Consideration
65 Given the nature of the information in the Australian Documents I was satisfied that they would be subject to the provisions of the Privacy Act and the Health Records Acts, notwithstanding the proposed redaction of information concerning height, weight and Medicare numbers.
66 At least some or all of the information in the Australian Documents would be considered "personal information" under the Privacy Act and the Health Records Acts because it is information comprising individuals' names and contact details.
67 I was also satisfied that at least part of the information in the Australian Documents would also be considered "health information" for the purposes of the Privacy Act and the Health Records Acts for the following reasons.
68 First, in the case of the lists of patient contact details, the information has been collected by those entities in the course of the provision of a health service.
69 Second, an inference can reasonably be drawn that an individual who has submitted a claimant registration form or an opt-out notice has been identified from material produced on subpoena by health entities, as having undergone a particular health service, with the result that the individual's contact information contained in a claimant registration form, for example, discloses information about that individual's health.
70 Hence, subject to any extra-territorial limitation, I was satisfied that Astora is required to comply with the various sets of privacy principles in the Privacy Act and the Health Records Acts, due to its status as a body corporate in possession of the relevant information in the Australian Documents.
71 While the information in the Australian Documents was collected and is currently held in Australia (by Astora's Australian solicitors), Astora does not carry on business in Australia. Nevertheless, at least some of the Permitted Purposes must take place inside Australia, by Baker McKenzie as Astora's agent providing the information to Astora in the US or directly to Kroll. Accordingly, Astora is likely to be taken to have engaged in conduct engaged in by Kroll or by Baker McKenzie as Astora's Australian lawyers.
72 Given that some of the conduct is intended to occur in Australia, and given that the Privacy Act and the Health Records Acts do not contain express exceptions for acts done outside Australia required by foreign laws, the Foreign Representative sought relief under art 25 that would apply to all conduct, whether done in Australia or in the US.
73 The Privacy Act and the Health Records Act contain express exceptions for transfers authorised by law. I was therefore satisfied that, if orders were made by this Court as sought in the Interlocutory Application this would permit Astora to use and disclose the information in the Australian Documents for the Permitted Purposes without breaching the Privacy Act or the Health Records Acts.
74 Further, I was satisfied that art 25 would be an appropriate source of power to make the orders sought in the Interlocutory Application. Unlike the position in Re Chow, the Foreign Representative does not seek to control or enforce a foreign court order in Australia; rather he seeks to enliven an Australian exception to Australian privacy legislation, so that Astora may comply with its obligations in the Astora Chapter 11 Proceeding.
75 The closest Australian equivalent to a US Chapter 11 proceeding is voluntary administration. In a voluntary administration, the administrator is required by the Corporations Act 2001 (Cth) (Corporations Act) and the Insolvency Practice Rules (Corporations) 2016 (Cth) (IPRC) to give notice of the existence of the administration, the rights as creditors, and creditors' meetings to "as many of the company's creditors as reasonably practicable": rr 70-30, 75-225 of the IPRC; s 436E of the Corporations Act.
76 When a company goes into voluntary administration, the directors must complete and provide to the administrator a Report on Company Activities and Property (ROCAP): s 438B(2) of the Corporations Act. The director is required to list all of the company's creditors in the ROCAP: The administrator is then required to lodge the ROCAP with the Australia Securities and Investments Commission (ASIC): s 438B(2A) of the Corporations Act.
77 United States Chapter 11 proceedings are debtor-in-possession proceedings, meaning that an external administrator is not appointed and the company's management remains in control of the company's affairs. Accordingly, Astora has obligations in the US to notify creditors and to file a list of creditors that are analogous to an Australian voluntary administrator's duty to notify creditors and the company directors' obligations to prepare a ROCAP, which the voluntary administrator then lodges with ASIC.
78 Given the closely analogous obligations in Australia and the US, I concluded that it was appropriate for this Court to cooperate with the request made by the Foreign Representative to allow Astora to comply with its US Chapter 11 obligations without breaching Australian privacy legislation.
79 I was not satisfied, however, that the date of birth of claimants should be included in any information disclosed for the Permitted Purposes. Counsel for Astora and the Foreign Representative submitted that dates of birth may assist in delineating between two claimants with identical names but conceded that this information was not required in order to satisfy the US Chapter 11 disclosure requirements. Given the inherently personal nature of a date of birth and the ever present risk of this information becoming the subject of identity theft I determined that this information, together with information of height, weight and Medicare numbers must not be included in any information disclosed for the Permitted Purposes.
80 Nor was I satisfied that it was necessary that the Permitted Purposes include disclosure to the OCC. None of the creditors of Astora have any claims based on the production of opioid based pain medication because they were not products manufactured or distributed by Astora.
81 I was satisfied, however, that it is necessary and in the interests of the claimants that their identity be disclosed to the US Bankruptcy Court for the purposes of the Astora Chapter 11 Proceeding and the related Endo Group Chapter 11 Proceedings, and also to the US Trustee and the UCC. The US Trustee is required to act in the interests of all stakeholders and the role of the UCC is to protect the interests of all unsecured creditors, and in order for them to perform those roles I accept that it is necessary for them to have access to a full list of claimants, in which the names of the claimants are not redacted.