Commissions of Inquiry Regulations 2021

Several short, discrete conceptual points structure the regulations.

Definitions and scope. The regulations define two key terms relevant for their operation. "Act" means the Commissions of Inquiry Act 1995 (Reg 3). "Child Abuse Commission of Inquiry" is the specific commission established under that Act on 15 March 2021 (Reg 3). The non‑application rules operate only "for the purposes of the Child Abuse Commission of Inquiry" (Reg 4(1) and 4(2)), so the instrument ties its effects to a single inquiry instance rather than to Commissions generally.

Non‑application, not amendment. The operative device is non‑application of listed statutory provisions. The regulations do not purport to amend or suspend the named Acts; they say the specified provisions "do not apply" with respect to certain information. That is a negative or carve‑out power: it removes the applicability of selected statutory provisions in the context described, rather than imposing new positive duties or creating new offences within these regulations.

Two categories of non‑application. Regulation 4 is structured into two paragraphs that operate over slightly different factual matrices:

• Reg 4(1) lists provisions that do not apply "in respect of any information to be collected by or on behalf of, or provided to, the Child Abuse Commission of Inquiry". That phrase captures pre‑existing or prospective transfers or collection of information to or for the Commission.
• Reg 4(2) lists provisions that do not apply "in respect of any information collected, or used, by or on behalf of the Child Abuse Commission of Inquiry". That wording includes information already collected and the Commission's subsequent use of information.

This division matters for implementation because some statutory constraints are removed only at the point of collection/provision, while others are removed in relation to later use.

Range of provisions. The listed materials include single sections of statutes (for example, section 16 of the Children, Young Persons and Their Families Act 1997 at Reg 4(1)(a)), entire Divisions (for example, Division 5 of Part 3 of the Education Act 2016 at Reg 4(2)(b)), and whole Acts (for example, "all provisions of the Personal Information Protection Act 2004" at Reg 4(1)(l) and again at Reg 4(2)(e)). The selection spans privacy, health, education, police, corrections, youth justice, registration to work with vulnerable people, and various oversight and tribunal statutes. Where the instrument disapplies an entire Act or Divisional provisions, the legal constraints those statutes would normally impose on handling information for the enumerated purposes are removed.

Administrative and publication detail. The regulations specify their citation (Reg 1) and the commencement rule (Reg 2). The Gazette notification date and the administering department are recorded in the published instrument. Those details are relevant for determining when the non‑application took effect and which department will coordinate compliance and queries.

Conceptually, the instrument replaces a bundle of statutory information‑handling constraints with an alternative legal regime for information touching the Child Abuse Commission of Inquiry. It does so by creating statutory carve‑outs rather than by adding duties. The precise legal consequences for particular pieces of information therefore depend on whether that information fits the textual categories in Reg 4(1) or Reg 4(2), and on the content and reach of the individual provisions listed.

The regulations operate by reference to the Child Abuse Commission of Inquiry and to selected statutory provisions that govern information handling across a wide range of public and regulated actors. The primary directly affected actor is the Commission itself, because Reg 4 removes the application to the Commission's information collection, provision, or use of the statutory provisions listed. The Commission will therefore handle certain categories of information under a different statutory regime, for the purposes of its work.

Second, the public agencies and regulated persons who hold or control information relevant to the Commission are affected. The Acts and provisions listed in Reg 4 identify the universe of likely sources and regimes. The list includes, by way of exemplar and using the instrument’s own references:

• agencies and institutions covered by the Children, Young Persons and Their Families Act 1997 (Reg 4(1)(a));
• corrective services and custodial bodies governed by the Corrections Act 1997 and the Custodial Inspector Act 2016 (Reg 4(1)(b), Reg 4(1)(c), Reg 4(2)(a));
• health sector bodies and practitioners subject to the Health Complaints Act 1995, the Health Practitioner Regulation National Law (Tasmania), the Health Practitioners Tribunal Act 2010, the Tasmanian Health Service Act 2018, and the Obstetric and Paediatric Mortality and Morbidity Act 1994 (Reg 4(1)(e), (f), (g), (p), (j));
• police and police personnel who would otherwise invoke provisions of the Police Service Act 2003 (Reg 4(1)(m));
• education providers and staff regulated under the Education Act 2016 and the Teachers Registration Act 2000 (Reg 4(2)(b), Reg 4(1)(q));
• tribunal and oversight bodies such as the Ombudsman and the Registration to Work with Vulnerable People regime (Reg 4(1)(k), Reg 4(1)(n), Reg 4(2)(d));
• state service employees and managers governed by the State Service Act 2000 (Reg 4(1)(o)); and
• entities dealing with youth justice matters under the Youth Justice Act 1997 (Reg 4(1)(r)).

Private-sector actors and non‑government organisations that hold records relevant to the inquiry are also implicated if they possess information that is "to be collected by or on behalf of, or provided to" the Commission, or information that the Commission collects or uses. For example, non‑government schools or religious bodies that hold personnel or historical records relevant to the inquiry will need to consider the effect of the non‑application provisions on the legal constraints that normally govern disclosure of those records.

Individual witnesses, victims, subject persons, and other private individuals appear indirectly affected because statutory rights and protections that might otherwise attach to information about them are, for specified purposes, removed. The regulations remove the operation of particular privacy, right‑to‑information, oversight, and tribunal provisions only in respect of information tied to the Commission. That changes the statutory regime that would otherwise apply to those individuals’ information in the specific context of the inquiry.

Finally, the Department of Justice is the administering department for the regulations. It will therefore be the central administrative point for enquiries and coordination concerning the regulations’ operation and for liaising with the Commission and other agencies about implementation and compliance.

Who bears practical costs and choices. The regulations shift the locus of legal risk and decision‑making about information disclosure toward the Commission and the agencies providing information. Agencies must identify whether information falls within the non‑application scope and decide whether to provide it; the Commission must determine how to handle, store, and use information in a legal environment where certain statutory constraints and oversight mechanisms have been removed. The instrument’s text does not create positive duties on those actors; it only removes named statutory obligations in relation to specific information flows.

The regulations do not create new positive duties or rights. Their operative legal effect is to remove the applicability of named statutory provisions in relation to specified information connected to the Child Abuse Commission of Inquiry. The principal legal consequence, therefore, is subtraction: certain statutory duties and rights that would otherwise apply to the collection, provision, or use of the specified information do not apply.

Duties and obligations removed, by text. The instrument lists particular statutory provisions that "do not apply" for the purposes of the Child Abuse Commission of Inquiry. Those removals include, in Reg 4(1) and Reg 4(2), provisions drawn from statutes dealing with:

• confidentiality and information restrictions in child and family law contexts (for example, s 16 of the Children, Young Persons and Their Families Act 1997 is listed at Reg 4(1)(a));
• custodial and corrective services confidentiality or inspection provisions (for example, s 8 of the Corrections Act 1997 at Reg 4(1)(b); s 24(1) of the Custodial Inspector Act 2016 at Reg 4(1)(c); and s 8(b) of the Custodial Inspector Act 2016 at Reg 4(2)(a));
• guardianship and administration confidentiality (for example, s 86 of the Guardianship and Administration Act 1995 at Reg 4(1)(d));
• health complaints and practitioner regulation confidentiality and information sharing (for example, s 37 of the Health Complaints Act 1995 at Reg 4(1)(e); the Health Practitioner Regulation National Law (Tasmania) s 216 at Reg 4(1)(f); s 54 of the Health Practitioners Tribunal Act 2010 at Reg 4(1)(g); and s 26, s 45(2) and s 46 of the Health Complaints Act 1995 at Reg 4(2)(c));
• youth justice confidentiality (for example, s 22(1)(b) and (c) of the Youth Justice Act 1997 at Reg 4(1)(r));
• education sector privacy and record‑keeping rules (for example, Division 5 of Part 3 of the Education Act 2016 at Reg 4(2)(b));
• public sector employment confidentiality and disclosure rules (for example, s 9(6), (7) and (14) of the State Service Act 2000 at Reg 4(1)(o));
• obligations under the Tasmanian Health Service Act 2018 (for example, s 14(3) at Reg 4(1)(p)); and
• registration and screening rules for working with vulnerable people (for example, s 54 of the Registration to Work with Vulnerable People Act 2013 at Reg 4(1)(n)).

Most notably, the regulations disapply "all provisions" of the Personal Information Protection Act 2004 in both Reg 4(1)(l) and Reg 4(2)(e), and "all provisions" of the Right to Information Act 2009 in Reg 4(2)(f). They also disapply the provisions of the Ombudsman Act 1978 in Reg 4(2)(d). The effect of those textual choices is that the statutory privacy regulation and the statutory right‑to‑information and Ombudsman oversight mechanisms listed will not apply, for the specified purposes, to information provided to or used by the Commission.

Rights and remedies removed or altered. By removing those provisions, the regulations also remove the statutory rights and remedies that were contained in them insofar as those rights relate to the information specified. For example, statutory privacy protections under the Personal Information Protection Act 2004 will not, by force of the regulations, operate in respect of information within the scope of the instrument. Similarly, statutory internal review or external oversight avenues that flow from the Right to Information Act 2009 and the Ombudsman Act 1978 will not apply in relation to that information.

What duties remain. The regulations do not purport to alter duties or rights under provisions that they do not list. Any obligation or right under other laws, including other sections of the Acts named in Reg 4 that are not listed, will continue to have effect unless and until lawfully disapplied by other instruments. The instrument does not itself create new coercive powers, offences, or penalties; it is silent on new positive duties. Therefore, for matters outside the scope of Reg 4, existing statutory duties and rights continue to apply.

Practical duty shifts. Because the regulations remove the statutory constraints listed, agencies and entities that supply information to the Commission will face a changed legal environment when deciding whether to disclose. That will require internal decision‑making about whether, in their view, the information is within the textual scope of Reg 4(1) or Reg 4(2). The Commission itself will assume practical responsibility for securing, storing, and using information in circumstances where statutory privacy and access regimes listed do not apply.

Statutory citation and administration. The instrument’s definitions and scope are short and explicit. The regulations are cited as the Commissions of Inquiry Regulations 2021 (Reg 1) and are administered in the Department of Justice (Gazette note). These formal elements are relevant to which public body organises compliance and to the legal citation of the instrument.

The regulations contain no express penalty provisions and do not create new offences. Their operative text is a directional non‑application of certain statutory provisions in relation to specified information connected with the Child Abuse Commission of Inquiry. There is therefore no enforcement machinery embedded within the regulations themselves.

Implication of silence on penalties. Because the regulations do not create sanctions, the only immediate legal consequences are the removal of the applicability of certain statutory provisions and, by implication, the removal of any enforcement mechanisms that those provisions would carry as they relate to the specified information. For example, if a particular statutory provision normally carried a civil penalty, a prohibition, or an enforceable right, the non‑application of that provision in respect of information handled by the Commission will, by operation of these regulations, mean that the particular sanction or enforcement mechanism is not engaged in that context.

Enforcement by reference to other instruments. Enforcement and oversight in relation to the Commission’s use of information must therefore derive from other sources of legal authority that remain in force. Those other sources could include provisions of the Commissions of Inquiry Act 1995 itself, internal instructions and protocols adopted by the Commission, directions from the Minister where empowered by primary legislation, or general administrative obligations. The regulations do not state which of those mechanisms apply; they are silent on alternative enforcement tools. Administratively, the Department of Justice is named as the administering department and is the natural contact point for oversight and coordination of compliance (Gazette note).

Practical consequences for handling, retention, and disclosure. In the absence of penalties in the instrument, the compliance regime will be driven by administrative policies and by the incentives and risk calculations of affected agencies. Agencies must therefore decide how to respond to Commission requests for information under the non‑application rules, and to document their disclosure decisions. The lack of statutory penalties in the regulations increases the importance, for both the Commission and data‑holding agencies, of clear internal procedures, recorded decision‑making, legal advice, and secure data handling practices.

Potential enforcement gaps and risk. The removal of Ombudsman and Right to Information mechanisms in respect of certain information (Reg 4(2)(d) and Reg 4(2)(f)) indicates that some external oversight routes ordinarily available to citizens and agencies are not available for that information. That does not itself remove oversight provided by other legislation or institutional accountability (for example, parliamentary reporting obligations under primary Acts), but those other avenues are not set out in this instrument. Users of the regulations should therefore expect accountability and enforcement to be concentrated in the Commission’s governance, the Commissions of Inquiry Act 1995, and administrative structures coordinated by the Department of Justice, rather than in the disapplied statutes.

Record of commencement. Practical enforcement questions such as the timing of disclosures and whether retrospective penalties might apply depend on the commencement date. The regulations commence on Gazette notification (Reg 2); Gazette publication occurred 14 July 2021. Any agency action taken after that date will need to take the non‑application into account.

The regulations operate by creating specified exclusions from the operation of named provisions of other Tasmanian laws in relation to information handled by the Child Abuse Commission of Inquiry. That interaction is direct and textually constrained: listed provisions "do not apply" to information in the circumstances described (Reg 4(1) and Reg 4(2)). The interaction therefore takes the form of a limited legislative carve‑out from the named statutes.

Direct statutory carve‑outs. The instrument explicitly lists the Acts and sections affected. For the purposes of information to be collected by or on behalf of, or provided to, the Commission, the regulations disapply particular sections and an entire Act in one case. For example, they disapply s 16 of the Children, Young Persons and Their Families Act 1997, s 8 of the Corrections Act 1997, s 86 of the Guardianship and Administration Act 1995, s 37 of the Health Complaints Act 1995, and all provisions of the Personal Information Protection Act 2004 (Reg 4(1)(a), (b), (d), (e), (l)). For information collected or used by the Commission, they disapply the Custodial Inspector Act 2016 s 8(b), Division 5 of Part 3 of the Education Act 2016, parts of the Health Complaints Act 1995, the Ombudsman Act 1978, all provisions of the Personal Information Protection Act 2004 again, and all provisions of the Right to Information Act 2009 (Reg 4(2)(a)-(f)).

Overlap and boundary effects. Because the regulations name particular provisions rather than entire Acts in most cases, their interaction with other statutory duties depends on the content of those non‑listed provisions. Where only a single section is disapplied, other sections of the same Act will continue to operate. For example, if an Act contains multiple separate information‑handling requirements and only one is listed in Reg 4(1) or 4(2), the remaining requirements continue to apply. The instrument therefore requires careful, clause‑level analysis of the statutes it touches to determine where obligations persist.

Privacy and access regimes. The regulations remove the operation of both the Personal Information Protection Act 2004 and the Right to Information Act 2009 in respect of relevant information (Reg 4(1)(l); Reg 4(2)(e)-(f)). That change alters the interface between privacy protections, access rights, and the Commission’s investigatory needs. Where those Acts would otherwise require particular handling, disclosure restraints, or access procedures, those statutory constraints will not bind the Commission for the information described. At the same time, other statutory protections for particular classes of information that are not listed will remain in force.

Oversight and remedy removal. The disapplication of the Ombudsman Act 1978 provisions in Reg 4(2)(d) removes that statutory avenue of external oversight for the information concerned. The regulations do not create substitute oversight mechanisms; therefore interaction with the rest of the statutory environment will depend on remaining institutional checks, including any internal Commission procedures, ministerial directions authorised under the Act, and administrative arrangements in the Department of Justice. The instrument itself is silent on those alternative accountability channels.

Interplay with sectoral statutes. The list in Reg 4 crosses multiple sectoral laws: health, education, corrections, police, youth justice, guardianship, and employment. Entities operating under those Acts must map the specific sections listed to their operational duties. For example, a hospital that otherwise would be prohibited from releasing certain patient information under a named section will be able to respond to a Commission request in the circumstances specified in Reg 4, because the named provision "does not apply" in respect of information provided to or used by the Commission.

Temporal interactions. Reg 4(1) targets information "to be collected" or "provided to" the Commission, which relates predominantly to prospective or planned transfer of information, whereas Reg 4(2) uses past/present language,"collected, or used, by or on behalf of",which covers information already in the Commission’s possession and the Commission’s ongoing use. Agencies and legal advisers should therefore pay attention to timing when identifying which statutory constraints are displaced at which stage of an information transfer and use lifecycle.

Remaining legal frameworks. The non‑application does not, on its face, remove obligations arising under Acts not listed or under other non‑statutory legal duties. The instrument leaves intact any other statutory provisions that are not specifically listed, and it does not purport to alter the operation of the Commissions of Inquiry Act 1995 itself. Thus the regulations should be read as a targeted interaction: they alter the legal texture around information provided to and used by the Child Abuse Commission of Inquiry, but they do not create a general immunity from other legal duties that remain in force.

Administrative interaction. The regulations are administered by the Department of Justice (Gazette note). Practically, coordination across agencies will be required to ensure consistent application of the carve‑outs and to manage conflicts between the non‑application and other statutory obligations. The instrument creates a legal baseline for those administrative arrangements by setting the textual limits of the carve‑outs.

The published instrument supplies only its original citation and commencement details and notes concerning publication and administration. The regulations are cited as the Commissions of Inquiry Regulations 2021 (Reg 1). They commence on the day of Gazette notification (Reg 2); the Gazette notification is recorded as 14 July 2021. The regulations are administered in the Department of Justice (Gazette note at end).

There are no amendment clauses, saved transitional provisions, or sunset dates contained in the regulations themselves. The instrument does not record any prior versions or legislative history beyond those publication details. The text does not indicate any subsequent amendments, revocations, or variations; none are included in the instrument provided.

Because the regulations operate by reference to the Child Abuse Commission of Inquiry established on 15 March 2021, any change to that Commission’s status under the Commissions of Inquiry Act 1995, or any later instrument that repeals or replaces these regulations, would be necessary to alter their practical operation. The regulations do not themselves contain a termination clause or a specified expiry; their duration will therefore depend on subsequent legislative or administrative action, or on the natural cessation of the Commission’s purposes if and as governed by primary legislation.

Users of these regulations should therefore treat the instrument as a single, standalone subordinate instrument published and notified in July 2021, with administration allocated to the Department of Justice. To confirm any amendments or repeal, a user must consult the Tasmanian statute register or the consolidated instrument record; the instrument as supplied contains no amendment history or subsequent dates.

The regulations text supplied contains no mention of litigation, judicial consideration, or dispute relating to the instrument. The instrument itself is a set of regulations and contains no annotation of any court proceedings.

Because the instrument does not in itself include litigation history, any search for case law or judicial interpretation would need to be conducted against external sources. The text provided here does not supply such material and does not identify decisions, interlocutory rulings, or appeals that interpret or apply the regulations.

Practitioners and researchers needing to know whether these regulations have been the subject of judicial review, statutory interpretation litigation, or related proceedings should therefore consult Tasmanian court records and consolidated legislative databases outside this instrument. The document supplied to this analysis contains no litigation history entry.

Scope ambiguity about "information." The regulations operate in respect of "information" to be collected, provided, collected, or used by or on behalf of the Commission (Reg 4(1)-(2)). The instrument does not define "information". That lexical gap creates a potential interpretive issue: affected parties will need to determine whether particular records, notes, metadata, or derivative analyses qualify as "information" for the regulation’s purposes. The absence of a definition raises implementation risk because different agencies may draw divergent conclusions about scope.

Different words for different timings. Reg 4(1) uses the phrasing "to be collected by or on behalf of, or provided to" the Commission, while Reg 4(2) uses "collected, or used, by or on behalf of". That distinction matters operationally. Entities must decide at what stage a statutory provision ceases to apply: at the point of intended collection, at delivery to a Commission agent, at actual collection, or at subsequent use. Misreading the temporal scope could lead to erroneous refusals to disclose or to improper reliance on the non‑application.

Partial versus whole‑Act carve‑outs. The instrument disapplies single sections of many Acts, but in two instances it disapplies "all provisions" of whole Acts (the Personal Information Protection Act 2004 at Reg 4(1)(l) and Reg 4(2)(e)) and "all provisions" of the Right to Information Act 2009 (Reg 4(2)(f)). Practitioners must be careful to distinguish where only specific sections are disapplied and where entire Acts are removed from application. A mistaken assumption that an entire Act has been disapplied where only a section was listed would produce errors.

Interaction with non‑listed provisions and other laws. Because the regulations list particular provisions but not others, actors should not assume a blanket immunity. Other statutory obligations and procedural safeguards that are not listed continue to apply. The risk here is operational: agencies might err by treating their disclosure to the Commission as unconstrained, when in fact other statutory duties remain.

Oversight and review channels are narrowed. The removal of the Right to Information Act 2009 and the Ombudsman Act 1978, in relation to information collected or used by the Commission (Reg 4(2)(f) and Reg 4(2)(d)), narrows statutory avenues for external review and complaint in respect of that information. Entities supplied with Commission information should not assume it is subject to the same external remedies as other government information.

Data security and retention expectations are not set. By disapplying the Personal Information Protection Act 2004 (Reg 4(1)(l) and Reg 4(2)(e)), the regulations remove statutory privacy obligations in relation to the relevant information. The instrument does not, however, provide alternative statutory requirements for data security, retention periods, or destruction. Agencies and the Commission will need to rely on internal protocols and administrative arrangements to manage data security, which raises compliance and reputational risk if such protocols are inadequate.

No penalties or enforcement in the regulations. The absence of embedded enforcement or penalty provisions means the regulations do not themselves create a statutory sanctioning mechanism to ensure compliance with the Commission’s information collection or use practices. That can create discretionary administrative burdens and may shift the locus of risk to political or ministerial accountability rather than statutory correction.

Potential for inconsistent application across agencies. Different public bodies and non‑government data holders will need to interpret the regulations and apply them in practice. Without centralised, recorded guidance, there is a risk of inconsistent approaches to what is disclosable, to record handling, and to the legal basis for disclosure. This raises operational risk for parties that may be held to account later if a mistaken disclosure occurs.

Conflicts with non‑Tasmanian regimes. The instrument refers expressly to Tasmanian laws. Where information has cross‑jurisdictional aspects,records held by interstate bodies, national registration regimes, or national law instruments,the relationship between this Tasmanian non‑application and non‑Tasmanian or national legal duties is not addressed. For example, the Health Practitioner Regulation National Law (Tasmania) is listed at Reg 4(1)(f) but the national law’s interaction with other jurisdictions is not canvassed. Entities operating across jurisdictions should identify any external legal constraints.

Administrative burden for mapping records. Practically, entities must triage records to determine which are within the regulations’ scope. That mapping exercise is resource‑intensive and time sensitive, and the regulations provide no procedural timetable for responses. The absence of procedural detail is therefore a practical "gotcha" for agencies asked to respond quickly.

The regulations set a narrow legal framework: they state which statutory provisions do not apply in relation to information associated with the Child Abuse Commission of Inquiry. Compliance therefore requires mapping, documentation, and cautious decision‑making rather than the adoption of new statutory processes.

1. Identify the legal basis for a disclosure request. Start by recording whether a request for information is made "to be collected by or on behalf of, or provided to, the Child Abuse Commission of Inquiry" (Reg 4(1)) or whether the Commission will collect or use particular information (Reg 4(2)). The temporal distinction in the two subparagraphs is operationally important. Document the date of the request, the identity of the requester, the nature of the information, and who within your organisation made the disclosure decision.

2. Map each record against the listed provisions. For each unit of information, determine which of the Acts and sections listed in Reg 4(1) or Reg 4(2) would otherwise have governed it. The regulations list provisions at clause level (for example Reg 4(1)(a) through Reg 4(1)(r); Reg 4(2)(a) through Reg 4(2)(f)). Confirm whether the specific statutory provision listed applies to your information; if it does, then the regulation operates to prevent that provision applying in respect of the information provided to or used by the Commission.

3. Do not assume blanket immunity. Where only a section of an Act is listed, retain awareness that other sections and other Acts may still apply. Confirm which statutory duties remain in force and whether there are legal obligations outside the listed provisions (for example, reporting obligations under other legislation).

4. Obtain internal legal advice and record reasons. Because the word "information" is undefined and because the regulations disapply provisions clause by clause, obtain a reasoned legal view from in‑house counsel or external legal advisers before releasing sensitive records. Document the legal basis for any disclosure, citing the specific regulation provision relied on (for example, Reg 4(1)(l) for the Personal Information Protection Act 2004), and retain that documentation in your corporate file.

5. Consult the Commission’s secretariat or the Department of Justice. The regulations are administered in the Department of Justice (Gazette note). Coordinate with the Commission’s secretariat and with the Department of Justice to clarify requests, confirm the identity of persons authorised to receive information, and to arrange secure transfer mechanisms.

6. Maintain robust data security and chain‑of‑custody measures. The regulations remove statutory privacy obligations (for example, the Personal Information Protection Act 2004) in relation to specified information, but they do not supply alternative statutory data‑security requirements. Agencies should therefore adopt strong administrative measures for secure transfer and storage: encryption in transit and at rest, access controls, audit logs, and transfer receipts. Keep a chain‑of‑custody record for each disclosure.

7. Set protocols for sensitive or third‑party information. Some records will include third‑party personal data, medical records, or information about minors. Even where a statutory provision is disapplied, consider redaction where appropriate, where practicable, and where doing so does not frustrate the Commission’s function. Any decision not to redact should be recorded and supported by legal advice.

8. Document decisions regarding oversight and external complaints. Because the regulations disapply the Right to Information Act 2009 and the Ombudsman Act 1978 in respect of the relevant information (Reg 4(2)(f) and Reg 4(2)(d)), organisations should note the availability,or not,of statutory remedies. Where a complainant seeks redress, maintain records that explain why statutory avenues were or were not available in relation to the specific information.

9. Train staff and create a disclosure checklist. Operational staff need a clear internal checklist to triage Commission requests promptly and consistently. The checklist should include identification of the requesting Commission entity, the nature of the information sought, whether the information falls under Reg 4(1) or Reg 4(2), whether the listed statutory provision applies to the record, security measures for transfer, and recording of legal advice.

10. Preserve non‑Commission legal obligations. Continue to comply with statutory duties not disapplied by the regulations. For example, where the regulations do not list a particular provision, continue to act under that provision. If in doubt, seek advice rather than assume non‑application.

11. Coordinate cross‑jurisdictional issues. If records are subject to other jurisdictions’ laws, national registration regimes, or contractual confidentiality, obtain legal advice about cross‑border obligations. The regulations refer to Tasmanian Acts and do not purport to override obligations under Commonwealth or other jurisdictions’ law.

12. Monitor for further legislative or administrative guidance. Because the regulations do not contain operational procedures, expect the Department of Justice and the Commission to issue logistics, guidance, or protocols. Keep an eye on departmental circulars and Commission directions, and update internal procedures accordingly.

13. Keep a disclosure ledger and retention plan. Maintain a ledger recording each item of information disclosed to the Commission, the legal basis cited, the disclosure recipient, date and method of transfer, any redactions made, and the retention or destruction plan. The regulations do not set retention periods; internal governance should set them.

Following these steps will assist agencies and private entities to operationalise the regulations’ non‑application rules in a documented, defensible, and risk‑aware manner. The regulations themselves are short and focused on which provisions do not apply to information connected to the Child Abuse Commission of Inquiry; the compliance task is largely administrative and interpretive: map records, obtain legal advice where uncertain, secure data transfers, and record decisions.