Background
8 In June 2017, Mr Saffari published a book written by him in paperback format via an Amazon-owned subsidiary that provided a self-publishing service. That service was eventually migrated into Kindle Direct Publishing (KDP), provided by Amazon (or one of the Amazon group of companies). A short time later, Mr Saffari, via KDP, published his book in eBook format. Upon enrolling for the KDP service, Mr Saffari provided his name and email address, among other personal information. Several months later, Mr Saffari published his book in paperback via KDP. Each of the three iterations of the book were published by Mr Saffari using "Anonymous" as the author name. Mr Saffari can fairly be characterised as an intensely private person, who did not want his identity as the author of his book to be disclosed to anyone.
9 Later that year, a third party person complained to Amazon, alleging that Mr Saffari's book contained defamatory material, as well as material that was in contempt of court, and advised that the matter had been referred to the Australian Federal Police and requested that any future copies of the book delete references to those matters. In the first quarter of 2018, Amazon gathered additional information from the third party and reviewed the book against its content guidelines, determining that the book breached those guidelines. In March 2018, Amazon suspended sales of the book and removed it from its store. It communicated with the third party to advise that it was in the process of removing the KDP eBook from sale on all Amazon sites. In that communication, Amazon also disclosed Mr Saffari's name and email address.
10 The next day, Amazon advised Mr Saffari that it had received a notice from a third party claiming the book contained defamatory information and advised him that it had suspended the book from sales and provided his name and email address to the third party. A few days later, Mr Saffari complained to Amazon. Amazon responded to that complaint later in March 2018 and in early April 2018. Being dissatisfied with Amazon's response, in May 2018 Mr Saffari made a complaint to Office of the Australian Information Commissioner (OAIC). On 26 November 2019, after undertaking preliminary inquiries under s 42(2) of the Privacy Act, a delegate of the Commissioner decided not to investigate the complaint under s 41(1)(a) on the basis that Amazon had not interfered with Mr Saffari's privacy.
11 On 26 November 2019, Mr Saffari applied to this Court for a review of the delegate's decision. On 6 March 2020, I made orders by consent, setting aside the delegate's decision and remitting it back to the Commissioner for reconsideration. For reasons that have never been satisfactorily explained to me, the OAIC did nothing substantive with the remitted complaint by Mr Saffari for over a year. It was only when Mr Saffari sought to bring contempt proceedings in March 2021 that, on 5 May 2021, the remitted complaint was scheduled for a conciliation teleconference.
12 On 25 May 2021, the Commissioner's delegate notified Mr Saffari and Amazon of the view under s 40A(3) of the Privacy Act that there was no reasonable likelihood that the remitted complaint would be resolved by conciliation. On 10 June 2021, by letter dated 8 June 2021, a delegate of the Commissioner provided Mr Saffari and Amazon with notice that the acts and practices alleged in the complaint were to be investigated under s 40(1) of the Privacy Act.
13 On 20 July 2021, the Deputy Commissioner provided to Mr Saffari and to Amazon a detailed written indication of how the complaint might be dealt with by way of a detailed document called a Preliminary View. She made a preliminary finding that Amazon had interfered with Mr Saffari's privacy by disclosing his personal information to the third party in breach of APP 6 and advised of preliminary recommendations, namely to recommend the Commissioner make declarations that Amazon had engaged in conduct constituting an interference with the privacy of Mr Saffari and must not repeat or continue the conduct; and that Amazon must, within 30 days, issue a written apology to the complainant, acknowledging the privacy breach. The Deputy Commissioner was "minded" to allow Amazon the discretion as to the appropriate person to give the apology, and indicated an intention to recommend that the Commissioner not award compensation to Mr Saffari in the circumstances.
14 Following consideration of the Preliminary View, the Commissioner decided to make a determination in this matter because she formed the view that there was evidence to establish an interference with privacy on the balance of probabilities and the Mr Saffari and Amazon could not resolve the matter through conciliation or through settlement discussions. The Commissioner noted that Mr Saffari and Amazon each had the opportunity to comment on the Preliminary View and an opportunity to comment on each other's submissions, finding that there were no evidentiary matters that necessitated oral evidence.
15 The Commissioner found that Amazon interfered with Mr Saffari's privacy as defined in the Privacy Act by disclosing his personal information to a third party in breach of Australian Privacy Principle 6 and declared, under s 52(1)(b)(i)(A) of the Privacy Act, that Amazon had engaged in conduct constituting an interference with the privacy of Mr Saffari and must not repeat or continue that act and must, within 60 days of Mr Saffari notifying it of his banking details, pay him $3,000 for non-economic loss.
16 On the topic of an apology, the Commissioner said in the Decision:
Reasonable act of redress - Apology
[142] Under s 52(1)(b)(ii), I may make a declaration that the respondent must perform any reasonable act or course of conduct to redress any loss or damage suffered by the complainant.
[143] The complainant initially asked for an apology. Where a complainant asks for an apology and the respondent is willing to give one, this can be a meaningful I way to provide redress for the privacy breach. A declaration may assist in respect of the timing and means of an apology being provided.
[144] The preliminary view expressed the view that an apology appeared to be appropriate and that the respondent may decide upon the most appropriate person from whom the apology may be provided. The complainant took issue with the latter aspect, but did not put forward an appropriate person or appropriate officer.85 The respondent has put forward submissions as to why it does not consider an apology appropriate.86
[145] In these circumstances, I do not consider it appropriate to declare that the respondent provide the complainant with an apology.
85 C5.1 - Letter from the complainant to the OAIC dated 26 July 2021 pp 5-6 [16].
86 R2.1 - Letter from the respondent to the OAIC dated 10 August 2021 p 4 [2.1]-[2.5].
17 The letter from Mr Saffari referred to at footnote 85 of the Commissioner's decision dated 26 July 2021 above was his initial response to the Preliminary View. He said in that letter at [16] (verbatim):
Your Declaration that Amazon must apologies could have brought a degree of satisfaction, but you even manage to demean the apology by qualifying it; and also how will that forced apology undo the damage?
a) Apologies need to be more than mere platitudes.
b) In your recommendation you state"/ am minded to allow the Respondent the discretion as to the appropriate person to give an apology'.
c) You belittle the apology by giving Amazon the option to issue a meaningless apology by a front desk receptionist, or the night janitor.
(i) Something is fundamentally wrong with OAIC culture and attitude.
18 The letter dated 10 August 2021 referred to at footnote 86 of the Commissioner's decision above was from Amazon's solicitors in response to the Preliminary View. A good deal of that letter was directed to an ultimately unsuccessful submission that there had not been any conduct constituting an interference with the privacy of Mr Saffari having regard to the terms of APP 6, a point that is not in issue in this proceeding. The letter then addressed the proposed remedy of an apology. In short, Amazon accepted that as a general rule apologies were important and may in some circumstances be restorative, but argued against that course in this case having regard to the contents of the book. He formed the view that any apology may not necessarily achieve the objective of rectification and restoration, having regard to the terms of [16] of Mr Saffari's submission reproduced in the preceding paragraph, and that a written apology might be used by Mr Saffari for purposes other than rectification or restoration, referring to separate legal proceedings between him and Amazon.com, Inc, the Amazon parent company. The letter concluded by stating:
[2.6] Should the Preliminary View remain, notwithstanding the above, Amazon submits that such an apology be limited to the following wording:
Amazon acknowledges that in the course responding to a valid third party complaint in relation to your book [title redacted], Amazon provided your email address and name to the third party. Amazon regrets that this disclosure interfered with your expectation of privacy.
19 Mr Saffari responded to Amazon's submission above by a letter dated 16 August 2021. The date at the top of the first page in error had the month "July", but the conclusion had the August date beneath Mr Saffari's signature, and it was attached to an email sent by him on 16 August 2021. That letter said on the topic of an apology:
[12] Amazon has accepted "the importance of apologies as potentially assisting in rectifying a complainant's feelings of embarrassment and distress". That, in this case, is understated.
[13] Amazon is also trying to build on the Preliminary View that "anyone" at Amazon can apologize to me, by asking OAIC to further water down the apology while dictating its contents verbatim.
a) That I may use the apology in any future legal action is irrelevant to this proceeding.
[14] Therefore, I place on record that I will end all matters with the OAIC if one (1) of the following decisions is made, a Sincere Apology or Appropriate Compensation:
a) An Official Admission of Guilt and Apology directly from Jeffrey Bezos (Amazon Chief Executive and the entity ultimately vicariously liable at relevant time).
Or
b) Compensation in the amount of $9,000 for Pecuniary Loss, $45,000 for Non-Pecuniary Loss and $120,000 for Aggravated Damages.
[15] Amazon's dictated apology is as follows:
"Amazon acknowledges that in the course (sic) responding to a valid third party complaint in relation to your book [name redacted], Amazon provided your email address and name to the third party. Amazon regrets that this disclosure interfered with your expectation of privacy."
[16] My suggestion for an apology is as follows:
...... for myself and on behalf of Amazon please accept my apology.
Amazon acknowledges that in the course of responding to a third party complaint in relation to certain facts stated in your self-published Book sold by Amazon, Amazon provided your private information to the third party.
Amazon apologizes that this disclosure interfered with your privacy in contravention of the Australian Privacy Act 1988.
Jeffrey Preston Bezos
20 While the 16 August 2021 letter from Mr Saffari was not referred to in the part of the Decision at [142]-[145] dealing with the issue of an apology (reproduced above), or in the footnotes to those paragraphs, earlier in the Decision in the first sentence of [112] it was stated "The complainant seeks compensation in the amount of $9,000 for economic loss, $45,000 for non-economic loss and $120,000 for aggravated damages." That sentence had a footnote "C6.1 p 3 [14]". As reproduced above, [14(b)] of the 16 August 2021 letter reproduced above states "Compensation in the amount of $9,000 for Pecuniary Loss, $45,000 for Non-Pecuniary Loss and $120,000 for Aggravated Damages." While Mr Saffari had also referred to these amounts in an earlier letter dated 19 July 2021 by stating at [23] "I ask the OAIC to order Amazon to pay compensation of $9,000 for expenses incurred, $45,000 for non-economical loss and $120,000 for aggravated damages".
21 I am comfortably satisfied that it is the later repetition of those amounts in the 16 August 2021 letter that is being referred to by the Commissioner at [112] of the Decision, rather than the earlier reference in the 19 July 2021 letter. That is because:
(a) the paragraph reference [14] is correct for the 16 August 2021 letter, rather than [23] for the 19 July 2021 letter;
(b) the 19 July 2021 letter is listed in Attachment B to the Preliminary View as "C4" as the last document provided by Mr Saffari before the 20 July 2021 date of that document, whereas both the 26 July 2021 letter and the 16 August 2021 post-date the Preliminary view, so would have been given a designation greater than "C4"; and
(c) Mr Saffari's 26 July 2021 letter is expressly referred to by the footnote to [112] as "C5.1", enabling me to infer that Mr Saffari's 16 August 2021 letter was "C6.1", making the 16 August 2021 letter the one that was referenced by the footnote to [112] of the Decision.
22 It follows that Mr Saffari's 16 August 2021 letter was expressly referred to in relation to the damages he was seeking, but was not expressly referred to in relation to the apology he was seeking. An important issue is whether, despite the absence of that express reference at the late point, the 16 August 2021 letter was nonetheless considered in relation to the issue of the apology, and if it was not, whether such a failure constitutes an error of law on the part of the Commissioner as Mr Saffari alleges.
23 The hearing was largely conducted by reference to the Commissioner's written submissions to which Mr Saffari directed his oral submissions, and the contents of parts of the FAOA, which in parts were expressed more in the manner of a submission than a pleading.