act, who s 86‑3 exempts from the prohibition contained in s 86‑2. No other person may rely on the exception contained in s 86‑3.
57 I note incidentally that a person who uses protected information disclosed to him or her under s 86‑3 is guilty of a criminal offence if he or she uses it for a purpose other than the purpose for which the information was disclosed (par 86‑5(c)). I did not hear argument on the significance of s 86‑5 of the Aged Care Act for Dr Duncan should she wish to disclose information obtained by her pursuant to s 86‑3 of the Aged Care Act. I express no view on that question.
58 As is mentioned above, s 86‑3 gives the Secretary authority to disclose protected information to certain classes of people and in certain circumstances. In the events that happened in this case, the second DAT report decision was made by a delegate of the Secretary. In the course of reaching the second DAT report decision, the delegate of the Secretary exercised the authority vested in the Secretary to disclose to Dr Duncan the protected information contained in the edited DAT report on the basis that, in her opinion, Dr Duncan was a person authorised by Mrs Reynolds to obtain it. As is mentioned above, this disclosure was a disclosure authorised by the Aged Care Act; it was not the granting of access to a document under the FOI Act.
59 The delegate of the Secretary did not exercise the authority given to the Secretary by s 86‑3 of the Aged Care Act in respect of the protected information contained in the unedited DAT report or in the SCS record. Disclosure of protected information in the unedited DAT report and in the SCS record remains prohibited by subs 86‑2(1) of the Aged Care Act, under a provision of an enactment specified in Schedule 3 of the FOI Act. The unedited DAT report and the SCS record are therefore exempt documents under s 38 of the FOI Act.
60 A decision of the Secretary under s 86‑3 of the Aged Care Act is not a 'reviewable decision' within the meaning of Division 85 of the Aged Care Act. The Aged Care Act does not provide that applications may be made to the Tribunal for review of decisions made under s 86‑3 of the Aged Care Act (see s 25 of the AAT Act). As the unedited DAT report and the SCS report are exempt documents under s 38 of the FOI Act, the Tribunal had no power to decide that access to them, so far as they contained exempt matter, was to be granted.
61 The answer to the question of law set out in [45] above is that the cross‑claimant's asserted right of access to the SCS record under s 11 of the FOI Act is affected by its classification as an exempt document under subs 38(1) of the FOI Act.