Cancer (Registration) Act 2009

The central concept is cancer, defined as a neoplasm of human tissue with uncontrolled and progressive cell multiplication, potential for invasion or metastasis, and propensity to recur, whether locally or remotely. This definition tracks standard medical understanding but is supplemented by ministerial declaration under s 4, which can add other diseases by Gazette notice. Cancer therefore is not a closed class; the Minister can expand the notification net without amending the Act, which introduces regulatory uncertainty for the health sector.

Prescribed details are the specific data points that must be reported. The Act does not list them; they are to be set by regulation. This means the effective scope of reporting is unknown from the Act alone. Practitioners must look to the Regulations (if any have been made) to know what they must report. This delegation is typical of public health registries but imposes a search cost on duty holders.

Part 3 information is any information given to the Registrar under Part 3 of the Act, plus information carried over from the repealed Act under the transitional provisions (s 26). This designation triggers the confidentiality and disclosure rules in Part 4.

The Registrar is a person appointed by the Minister (s 6). The role is to keep the register (s 7) and to manage the flow of notifications. The Registrar has powers to direct further information (s 10) and to disclose information under Part 4. The Registrar is not required to be a medical professional or statistician; the Act does not specify qualifications.

The register is a compulsory database. Its purpose is not stated beyond “containing the prescribed details given to the Registrar under this Act” (s 7). The Act does not prescribe who may access the register, how long data is kept, or what happens when the data is no longer needed. These are significant gaps for privacy and data governance.

Protection from liability is a key concept. Under s 18, a person giving information in good faith is not in breach of confidentiality, professional etiquette, or ethics, and is not civilly or criminally liable. This overrides doctor-patient confidentiality and any contractual or professional obligations to the contrary. However, the good faith requirement means that a disclosure made recklessly or maliciously is not protected. Section 19 provides similar protection to the Chief Health Officer and Registrar for acts done in good faith in the exercise of powers. Importantly, the Territory itself is not protected; s 18(2) and 19(2) preserve any liability the Territory would otherwise have, so the protections extend only to natural persons acting in good faith.

Strict liability applies to the main reporting offences (ss 8, 9, 10). The Criminal Code Part IIAA (now Part 2.5 of the Criminal Code (NT)) applies generally under s 5, meaning the default fault elements for physical elements of an offence are set out there. The Act expressly provides the fault element as strict liability for these offences, so the prosecution does not need to prove intention or recklessness as to the failure to report, but a defence of mistake of fact may be available under the Criminal Code.

The Act directly imposes duties on a defined set of persons and indirectly affects patients, researchers, and the broader public.

Primary duty holders: (1) The person in charge of a place where a specimen of human origin is collected in the Territory for pathological examination (s 8). This will typically be the clinical director, laboratory manager, or pathologist directing the collection facility. It includes both hospital-based and standalone pathology collection centres. The duty arises even if the examination occurs outside the Territory, capturing specimens sent interstate for analysis. (2) The person in charge of a hospital (s 9) where a patient is diagnosed with cancer or dies with cancer as underlying cause. This includes public and private hospitals as defined by reference to the Medical Services Act 1982 and Private Hospitals Act 1981. The duty is on the person in charge, not the treating doctor, though the person in charge may delegate. (3) Medical practitioners who may be directed by the Registrar to give further information (s 10) if they are mentioned in the original notification or if the Registrar considers they have relevant information. (4) The Registrar of Births, Deaths and Marriages (s 11), who has a duty to provide details where death registration shows cancer.

Secondary affected persons: The Registrar and Chief Health Officer are the state officials administering the system. They are protected from liability and have powers to compel information. Employees and agents of duty holders who actually prepare and submit notifications may be captured indirectly by the offence provisions if they give misleading information. Patients whose information is collected have no rights under the Act to access, correct, or limit disclosure of their data. Privacy protections are minimal: the Act restricts disclosure (s 13) but allows broad exceptions for administration, statistical reporting, inter-jurisdictional data accuracy, and authorised research or quality assurance (ss 14-17). The patient is not consulted.

Researchers are potential beneficiaries: the Chief Health Officer may authorise a person to receive information for scientific research in accordance with the NHMRC guidelines (s 17). This is one of the few uses of the data explicitly contemplated. However, the Registrar must take reasonable steps to protect privacy and, for death data from the Registrar of Births, Deaths and Marriages, must obtain written consent from that Registrar before disclosure.

The public and health system are indirect beneficiaries of population-level cancer statistics, but the Act does not mandate any public reporting. The quality of the register depends on compliance by duty holders. The compliance burden falls entirely on the health sector, with no offsetting funding or administrative support provided in the Act.

Duty to notify: The central duty is on the person in charge of a collection place to give prescribed details to the Registrar within seven days after receiving results indicating cancer (s 8(2)). The duty is limited to details “reasonably available” (s 8(3)). The same duty applies to the person in charge of a hospital for a patient diagnosed with cancer (seven days from diagnosis) or who dies with cancer as underlying cause (seven days from death) (s 9(2)). These are strict liability offences: the prosecution does not need to prove intent or negligence, only that the duty existed and was not performed within the time limit. The maximum penalty is five penalty units (currently $925 as of 2020-2021, but the unit amount may have increased). The seven-day clock starts from the triggering event: receipt of pathology results, diagnosis, or death.

Duty to comply with direction for further information: If the Registrar believes further information is needed to ensure accuracy or completeness of the register, a written direction may be served on the original notifier, a medical practitioner mentioned in the details, or any other medical practitioner the Registrar considers has relevant information (s 10(2)). The direction must include a statement that failure to comply within seven days is an offence (s 10(3)). The person must comply within seven days after receiving the direction (s 10(4)), again only for details reasonably available. This extends the reporting chain beyond the initial notifier.

Duty of Registrar of Births, Deaths and Marriages: If a death registration shows cancer as a cause of death, that Registrar must give the details to the Registrar within 42 days after registration (s 11). This is a mandatory duty on a state official, with no penalty specified (presumably enforced through administrative or inter-agency mechanisms, not directly by the Act).

Duty not to give misleading information: A person must not give the Registrar a document containing misleading information in purported compliance with Part 3 (s 12(1)). This is a knowledge-based offence: the fault element is that the person knows the document contains misleading information. A defence exists if the person draws the misleading aspect to the Registrar’s attention and gives the necessary remedial information to the extent reasonably possible (s 12(2)). “Misleading information” is defined as information misleading in a material particular because it omits relevant information or includes misinformation (s 12(3)).

Duty of confidentiality: A person who obtains Part 3 information in the course of functions for the administration of the Act must not disclose it (s 13(1)). The fault element is recklessness, a higher threshold than strict liability (the person must be aware of the substantial risk of disclosure and proceed anyway). Maximum penalty is 10 penalty units ($1,850). Exceptions allow disclosure for administration of the Act (s 14), in statistical form that does not identify the subject (s 15), to other cancer registries or the National Cancer Statistics Clearing House to ensure accuracy (s 16), and to a person authorised by the Chief Health Officer for research or quality assurance (s 17). These exceptions are broad and leave significant discretion with the Registrar and Chief Health Officer.

Rights: The Act confers no rights on patients or data subjects. Privacy protections are limited to the confidentiality duty on officials, subject to broad carve outs. The notifier has a right to rely on the protection from liability in s 18 when acting in good faith. The Registrar has the right to seek further information. The Minister has the right to declare additional diseases to be cancer. The Administrator has the power to make regulations.

All offences under the Act are criminal in nature. No civil penalties or administrative sanctions are provided. The quantum of penalties is set by reference to penalty units, which in the Northern Territory are adjusted periodically under the Penalty Units Act. As at the 2020 reprint, the base penalty unit was $185, so five penalty units equals $925, and ten penalty units equals $1,850. These are modest amounts relative to the administrative cost of compliance for a hospital or pathology laboratory, but may be significant for an individual medical practitioner or small practice.

Offences and fault elements:

• Failure to notify under s 8(2) or s 9(2): strict liability, maximum 5 PU.
• Failure to comply with a Registrar’s direction under s 10(4): strict liability, maximum 5 PU.
• Giving a document containing misleading information under s 12(1): knowledge required (knows the document is misleading), maximum 5 PU, with a defence of drawing attention and remedying.
• Disclosure of Part 3 information in breach of s 13(1): recklessness required, maximum 10 PU.

Strict liability offences are easier to prosecute because the prosecution need only prove the actus reus (the failure to notify within time, for example). However, the Criminal Code (NT) provides a defence of mistake of fact: if the person had an honest and reasonable but mistaken belief about the facts that would mean the conduct was not an offence, that is a defence. Additionally, s 8(3) and 9(3) qualify the duty by reference to reasonable availability, so the prosecution must also prove the details were reasonably available. These provisions limit the strictest edges, but in practice a duty holder who simply overlooks the requirement may be convicted.

Prosecution approval: Section 20 provides a significant safeguard: a prosecution for any offence against the Act must not be started without the written approval of the Chief Health Officer. This means the Chief Health Officer, not the police or the Registrar, decides whether to pursue a criminal prosecution. This is a filtering mechanism that likely results in few prosecutions, but it also creates a risk of regulatory discretion without judicial oversight of the decision to authorise. The Chief Health Officer is a senior public health official, and the requirement for personal approval adds accountability.

No power to issue infringement notices: The Act does not provide for infringement notices (on-the-spot fines). So any enforcement must go through the full prosecution process, which is resource intensive. This may explain the small number of reported prosecutions, though we have no data.

Protection from liability does not extend to the Territory: While individuals are protected when acting in good faith (ss 18, 19), the Territory’s liability is preserved. This means an aggrieved patient whose data is mishandled could potentially sue the Territory for breach of confidence or negligence, but not the individual officer.

Enforcement risks: The low penalty amounts may not deter large institutions, but the reputational risk of a criminal conviction may be more significant. For small pathology practices or individual doctors, even the maximum penalty is noticeable. The seven-day deadlines are tight; a single missed notification could technically lead to an offence. The combination of strict liability and low penalties suggests the regime is intended to be therapeutic rather than punitive, but the criminal law framework is still in place.

The Act does not operate in isolation; it intersects with several other laws, some of which it overrides and some of which it relies upon.

Health records and privacy laws: The Act does not reference the Information Act 2002 (NT) or the Privacy Act 1988 (Cth). The confidentiality provision in s 13 and the disclosure exceptions in ss 14-17 effectively create a stand-alone privacy regime for Part 3 information. This regime overrides any common law duty of confidentiality and professional ethics (s 18(1)(a) expressly says giving information is not a breach). For hospitals and pathology laboratories that are also subject to the Privacy Act 1988 (Cth) (if they are private sector organisations with annual turnover above $3 million or health service providers), the collection and disclosure of health information must comply with the Australian Privacy Principles (APPs). The mandatory reporting under this Act likely satisfies a legal requirement exception (APP 6.2(b) or 6.2(c)), so disclosure to the Registrar is permitted. However, the Act does not exempt the Registrar from the APPs if the Registrar is subject to the Privacy Act (the Registrar is a Northern Territory government official; the Privacy Act 1988 does not generally apply to state/territory government agencies unless they are contracted service providers). The Information Act 2002 (NT) applies to public sector agencies and has its own information privacy principles. The Registrar’s handling of Part 3 information may need to comply with that Act as well, though the disclosure authorisations in this Act may be argued to constitute authority under another law.

Births, Deaths and Marriages Registration Act 1996: Section 11 of the Cancer Registration Act imposes a duty on the Registrar of Births, Deaths and Marriages to provide death registration details if cancer is a cause of death. This overrides any confidentiality provisions in that Act for this specific purpose. The Cancer Registration Act takes precedence for this information flow.

Medical Services Act 1982 and Private Hospitals Act 1981: These Acts define “hospital” for the purposes of the Cancer Registration Act (s 3). The definitions are incorporated by reference, so any amendment to those definitions flows through to this Act.

Criminal Code (NT): Part IIAA (now Part 2.5) of the Criminal Code applies to all offences under the Act (s 5). This imports the default principles of criminal responsibility, including the physical elements, fault elements, and defences such as mistake of fact, lawful authority, and duress. For strict liability offences, the Code provides that the defence of mistake of fact is available. The Code also sets out the burden of proof (prosecution must prove each element beyond reasonable doubt, defence must raise evidence of relevant defences). This is a standard interaction.

Other cancer registration laws: Section 16 allows the Registrar to disclose information to a cancer registry established under a law of the Commonwealth, a State or another Territory, or to the National Cancer Statistics Clearing House at the Australian Institute of Health and Welfare. This enables data pooling for national cancer statistics but does not mandate it.

Public and Environmental Health Act 2011 (NT): This Act was referenced in the amendment history (No. 7 of 2011) as having amended s 3 of this Act. The details of the amendment are not shown, but it likely updated the definition of “hospital” or related terms. The interaction is administrative rather than substantive.

The Act does not create any private right of action, override the Health Practitioners Act (NT) or professional registration obligations, directly tax or levy any fee, or interact with workers’ compensation or insurance schemes. It is a narrow, specialised statute.

The Cancer (Registration) Act 2009 (Act No. 24, 2009) received assent on 1 September 2009 and commenced on 1 September 2010 (Gazette G35, 1 September 2010, p 3). It repealed and replaced the Cancer (Registration) Act 1988 (No. 64 of 1988) as part of a legislative reprint and modernisation. The transitional provisions in Part 7 Division 2 ensured continuity: the existing Registrar continued in office (s 24), the previous register became the new register (s 25), and information given under the repealed Act is deemed to be Part 3 information (s 26). This means no break in the data collection.

Two subsequent Acts amended the Act:

1. Public and Environmental Health Act 2011 (Act No. 7, 2011) - assented 16 March 2011, commenced 1 July 2011. According to the endnotes, it amended section 3. Without the exact amendment text, the likely effect was updating the definition of “hospital” or cross references to the new Public and Environmental Health Act, which was consolidating public health legislation. The change was substantive but transitional.

2. Statute Law Revision Act 2020 (Act No. 26, 2020) - assented 19 November 2020, commenced 20 November 2020. This was a general revision act that amended various statutes for formal consistency. According to the endnotes, it amended section 3 again, possibly updating penalty unit references or definitional cross-references.

Additionally, the Interpretation Legislation Amendment Act 2018 (Act No. 22 of 2018) made “general amendments of a formal nature” to sections 1, 3, 11 and 23, as noted in the endnotes. These would be things like updating language from “shall” to “must”, updating section numbering, and other housekeeping changes that do not alter policy.

There have been no major policy amendments since 2009. The Act remains essentially as enacted, with only technical cleanups. This stability suggests the regime is settled, but it also means no legislative response to any identified compliance issues or data governance concerns in over a decade. The regulations power under s 21 could be used to adjust prescribed details without amending the Act, but no regulations were reproduced in the text, so it is unclear if any have been made or amended.

The repeal and transitional provisions of the original Act are now spent; the 1988 Act is gone and the transitional period is long over. The Act is now a standalone piece of legislation.

The text of the Act as provided does not mention any litigation. The Act itself is not a frequently litigated statute. A search of publicly available case law (not supplied by the user, but based on general knowledge) reveals no reported decisions in the Northern Territory Supreme Court or other Australian courts concerning this Act. This is consistent with a public health registry statute that imposes low penalties and has a prosecution approval requirement, which likely leads to few contested cases. Strict liability offences with small penalties and a requirement for Chief Health Officer approval mean that any prosecutions are likely administrative rather than litigated. The main risk of litigation may come from an individual or institution challenging a direction to give further information, or from a privacy breach claim against the Territory, but no such cases are recorded in the source. The absence of litigation does not mean the Act is uncontroversial; it may mean that non-compliance is dealt with informally, or that the costs of litigation outweigh the penalties for most entities. The Act’s protection from liability provisions (s 18, s 19) also reduce the incentive for third parties to sue notifiers or officials, as they are shielded from civil liability for good faith conduct. The Territory retains liability, but a person aggrieved by a breach of confidentiality or unauthorised disclosure would need to sue the Territory, not the individual officer. That is a higher bar. The limitation period for any such action would be governed by the Limitation Act 1981 (NT). All of this is speculative because the source does not reference any litigation. The safe and accurate answer is: there is no litigation history recorded in or referred to by the Act itself, and no published case law is widely known.

Several features of the Act can trap unwary duty holders or create unanticipated consequences.

1. The seven-day clock starts from receipt of results, not from diagnosis. For a pathology laboratory, the duty under s 8(2) triggers when the person in charge “receives the results” indicating cancer. If the pathologist sends the report to the referring doctor the same day but the person in charge of the collection centre does not see it for several days, the time runs from receipt by that person. The duty is on the “person in charge of the place”, not the pathologist. In a large practice, this person may be a manager or director who is not clinically involved. The organisation must have systems to ensure that person is notified immediately of any cancer finding.

2. “Prescribed details” may change without notice. The Act leaves the content of notifications to regulations. If the regulations are amended to require more granular data (e.g., genomic markers, staging details, treatment received), the notification burden increases without any amendment to the primary Act. Duty holders must monitor the Northern Territory Legislation Register for Regulation changes.

3. Minister can expand the definition of cancer at any time. Under s 4, the Minister may declare any disease to be cancer for the Act by Gazette notice. This is a broad delegation. A disease that is not traditionally considered a neoplasm could be caught. There is no requirement for consultation or parliamentary scrutiny. A notification that was not required yesterday may become required today.

4. The duty applies even if the specimen is examined outside the Territory. Section 8(1)(a) includes specimens collected in the Territory “whether the pathological examination takes place within the Territory or elsewhere.” So a GP who sends a biopsy to a Sydney laboratory is still within scope. The person in charge of the collection centre in the NT must give details within seven days of receiving the results from the interstate lab.

5. No patient consent is required. The Act does not require the notifier to inform the patient or obtain their consent before reporting. The protection from liability in s 18 overrides any duty of confidentiality or professional ethics. Patients may never know their data is in a government register. While this is typical for public health surveillance, it can be a prudent surprise to practitioners who believe they need to seek consent.

6. The misleading information offence (s 12) catches omissions. “Misleading information” includes a document that does not include relevant information (s 12(3)(a)). So a notification that is factually correct but missing a key piece of data that makes the whole misleading in a material particular could attract a penalty. The defence requires the person to draw the misleading aspect to the Registrar’s attention and give remedial information. This places an active burden on the person to self-correct upon discovery of the omission.

7. The Registrar may require further details without any limit. Section 10 gives the Registrar power to direct further information if they consider it required to ensure “accuracy or completeness”. There is no limit on the number of directions, and no requirement that the information be of the same kind as the prescribed details. The only safeguard is that the person need not give details not reasonably available.

8. The register is not accessible to the public or to notifiers. Notifiers do not have a right to see what they have reported or to check for errors in the register. The Act does not create a mechanism for data subjects (patients) to access or correct their information. This may conflict with other privacy rights.

9. Protection from liability does not apply if bad faith. The good faith requirement in s 18 and 19 means that if a person gives information maliciously, vengefully, or with reckless disregard for truth, they lose the protection and could face civil claims for defamation or breach of confidence from the patient. Similarly, a Registrar who acts in bad faith is personally liable.

10. Prosecution requires Chief Health Officer approval, but that approval can be given after the fact. Section 20 does not require approval before charges are laid? It says prosecution must not be started without approval. So the Chief Health Officer must approve the initiation of proceedings. This is a gatekeeper, but once approval is given, the prosecution proceeds. The Chief Health Officer is not independent of the health department.

11. No statute of limitations within the Act. The general criminal limitation periods under the Criminal Code or Justices Act apply. For summary offences (which these are, as the maximum penalty is 10 penalty units), the limitation period is generally six months from the offence date, but this may be extendable for certain public health offences. The Act does not provide a specific limitation, so practitioners should be aware that a late prosecution is possible.

12. The register may be kept indefinitely. The Act does not provide for destruction or de-identification of data after a certain period. Part 3 information may remain on the register permanently unless the Registrar decides otherwise. There is no right to have information removed.

Compliance requires a systematic approach from pathology collection centres, hospitals, and individual medical practitioners who may be directed to provide further information.

For the person in charge of a place where specimens are collected: Establish a process to identify within 48 hours of receiving a pathology report any report indicating cancer. “Indicates” is not defined; use the clinical diagnosis in the report. If in doubt, report. The prescribed details must be submitted to the Registrar within seven days. Maintain a log of all reports, the date received, and the date dispatched to the Registrar. Ensure that the “prescribed details” are obtained; if the regulations require patient name, date of birth, address, diagnosis code, etc., that data must be on the notification. If any detail is not reasonably available (e.g., the patient’s Medicare number if not collected), document the reason and only submit what is available. The duty is not absolute; reasonable availability is a defence. Keep evidence of compliance: a copy of the notification, proof of posting or electronic lodgement, and any correspondence with the Registrar.

For the person in charge of a hospital: Implement a system to identify cancer diagnoses and deaths with cancer cause within the hospital. This may involve integration with pathology, medical records, and death certification. Notifications under s 9 are separate from and in addition to any notifications from collection centres under s 8. The hospital must notify within seven days of diagnosis or death. For diagnoses made by hospital staff, the duty is on the person in charge, which may be the CEO, director of medical services, or a delegate. Ensure that delegation is documented and communicated. The details must be the prescribed details; again, reasonable availability applies. For a hospital with many cancer patients, this may require dedicated data entry resources.

For medical practitioners: You may be directed by the Registrar under s 10. The notice will be in writing and will specify the information required. You must respond within seven days of receipt. The notice must include a warning that failure is an offence. If you do not have the information, respond stating it is not reasonably available. Do not ignore the notice. If you receive a direction, check if you are the “person who gave the Registrar the prescribed details” or a medical practitioner mentioned in the details. If the Registrar has erred and you have no relevant information, you should still respond to clarify.

For all duty holders: Do not give documents containing misleading information (s 12). If you discover that a notification you made was misleading, promptly contact the Registrar to draw attention to the issue and provide corrected information. This triggers the defence. Keep records of all communications. Ensure that any document submitted is accurate in material particulars.

For the Registrar of Births, Deaths and Marriages: The duty under s 11 is to give details within 42 days after registration of a death where cancer is shown as a cause. This is a systematic duty; the system should flag such deaths automatically.

Privacy and confidentiality: If you handle Part 3 information as an employee of the Registrar or Chief Health Officer, you must not disclose it except under ss 14-17. Reckless disclosure is an offence. Ensure you have clear authority before releasing data. If disclosing for research under s 17, check that the person is authorised by the Chief Health Officer and that the researcher has NHMRC ethics approval. If disclosing under s 16 for accuracy purposes, take reasonable steps to protect privacy (e.g., de-identify where possible, use secure transmission).

Monitoring regulatory changes: The prescribed details and any declarations under s 4 are in subordinate legislation and Gazette notices. Subscribe to the Northern Territory Legislation Register and set up alerts for amendments to the Cancer Registration Act and any regulations made under it. Also monitor the Gazette for new declarations of diseases as cancer.

Record keeping: Keep all notifications, receipts, and correspondence for at least three years, or longer if the regulations specify. The Act does not specify a retention period, but best practice is to retain until any offence period has expired (six months for summary offences, but could be longer if the prosecution is delayed or if civil claims are possible). Given the low penalties, the main risk is a prosecution for failure to notify; having records of timely notification is the best defence.

Training: Ensure all clinical and administrative staff who may handle pathology reports or cancer diagnoses are aware of the notification obligation and the seven-day deadline. Include the obligation in induction materials for new staff. Designate a person responsible for monitoring compliance.

No need to reinvent: For most pathology providers, the cancer registry notification is likely integrated into their laboratory information system. Australian states and territories have similar mandatory reporting. If the laboratory or hospital already reports to a cancer registry in another jurisdiction, check that the same data is being forwarded to the NT Registrar. The Act does not have a carve out for interstate reliance, so separate reporting to the NT may be required if the collection or patient is in the NT.