The central concept is that employment with the Crime Commission is conditional on ongoing compliance with prescribed security and integrity measures, rather than being based solely on initial qualification or performance. This is established through "conditions of employment" imposed under the Act. The key concepts introduced by the regulation are:

Security clearance (cl 4): Every staff member must hold two clearances: one issued by the Commissioner and another from the Australian Government Security Vetting Agency as the Commissioner determines necessary. The Commissioner's clearance may be revoked based on a non-exhaustive list of matters: relationships and affiliations of the staff member or connected persons; financial circumstances (including gambling history); alcohol and drug use (including lawful drugs); health (including mental health); criminal history (including uncharged alleged offences); history of compliance with security requirements in current or previous employment or as a contractor; and other matters relevant to assessing suitability to access confidential information, including personal conduct that may increase blackmail, coercion, or bribery risk. Revocation of either clearance allows the Commissioner to terminate employment.

Vetting information (cl 5): Staff must consent to the Commissioner requesting and obtaining vetting information from public authorities or other persons. The term "vetting information" is defined by reference to Act s 78A, which broadly covers information relevant to a person's suitability to be a staff member. The Commissioner may have regard to such information in deciding whether to terminate employment.

Personal particulars and association disclosure (cl 6): The Commissioner may at any time request a statement of personal particulars from a staff member, applicant, or their associates. The statement must be accompanied by a statutory declaration disclosing current or former associations with known criminals, or persons the staff member or applicant reasonably suspects have committed criminal offences. It must also include an authority for release of information and consent to inquiries. Staff must notify the Commissioner of any significant change in the information as soon as possible after becoming aware of it.

Conflict of interest (cl 7): Any actual or apparent conflict between a staff member's duties and their private interests must be reported to the Commissioner immediately upon becoming aware of it.

Prescribed documents (cl 8): The Commissioner may request prescribed documents from staff, applicants, or associates. For individuals, these include birth certificate, marriage certificate, passport, driver licence, deed poll, naturalisation/citizenship certificate, defence force discharge certificate, education/ trade certificates, latest tax return and assessment, documents evidencing foreign assets (including foreign bank accounts), and identity documents from foreign authorities such as baptism certificates or school/hospital records. For companies or partnerships seeking engagement as consultants, documents include constitution or partnership agreement, annual report, audited financial statements, and tax return/assessment. The request applies only to documents in the person's possession or to which they are entitled to immediate possession.

Fingerprint imprints (cl 9): The Commissioner may request fingerprint imprints from staff, applicants, and - for consultant companies or partnerships - from specified associates. Imprints must be destroyed within 6 months after an application is determined (if not appointed), or for staff, within 6 months after ceasing employment (unless under investigation, in which case after investigation and legal proceedings cease).

Drug and alcohol policy (cl 10): Staff must comply with a policy issued by the Commissioner, the content of which is not further specified in the regulation.

Associate: The concept of "person who is associated with a member of staff or an applicant" is given the same meaning as in Act s 73, as modified. This extends the reach of document requests and fingerprint requirements to third parties who have not consented to employment with the Commission, including associates of a company or partnership engaged as a consultant.

The regulation directly affects four categories of persons:

1. Members of staff of the Commission: These include both ongoing and fixed-term employees, as well as persons engaged under contract as consultants under Act s 74(2). Every existing staff member on the regulation's commencement is deemed to have obtained the Commissioner-issued security clearance (cl 4(2)). Thereafter, they must maintain both clearances, consent to vetting, provide personal particulars and documents upon request, provide fingerprints upon request, disclose conflicts, comply with the drug and alcohol policy, and notify the Commissioner of any significant change in personal particulars. Failure to comply is a breach of a condition of employment, potentially leading to termination. The regulation also applies to staff whose engagement commenced before the regulation came into force; transitional provisions deem them to have the Commissioner's clearance, but they are subject to all ongoing obligations.

2. Applicants for positions as members of staff: Applicants must comply with requests for statements of personal particulars, prescribed documents, and fingerprint imprints. Although not yet employed, non-compliance would presumably prevent appointment, as the conditions are framed as conditions of employment. The regulation does not specify a right for applicants to be informed of the reasons for refusal based on these processes, but the Commissioner's discretion is broad.

3. Associates of staff or applicants: This is a notable expansion of regulatory reach. An associate is defined by reference to Act s 73, which covers persons connected through family, business, or other relationships. Associates may be required to provide prescribed documents (cl 8(2)(b)) and, in the case of consultants, fingerprint imprints (cl 9(3)). There is no consent requirement from the associate themselves; the condition of employment is that the staff member or applicant must comply with the request, which could involve compelling the associate to provide documents. If the associate refuses, the staff member may be unable to comply, risking termination. This creates an indirect compliance burden on third parties with no employment relationship. For companies or partnerships seeking to be engaged as consultants, associates of the company or partners may be required to provide fingerprints.

4. Companies and partnerships engaged as consultants: Entities seeking engagement under Act s 74(2) can be required to provide corporate documents (constitution, annual report, audited financial statements, tax returns) and fingerprint imprints of specified associates (cl 8(4), 9(3)). This extends the regulation beyond natural persons to legal entities, potentially increasing due diligence costs for such firms.

The regulation does not directly affect the general public, but its operational consequences may indirectly impact individuals who are associates of Commission staff. It also affects persons who provide vetting information (public authorities and other persons/ bodies), who are authorised to disclose such information without consent of the staff member (consent is given as a condition of employment, but the third party discloser may rely on the consent).

The regulation imposes duties on staff members and applicants; it does not confer independent rights on them beyond those that arise from being a condition of employment (which may be enforceable contractually or through industrial law). The key duties are:

Duty to obtain and maintain security clearances (cl 4): Staff must obtain and maintain both a Commissioner-issued clearance and a Commonwealth clearance as determined necessary. The Commissioner decides what is necessary; there is no explicit right to challenge that determination. The Commissioner must have regard to the listed factors before issuing or revoking a clearance, but the list is not exhaustive and no weighting is prescribed. Revocation of either clearance gives the Commissioner power to terminate employment.

Duty to consent to vetting (cl 5): Staff must consent to the Commissioner requesting and obtaining vetting information from public authorities or other persons. The Commissioner may have regard to vetting information in deciding whether to terminate employment. There is no duty on the Commissioner to disclose the content of the vetting information to the staff member, nor a right to respond.

Duty to provide personal particulars and declaration (cl 6): Staff must comply with a request for a statement of personal particulars (including about associates) accompanied by a statutory declaration disclosing associations with known criminals or persons reasonably suspected of criminal offending. This duty also requires ongoing notification of significant changes "as soon as possible". What constitutes a "significant change" is not defined, leaving staff to exercise judgment at their own risk.

Duty to disclose conflicts (cl 7): Staff must report any actual or apparent conflict between their duties and private interests immediately upon becoming aware. "Apparent conflict" is a low threshold, potentially capturing speculative concerns.

Duty to provide documents (cl 8): Staff must provide prescribed documents upon request, including personal identity documents, tax returns, foreign asset documents, and (for companies) financial reports. The request is limited to documents in the person's possession or to which they are entitled to immediate possession. But there is no limit on the frequency of requests; the Commissioner may request at any time.

Duty to provide fingerprints (cl 9): Staff must provide fingerprint imprints upon request. The regulation provides mandatory destruction timelines: for applicants within 6 months of determination (unless appointed); for staff within 6 months of leaving (unless under investigation, then after investigation and proceedings cease). This is a privacy safeguard but does not give the individual a right to enforce destruction.

Duty to comply with drug and alcohol policy (cl 10): The policy is issued by the Commissioner and not publicly prescribed. This gives the Commissioner unilateral power to set testing regimes, prohibitions, and consequences without further legislative oversight.

The only right explicitly mentioned is the requirement that fingerprint imprints be destroyed within set periods. There is a deeming provision for existing staff to have the Commissioner's clearance, which provides initial certainty but does not prevent future revocation.

The regulation does not provide for a right to be heard before termination, a right to reasons, or a right to appeal or review of Commissioner decisions. Such rights may exist under general employment law or the Act, but they are not created by this regulation. The Commissioner's discretion is broad and structured only by the requirement to "have regard to" the listed matters for security clearances. Other decisions (e.g., what vetting information to request, what constitutes a conflict, the content of the drug policy) are not subject to explicit criteria.

The regulation itself does not create criminal offences or civil penalties. Enforcement is through the employment relationship: non-compliance with a condition of employment can lead to termination of engagement or employment (cl 4(4) expressly empowers termination for security clearance revocation; cl 5(2) allows termination based on vetting information; the other conditions are implicitly enforceable through similar means). The regulation does not prescribe any intermediate sanctions (e.g., suspension, demotion, or fines). The only enforcement mechanism explicitly mentioned is termination.

The Commissioner has significant power to revoke a security clearance (cl 4(3)), and revocation is a direct trigger for termination. The factors the Commissioner must have regard to are broad and include criminal history (including uncharged alleged offences), health (including mental health), alcohol and drug use (lawful or unlawful), financial circumstances including gambling, and relationships. This means a staff member could have their clearance revoked and be terminated for conduct that does not amount to a criminal offence, or even for lawful behaviour (e.g., taking prescription drugs, having a gambling habit, or having a family member with criminal associations). The lack of objective thresholds leaves staff exposed to discretionary enforcement.

For vetting information (cl 5), the Commissioner may have regard to information from a public authority or other person. There is no requirement that the information be verified or that the staff member be given an opportunity to respond before termination. This raises procedural fairness concerns, though general administrative law principles may apply.

The regulation does not create any offence for providing false or misleading information in a statement or document. However, the requirement that the personal particulars statement be accompanied by a statutory declaration (cl 6(3)(a)) means that providing false information in that declaration would be an offence under the Oaths Act 1900 (NSW) or equivalent legislation. Similarly, providing false documents may attract general criminal liability for fraud or forgery, but that is not specific to this regulation.

The fingerprint destruction requirements (cl 9(4)) are mandatory but are not backed by any offence for non-compliance. If the Commission fails to destroy fingerprints within the prescribed time, the staff member's remedy would be through civil action or complaint to a body such as the NSW Ombudsman, but no such avenue is mentioned in the regulation.

The drug and alcohol policy (cl 10) may itself contain penalties for non-compliance (e.g., suspension, mandatory testing, termination), but those would not be penalties created by the regulation.

In summary, enforcement is entirely internal and discretionary, with termination as the ultimate penalty. The regulation does not provide for external oversight, appeals, or independent review of the Commissioner's decisions, beyond what general law provides.

The regulation operates under and is subordinate to the Crime Commission Act 2012 (NSW). It expressly invokes Act s 74(6) (power to impose conditions of employment) and s 77 (power to require information). It also references Act s 78A (vetting information) and s 73 (associates). The regulation does not amend the Act and cannot override it.

The regulation interacts with several other laws:

Privacy legislation: The regulation requires collection and handling of extensive personal information, including health information, financial information, criminal history (including uncharged matters), fingerprints, and relationships. The Privacy and Personal Information Protection Act 1998 (NSW) (PPIP Act) applies to the Commission as a public sector agency. The regulation arguably authorises the collection of sensitive information for security purposes, which may be necessary for law enforcement investigations. However, the regulation does not specify how the information will be stored or shared beyond fingerprints (which must be destroyed). The broad discretion to request information at any time could conflict with privacy principles requiring collection be reasonably necessary and directly related to the agency's functions. Staff and associates may have limited ability to challenge collection.

Employment law: The regulation creates conditions of employment but does not override the Industrial Relations Act 1996 (NSW) or the Fair Work Act 2009 (Cth) to the extent they apply. Termination for non-compliance with a condition must still comply with unfair dismissal and general protections provisions. However, the Commission is a law enforcement agency, and some provisions (e.g., for genuine operational requirements) may apply differently. The regulation does not create a contractual right; it merely states what the Act requires.

Health records legislation: The requirement to disclose health information (including mental health) as part of the security clearance process (cl 4(3)(d)) may intersect with the Health Records and Information Privacy Act 2002 (NSW). The regulation does not limit how that information is used or whether the staff member must consent to its disclosure beyond the consent given for vetting.

Anti-discrimination law: The security clearance factors include health (including mental health), criminal history (including uncharged allegations), and drug use (including lawful drugs). These could engage the Disability Discrimination Act 1992 (Cth) or the Anti-Discrimination Act 1977 (NSW). For example, using lawful drug consumption or mental health conditions as grounds for adverse action may be discriminatory unless an exemption applies for genuine occupational requirements. The regulation does not address this; it simply mandates that the Commissioner have regard to these matters. Whether such reliance is lawful would depend on the specific circumstances and any exemption under the Act or general law.

Spent convictions legislation: The Criminal Records Act 1991 (NSW) generally limits the use of spent convictions. The regulation requires regard to criminal history including uncharged alleged offences, which may not be subject to spent convictions protections. The regulation does not acknowledge spent convictions limitations.

Oaths Act: The requirement for a statutory declaration (cl 6(3)(a)) brings in the Oaths Act 1900 (NSW) and the Statutory Declarations Act 1959 (Cth) (depending on the form used). False declarations are prosecutable.

Subordinate Legislation Act 1989: The regulation was made under this Act and is subject to disallowance by Parliament. Its commencement and repeal are governed by that Act.

The regulation does not interact with laws outside NSW except through the reference to the Australian Government Security Vetting Agency (a Commonwealth body) for security clearances. That interaction is unilateral: the Commissioner determines what Commonwealth clearance is necessary, and the staff member must obtain it. The regulation does not govern the Commonwealth's process.

The Crime Commission Regulation 2022 is a standalone instrument that repealed and replaced the Crime Commission Regulation 2012. As of the date of the provided text, the regulation does not record any amendments to itself. It is a relatively new regulation (commenced on 1 September 2022). The regulation does not include any transitional or savings provisions beyond cl 11, which provides that acts, matters, or things having effect under the 2012 Regulation continue to have effect under the 2022 Regulation. This ensures continuity of decisions made under the predecessor (e.g., security clearances issued under the old regime may remain effective, though the regulation is silent on that specifically).

The 2012 Regulation was originally made under the Crime Commission Act 2012 and was set to expire on 1 September 2022 under the Subordinate Legislation Act 1989, s 10(2). The 2022 Regulation was made to avoid expiry and to re-enact substantially similar provisions. Comparing the two regulations, the 2022 version appears to have consolidated and clarified the requirements. For example, the 2012 Regulation also had provisions on security clearances, personal particulars, finger print imprints, and drug and alcohol policies, but the 2022 version includes new details such as the requirement for a dual security clearance (Commissioner and Commonwealth) and the inclusion of "the member of staff's health, including mental health" as a factor (cl 4(3)(d)). The 2012 Regulation did not explicitly mention mental health; it referred to "health" generally. The 2022 regulation also added the power to request documents relating to foreign assets (cl 8(3)(j)), reflecting modern integrity concerns.

The 2022 regulation also extended the document request power to associates of staff and applicants, and clarified that fingerprint imprints from associates of consultants must be provided. It also added a requirement that the personal particulars statement be accompanied by an authority for release of information and consent to inquiries (cl 6(3)(b),(c)), which may have been implicit before.

The regulation has not been amended since its enactment. Any future amendments would be made by further regulations under the Subordinate Legislation Act 1989.

The provided source does not mention any litigation history, and as a subordinate instrument that has been in force only since September 2022, there is likely limited case law directly interpreting its provisions. However, the predecessor regulation (Crime Commission Regulation 2012) may have been the subject of legal challenges or applications. Given the sensitivity of the Commission's work, litigation involving staff termination based on security clearance revocation or vetting information may have occurred but is not referenced.

Challenges to similar provisions in other jurisdictions (e.g., under the Australian Crime Commission Act 2002) suggest potential grounds for litigation: procedural fairness in security clearance decisions; discrimination based on health or criminal history; privacy breaches; and ultra vires challenges if the Commissioner exceeds the regulation's scope. But no such cases are cited in the regulation.

The regulation's broad discretion and lack of internal review mechanisms increase the likelihood of disputes. Staff who have their employment terminated due to clearance revocation or vetting information may challenge the decision under general administrative law (judicial review) or under the Industrial Relations Act. The regulation does not oust the jurisdiction of courts or tribunals. However, the Act may contain provisions that limit review (e.g., secrecy provisions). The regulation itself does not address review.

In practice, the Commission's staff are likely a small, select group, and disputes may be resolved internally or through confidential processes. The regulation's impact on litigation is therefore uncertain but not zero.

Because no specific cases are named, we cannot identify a litigation history. It is plausible that the regulation has not yet been directly tested in court.

• No right to know the case against you: The regulation does not require the Commissioner to give reasons for revoking a security clearance or for making an adverse decision based on vetting information. A staff member may be terminated without knowing what information led to the decision, other than the broad factors. This is a significant procedural fairness gap.

• Associate burden without consent: Staff members must provide documents and information about their associates (including family members, business partners). If an associate refuses to cooperate, the staff member may be in breach of their conditions of employment. The associate has no formal relationship with the Commission and no duty to comply, but the staff member may suffer consequences.

• Uncharged allegations considered: The security clearance factors include "alleged offences in relation to which the member of staff has not been charged, prosecuted or convicted" (cl 4(3)(e)). This means an allegation, even if unsubstantiated, can be used as a basis for clearance revocation and termination. There is no requirement that the allegation be credible or corroborated.

• Lawful drug use considered: The regulation explicitly includes "use of drugs, including drugs that are lawfully obtained and used" (cl 4(3)(c)). This could include prescription medication or over-the-counter drugs. A staff member could be penalised for lawful conduct that the Commissioner considers affects suitability.

• Mental health considered: "Health, including mental health" (cl 4(3)(d)) is a factor. This could lead to discrimination against staff with mental health conditions, though the Act may have exemptions for operational requirements. The regulation does not safeguard against this.

• Foreign asset disclosure required: Staff must provide documents evidencing assets held in a foreign country, including foreign bank accounts (cl 8(3)(j)). This is a significant privacy intrusion and may create compliance issues for staff with overseas connections.

• Statutory declaration required: The statement of personal particulars must be accompanied by a statutory declaration disclosing associations with known criminals or persons reasonably suspected of criminal offences (cl 6(3)(a)). The phrase "reasonably suspects" is a subjective test: the staff member must disclose any suspicion they have, however remote. Failure to disclose could lead to termination, and a false declaration is a criminal offence.

• Conflict of interest reporting is immediate: Any actual or apparent conflict must be reported immediately after becoming aware (cl 7). There is no de minimis threshold. Staff must constantly monitor their private interests.

• Drug and alcohol policy unknown: The regulation does not specify the content of the drug and alcohol policy (cl 10). The Commissioner could issue a policy that includes random testing, zero tolerance, or even regulation of off-duty conduct. Staff have no input into the policy.

• Fingerprint destruction applies only to imprints received: The destruction requirement (cl 9(4)) applies to fingerprint imprints. It does not cover other biometric data that may be collected.

• No limitation on future requests: The Commissioner may request documents or fingerprints "at any time". There is no limit on frequency, so staff could be subject to repeated requests.

• No exemption for staff with existing clearances: Existing staff are deemed to have the Commissioner's clearance (cl 4(2)), but the Commissioner can still revoke it at any time. There is no grandfathering.

• The regulation does not provide for appeals: While general law may provide some remedies, the regulation itself does not set up any internal appeal or review process for any decision made by the Commissioner.

Compliance is mandatory for all staff members and applicants; there is no opt out. The regulation does not provide a grace period except for the deeming of existing staff's Commissioner-issued security clearance.

For current staff:

• Ensure you hold both a security clearance issued by the Commissioner and a Commonwealth clearance as determined necessary by the Commissioner. If your role changes, the Commissioner may determine a different Commonwealth clearance is required. The Commissioner may review your clearances at any time and revoke them based on the listed factors. Maintain conduct that avoids triggering adverse considerations (e.g., avoid associations with known criminals, manage finances and health, avoid unlawful or risky conduct). If the Commissioner requests information or documents, provide them promptly.

• Consent to the Commissioner requesting and obtaining vetting information from public authorities and other persons. This is an ongoing condition. There is no right to withdraw consent while employed.

• Upon request (or proactively, if a significant change occurs), provide a statement of personal particulars in the approved form, accompanied by a statutory declaration disclosing associations with known criminals or persons you reasonably suspect of criminal offences. Also provide an authority for release of information and consent to inquiries. If you become aware of a change in the information (e.g., new association, change in financial circumstances), notify the Commissioner as soon as possible in the approved form.

• Immediately (as soon as you become aware) notify the Commissioner of any actual or apparent conflict of interest between your duties and your private interests. Err on the side of disclosure to avoid being in breach.

• If the Commissioner requests prescribed documents (see cl 8(3) for individuals: identity documents, tax returns, foreign asset documents, etc.), provide them if they are in your possession or you are entitled to obtain them. If you cannot obtain a document, you may risk non-compliance; seek advice.

• If the Commissioner requests fingerprint imprints, provide them. The Commission must destroy them within 6 months after you cease employment, unless you are under investigation. You may wish to confirm destruction.

• Comply with any drug and alcohol policy issued by the Commissioner. Obtain a copy of the policy and ensure you understand its requirements, including testing protocols and prohibited substances. Comply both on and off duty as the policy prescribes.

• For associates: if the Commissioner requests documents or fingerprints about an associate (including family or business partners), you are required to comply. This may involve asking the associate to provide the information. If the associate refuses, you are still technically obliged to comply; you may need to inform the Commissioner of the difficulty. The regulation does not provide a defence of impossibility.

• Keep the Commissioner informed of any changes to your personal circumstances that may affect any of the above conditions.

For applicants: The same obligations apply, but conditional on appointment. Provide all requested documents, fingerprints, and the statement of personal particulars. If you fail to comply, the appointment may not proceed.

For companies or partnerships: If engaged as consultants, be prepared to provide your constitution, annual report, audited financial statements, tax returns, and fingerprint imprints of specified associates. Ensure your associates are aware and willing to comply.

Best practice: Maintain a file of all communications with the Commissioner regarding clearances, consents, and disclosures. Seek legal advice if you are uncertain about whether a change needs to be reported or a request is lawful. The regulation does not limit the Commissioner's powers, but general law may provide protections; do not assume you must comply with an unlawful request, but refusing carries risks. Ensure any statutory declaration is accurate; false statements can have criminal consequences.