Background facts
6 On 8 April 2013, CLR15, a citizen of Vietnam, arrived in Australia by boat. She arrived at Darwin.
7 On 16 June 2014, CLR15 applied for a Protection (Class XA) visa. By virtue of legislative changes, this application was treated, from 16 December 2014, as an application for a Protection (Class XD) visa.
8 On 7 April 2015, CLR15 gave birth to a son (CLR15.1).
9 On 13 July 2015, CLR15's migration agent provided forms 866B and 866D to the Department of Immigration and Citizenship (the Department). Form 866D was an application by CLR15.1, as a member of a family unit, for a protection visa. Form 866B provided details of the persons included in the application for a protection visa - CLR15 and CLR15.1 were listed as the persons included in the application.
10 On 14 August 2015, the Delegate refused CLR15's application for a protection visa. The Delegate was not satisfied that CLR15 was a person in respect of whom Australia had protection obligations under the relevant provisions. The Delegate's decision record did not, however, refer to CLR15.1's application for a protection visa. Further, the Delegate's letter notifying refusal of the application for a protection visa (dated 14 August 2015) did not refer to CLR15.1's application for a protection visa. As the primary judge found at [2] of his reasons for judgment (the Reasons), the Delegate did not make a decision in respect of CLR15.1.
11 On 25 August 2015, an application was made to the Tribunal for review of the Delegate's decision. The application form was completed in the names of both CLR15 and CLR15.1.
12 On 22 October 2015, the Tribunal decided:
(a) to affirm the Delegate's decision not to grant CLR15 a protection visa; and
(b) that it had no jurisdiction in relation to CLR15.1.
13 In [1] of its reasons, the Tribunal stated:
The delegate found that the application by [CLR15.1] was not a valid application and did not make a decision in relation to [CLR15.1]. Accordingly, the Tribunal has no jurisdiction in relation to [CLR15.1].
14 Insofar as the Tribunal stated, in the extract set out above, that the Delegate had found that CLR15.1's application "was not a valid application", this was an error. In fact, the Delegate had not referred to CLR15.1's application. The Tribunal was, however, correct to state that the Delegate had not made a decision in relation to CLR15.1.
15 For the purposes of the issues raised by the appeal, the part of the Tribunal's reasons dealing with the data breach is also relevant. The Tribunal dealt with CLR15's claims relating to the data breach at [48]-[66] of its reasons. The Tribunal outlined the circumstances of the data breach at [49]. The Tribunal noted that, following the data breach, the Department commissioned KPMG to conduct an assessment of the "events leading up to the disclosure of personal information of detainees, in connection with a document uploaded to its website on 10 February 2014". At [50], the Tribunal summarised CLR15's claims relating to the data breach. At [51], the Tribunal stated that CLR15's representative had submitted in a pre-hearing submission that: without access to the full KPMG report, CLR15 would be unable to put her claims in a "full and fair way"; and the Tribunal should obtain the unabridged KPMG report from the Department pursuant to s 427 of the Migration Act 1958 (Cth) and provide it to CLR15. The Tribunal noted that it had refused this request.
16 At [54] and [55] of its reasons, the Tribunal noted that, at the hearing, CLR15's representative had reiterated the concerns regarding not having access to the unabridged KPMG report. The Tribunal also noted that it (the Tribunal) had commented that: it was unlikely that the report would be released in full to either the Tribunal or the persons affected; and the version of the KPMG report that had been released appeared to indicate that there was no way of knowing who accessed the information and how often it was downloaded.
17 In the course of its reasoning in relation to the data breach issue, the Tribunal stated at [56] that, in its view, it was highly unlikely that the Vietnamese authorities had become aware of CLR15's details or that she was in a detention centre as a result of the data breach. The Tribunal also stated, at [57], that it considered that, notwithstanding the data breach, it was likely that CLR15's detention in Australia would become known upon her return to Vietnam and that it would be assumed that she had lodged an application for asylum in Australia. The Tribunal therefore considered whether CLR15's application for asylum, combined with the other matters upon which she relied, would result in her being harmed upon her return to Vietnam. At [61], the Tribunal stated that: it was satisfied that ordinary citizens who are returned to Vietnam after lodging an unsuccessful application for asylum in Australia were not harmed upon their return; it did not accept that CLR15 was other than an ordinary citizen who would return to Vietnam after an extended period without a visa in Australia; it would be known that she had applied for asylum in Australia; even if it was known that she was on a list of persons who were in Australia at a specific time, the Tribunal did not accept that this would result in a heightened risk; and the Tribunal was not, therefore, satisfied that there was a real chance that CLR15 would be harmed for these reasons upon her return to Vietnam.
18 At [62], the Tribunal noted that it had not obtained the full KPMG report as requested by CLR15's representative. The Tribunal stated that an abridged report, dated 20 May 2014, had been released and was publicly available. In [63] of its reasons, the Tribunal referred in several places to the "unabridged" report, but it is apparent from the context that it intended to refer to the "abridged" report. In relation to the request that the Tribunal obtain and provide a copy of the full report, the Tribunal stated at [64]:
Importantly, the Tribunal considers that there is no unfairness to the applicant in [not] obtaining the report because, even taking [CLR15's] claims at their highest and accepting that the report was accessed by intelligence or security agencies within the Vietnamese government who are monitoring their [nationals'] conduct overseas, the Tribunal does not accept that this will have any adverse consequences for [CLR15] given her lack of an adverse profile and no evidence indicating that ordinary citizens such as her who have applied for asylum overseas are subject to harm upon their return to Vietnam.
We have inserted the word "not" before the word "obtaining". The omission of the word "not" is evidently a typographical error.