Electoral Regulation 1993

The Regulation revolves around a small set of interlocking technical concepts. These are explicitly defined or operationalised in the text and in the Dictionary annex.

• Roll information. The Dictionary defines roll information as “a copy of a roll or of information contained on a roll.” That is the operative unit of data regulated by the instrument. The Regulation treats roll information as a shareable asset, but only when shared by specified authorities and only for prescribed purposes (s 2; Dictionary; see ss 4-4AC).
• Prescribed authority. The Regulation designates particular persons or offices as “prescribed authorities” for the purposes of the Electoral Act, s 65. These authorities have the capacity to provide roll information to other persons or entities, subject to the constraints set out in each section. For example, the chief health officer (s 4(1)), the director-general of the Treasury (s 4A(1)), the public trustee and guardian (s 4AA(1)), the commissioner for revenue (s 4AB(1)) and the integrity commissioner (s 4AC(1)) are prescribed authorities in their respective sections.
• Prescribed purpose. For each prescribed authority the Regulation specifies a narrow set of permitted purposes. The Regulation uses the phrase “prescribed purpose” and then lists the allowed activities. Examples include maintaining the cancer register and contacting specific population cohorts for screening (s 4(2)(a)-(c)), contacting former Totalcare employees about superannuation (s 4A(1)(b)), administration of deceased estates (s 4AA(2)), administration or enforcement of a tax law (s 4AB(2)), and integrity-related functions including investigating alleged corrupt conduct and handling public interest disclosures (s 4AC(2)(a)-(b)).
• Conditional disclosure. The instrument operates on a “may give” model rather than an obligation. Each prescribed authority “may give roll information to another person or entity if the only use of the information authorised by [the prescribed authority] is for a prescribed purpose” (s 4(3); similar language in ss 4A(2), 4AA(3), 4AB(3)). That construction creates two concentric limits: the giver must authorise only the prescribed purpose, and the recipient may only use the information for that purpose (s 4(4); corresponding provisions elsewhere). The Regulation therefore prescribes both a gating function (authorising disclosure) and a use restriction on recipients.
• Onward disclosure to statutory investigators. Section 4AC provides a specific mechanism for integrity investigations: the integrity commissioner may give roll information to another person or entity if (a) the person or entity is authorised by the integrity commissioner to use the information for specified investigatory purposes, or (b) the person or entity has statutory powers to compel documents or answers and the information is given so the integrity commissioner may fulfil its investigatory purposes (s 4AC(3)(a)-(b)). The text includes an explicit example, giving roll information to a magistrate when applying for a search warrant (s 4AC(3) example).
• Cross-references and external definitions. The Regulation imports definitions and operative meanings from other laws. It explicitly points to the Integrity Commission Act 2018 (for corrupt conduct), the Public Interest Disclosure Act 2012 (for disclosable conduct and public interest disclosure), and the Taxation Administration Act 1999 (for tax law). It also relies on the Legislation Act 2001 for the legal status of notes and for penalty-unit values set out in the republication notice (Dictionary notes; endnotes).
• Prescribed entity and ballot-form technicality. Beyond roll-data sharing, the Regulation prescribes a named private partnership (ActewAGL retail partnership and specific corporate components with ABNs) as a prescribed entity under the Electoral Act, s 67(1)(b) (s 5). It also prescribes the specific heading to appear on declaration ballot papers by inserting the word Declaration next to Ballot paper in the ballot-paper heading referenced in the Act, schedule 1 (s 5A).

These concepts establish a regime that enables selected public authorities to extract parts of the electoral roll for a narrow range of administrative, investigative or service-delivery tasks, subject to an authorisation and use-limitation architecture. The Regulation does not itself elaborate technical safeguards such as retention limits, audit trails, encryption, or destruction requirements; it confines itself to naming actors and purposes and to the binary condition that recipients “may only use the information” for those specified purposes (see ss 4-4AC).

This Regulation affects a compact set of actors in clearly defined ways:

• Prescribed authorities and their decision-makers. The chief health officer (s 4(1)), the director-general of the Treasury (s 4A(1)), the public trustee and guardian (s 4AA(1)), the commissioner for revenue (s 4AB(1)), and the integrity commissioner (s 4AC(1)) are directly affected because the Regulation grants those offices a discretionary power to give roll information to other persons or entities but only on the condition that the authorised use is limited to the prescribed purpose in each section. These decision-makers determine who may receive roll information and must restrict authorisations accordingly.
• Recipients of roll information. Any person or entity to whom roll information is given under these provisions is affected because the recipient is legally constrained to “only use the information for a prescribed purpose” (see s 4(4); ss 4A(3), 4AA(4), 4AB(4), 4AC(4)). That includes private contractors engaged by a prescribed authority, external agencies, or judicial or law-enforcement actors who receive the information under the integrity-commissioner pathway (s 4AC(3)(b)).
• Specific private-sector entity named as prescribed. The ActewAGL retail partnership (with specific corporate constituents and ABNs given in s 5) is affected directly by being treated as a prescribed entity under the Act, s 67(1)(b). The effect of that designation depends on the Electoral Act; the Regulation supplies the prescribed-entity name for the Act’s purposes.
• Voters and individuals whose details appear on the roll. Electors are indirect but materially affected parties, because their roll data may be disclosed outside the electoral administration for the narrow purposes listed in the Regulation (for example health screening contact, superannuation contact for former Totalcare employees, administration of deceased estates, tax administration or integrity investigations). The Dictionary’s definition of roll information confirms that a disclosure can be a copy of the whole roll or subsets or specific information contained on the roll (Dictionary).
• Agencies and units engaged in the specified functions. For example, cancer-register managers, breast-screening program administrators, relevant revenue-collection units, and officers handling public interest disclosures or corruption investigations are affected operationally, because the Regulation creates a statutory pathway to obtain roll information to carry out their functions (s 4(2); s 4AB(2); s 4AC(2)).
• Organisations contracted to act on behalf of prescribed authorities. The Regulation contemplates that prescribed authorities may give roll information to “another person or entity” (see ss 4(3), 4A(2), 4AA(3), 4AB(3), 4AC(3)). Contractual service-providers therefore will face the legal constraint to use the data only for the specified purpose and the practical obligation to enforce that constraint internally and in subcontractor chains.
• Courts and magistrates in limited circumstances. Section 4AC(3)(b) allows roll information to be given to a person or entity that has power to require production of documents or answers, and gives the example of providing roll information to a magistrate when applying for a search warrant as part of an integrity investigation. That creates a pathway for judicial actors to be provided material necessary for investigatory warrants, but only where it is needed to fulfil the integrity-commissioner’s statutory function.

Who does not appear on the face of the Regulation as authorised: general private-sector actors, political parties, media organisations and most private service-providers not acting under contract to a prescribed authority. The instrument does not create a general right for the public or private sector to purchase or receive roll information; it sets narrow exceptions tied to the functions and named actors in the Regulation (ss 4-4AC). The net effect is a limited expansion of access to roll data for specific administrative and investigatory ends, calibrated to particular offices and purposes named in the text.

The Regulation imposes a constrained set of positive permissions and negative limits rather than broad duties. The mechanical duties and rights manifest in the text are:

• Giver’s conditional discretion. Each prescribed authority has the right to give roll information, but that right is conditional. The authority may give roll information only where “the only use of the information authorised by [the prescribed authority] is for a prescribed purpose” (see s 4(3); similar in s 4A(2), s 4AA(3), s 4AB(3), s 4AC(3)). That creates a duty on the prescribed authority to frame the authorisation so the authorised use is the prescribed purpose alone.
• Recipient’s strict use restriction. Any person or entity that receives roll information under the prescribed-authority provisions “may only use the information for a prescribed purpose under this section” (s 4(4); ss 4A(3), 4AA(4), 4AB(4); s 4AC(4) for the integrity-commissioner pathway). This is a direct statutory constraint on the recipient’s use rights, not merely a policy preference.
• Integrity-commissioner special regime. The integrity commissioner has two specific models to provide roll information: (a) give it to a person or entity authorised by the integrity commissioner to use it for particular investigatory purposes; or (b) give it to a person or entity that has power to require documents or answers when the transfer is to enable the integrity commissioner to fulfil its investigatory function (s 4AC(3)(a)-(b)). Subsection 4AC(4) then restricts the authorised recipient to use the information only as authorised. The text thus creates a limited right for the integrity commissioner to share roll information with judicial or investigative bodies in the course of corruption or public interest disclosures investigations.
• Duty to keep to the specified purpose. Both the authority and the recipient share a legal model that requires the disclosure to be purpose-limited. The authority must confine the authorisation to the prescribed purpose, and the recipient must confine its use to that purpose. The legal obligation is expressed repeatedly with the phrase “may only use the information for a prescribed purpose” (see s 4(4), and parallel subsections). That formulation places a clear legal constraint on secondary use.
• Naming and identification duties. Section 5 prescribes a named private partnership (ActewAGL retail partnership) as the nominated entity for the Act, s 67(1)(b). A legal obligation flows to treat that precise corporate structure and ABNs as the prescribed entity; implementers must use the exact corporate identifiers in compliance with s 5.
• Ballot-paper heading requirement. Section 5A directs a specific printing or endorsement duty: the heading on a ballot paper used for declaration voting must be the heading set out in the Act, schedule 1 modified by inserting Declaration next to Ballot paper. That creates a mandatory specification for electoral administrators and printers concerning the wording of the heading on declaration ballots (s 5A).
• Definitions and interpretative effect. Section 2 and the Dictionary make clear that definitions in the Dictionary apply across the Regulation unless otherwise stated (s 2; Dictionary note). That creates a duty on implementers to treat the Dictionary as operative law for terms used in the instrument, for example the definition of roll information and the cross-reference to tax law in the Taxation Administration Act 1999 (Dictionary).
• Limits are statutory, not discretionary licence for broader use. The Regulation does not create a general right or duty to disseminate roll information beyond the narrow prescriptions. Any action beyond the specified uses would fall outside the statutory grant set out in these sections and would therefore lack the authorisation the Regulation supplies.

Noticeably absent as express duties in the text are operational obligations such as record-keeping, security standards, retention or destruction timelines and audit or reporting requirements for disclosures of roll information. The Regulation confines itself to identifying who may act and for what purpose; it does not set out compliance processes or sanctions in this text. Any enforcement or additional procedural duties must be located in the Electoral Act or other referenced laws.

The Regulation itself does not enumerate offences, penalty provisions, or an enforcement agency. The text ought to be read alongside the Electoral Act 1992 and other statutes for the enforcement framework. The republished law provides two relevant pointers:

• Penalty unit value statement. The republication notice at the start of the document records that at the republication date the value of a penalty unit for an offence against this law is $160 for an individual and $810 for a corporation, with a cross-reference to the Legislation Act 2001, s 133. That identifies the monetary quantum of penalty units applicable to offences under the Act or its subordinate instruments as at that date, but the Regulation does not itself state which contraventions of its text attract penalty units or specify offence elements (see republication header, Penalties).
• Enforcement architecture is external to the Regulation. The Regulation repeatedly references powers and limitations under the Electoral Act 1992 (for example, it is made under the Act; ss 4-4AC are expressed as “For the Act, section 65” in their headings). Those references indicate that the primary offence and enforcement provisions are located in the Electoral Act. The Regulation supplies prescribed authorities and purposes; it does not set out process-level sanctions or a compliance-inspection regime in its own text (see s headings and the Act references in ss 4-4AC; s 5; s 5A).

Practical consequences for enforcement and compliance therefore depend on the Electoral Act and any other legislation referenced (for example Integrity Commission Act 2018, Public Interest Disclosure Act 2012, Taxation Administration Act 1999). The Regulation’s repeated prescription that recipients “may only use the information for a prescribed purpose” creates a legal boundary; breaches of that boundary will likely be actionable under the Act or under other privacy or criminal provisions, but the Regulation does not itself identify the procedural path to prosecution or administrative sanction. Readers should therefore treat the Regulation as identifying permitted behaviour and delegations, while enforcement details (including the elements of particular offences, prosecutorial discretion, administrative penalties, and possible disciplinary or civil remedies) are to be found in the principal Act and related statutes.

The endnotes and Dictionary show additional legal cross-linking: for definitions such as “chief health officer,” “commissioner for revenue,” “director-general,” and “integrity commissioner,” implementers must consult the Legislation Act 2001 and the associated statutes for the governance of those offices. Any formal enforcement action for misuse of roll information will require reference to those statutes, and the penalty-unit conversion referred to in the republication header should be used only as an index to potential fines where an offence provision is implicated.

In short, the Regulation sets out authorised uses and actors and a statutory restriction on recipients’ use of roll information, but it relies on the Electoral Act and other Acts for the detailed enforcement, penalty and procedural regimes. The Regulation’s repeat condition that authorised use be limited to the specified purpose is the principal legal constraint; the sanctions for contravention must be located in the broader legislative architecture.

The Regulation is expressly framed as subordinate legislation made under the Electoral Act 1992 and is replete with references to other statutes for definitions and operational context. The key interactions visible on the face of the text are:

• Electoral Act 1992. The Regulation is made under the Electoral Act 1992 and operates chiefly to implement provisions in that Act. The headings to several sections state “For the Act, section 65 (Provision of roll information to prescribed authorities)” (see s 4 title and ss 4A, 4AA, 4AB, 4AC). Section 5 refers to the Act, s 67(1)(b), and s 5A refers to the Act, s 114(7) for declaration ballot papers. The Regulation therefore supplies the prescribed authorities, prescribed purposes and a prescribed entity that the Electoral Act requires to be named in subordinate legislation. The Regulation does not replace or replicate the Electoral Act’s core duties, offences or procedures; it supplies operational detail required by the Act.
• Integrity Commission Act 2018. Section 4AC identifies functions under the Integrity Commission Act 2018, including dealing with corruption reports and investigating alleged corrupt conduct, and incorporates the definition of corrupt conduct by reference (s 4AC(2)(a); s 4AC(5) directs to the Integrity Commission Act, s 9 for the definition). The Regulation permits the integrity commissioner to receive and give roll information in the exercise of those functions, and to share roll information with persons who have statutory investigatory powers when necessary to carry out those functions (s 4AC(3)(a)-(b)).
• Public Interest Disclosure Act 2012. Section 4AC also lists prescribed purposes under the Public Interest Disclosure Act 2012 for assessing and investigating disclosures and reviewing such investigations (s 4AC(2)(b)). The Regulation therefore dovetails with the PID Act’s investigatory and assessment tasks, by making the roll available for these functions.
• Taxation Administration Act 1999. The Dictionary defines “tax law” by reference to the Taxation Administration Act 1999, s 4, and s 4AB allows the commissioner for revenue to give roll information for the administration or enforcement of a tax law (s 4AB(2)). That interlocks the roll-disclosure regime with tax-administration powers under the Taxation Administration Act.
• Legislation Act 2001. The Regulation repeatedly relies on the Legislation Act for interpretative and procedural points: the Dictionary is made part of the Regulation under s 2 and the Dictionary notes reference the Legislation Act’s definitions and provisions for the legal status of notes and republication/editorial amendments (see s 2, s 3 and the introductory republication notes). The penalty-unit value recorded at the front of the republication refers to Legislation Act 2001, s 133, for the penalty unit rate.
• Other statutes and administrative law. The Regulation’s cross-references to other Acts mean that the exercise of the permitted disclosures will be shaped by the powers, duties, and constraints in those Acts. For example, the integrity-commissioner pathway contemplates sharing with bodies that have statutory powers to compel documents or answers; which bodies that includes, and the limits on their powers, will be governed by the external statutes that confer those powers. Similarly, the Regulation does not specify privacy protections or data-security standards; any requirements of that kind must be sought in privacy law, public-sector information-handling rules, or the principal Acts under which the prescribed authorities operate.
• Electoral Act mechanisms for ballot papers and prescribed entities. Section 5A’s instruction about the wording on declaration ballot paper headings exists to give effect to the Electoral Act’s ballot-paper provisions. The Regulation’s naming of ActewAGL retail partnership as a prescribed entity in s 5 likewise gives statutory effect to the Act’s need for a list of prescribed entities, again relying on the Electoral Act for consequences.

The net interaction pattern is that the Regulation fills definitional and naming gaps left by the Electoral Act. It enables certain public functions to access roll information while deferring to other statutes for definitions, investigatory powers, compulsion powers, penalties and data-handling obligations. Implementers and legal advisers must therefore consult the Electoral Act and each cross-referenced statute to assemble the complete legal framework applying to a proposed disclosure of roll information or the use of a declaration ballot.

The Regulation has a long amendment history, which the republished law sets out in endnotes. The amendment record shows iterative additions and reworkings, with several discrete insertions of new roll-disclosure pathways and other technical changes. Key milestones visible in the amendment history include:

• Initial enactment and renaming. The Regulation was originally the Electoral Regulations and notified on 11 June 1993 (SL1993-24). It was renamed Electoral Regulation 1993 by Electoral Regulations Amendment SL2000-43 (s 4) (see Legislation history).
• Early amendments in the 1990s. Multiple subordinate amendments occurred throughout the 1990s (SL1994-16, SL1994-39, SL1995-4, SL1995-45, SL1997-5, SL1997-28, SL1997-34). Those amendments adjusted various parts of the Regulations, including headings and provisions later reworked or repealed as the Act changed (Legislation history and Amendment history).
• Insertion of the roll-information public-health pathway. Section 4 (use of roll information,public health) was substituted and amended over the 1994-2013 period. The record shows s 4 being substituted (SL1994-16 s 3), amended multiple times (SL1995-45, SL1997-5), omitted and reinserted as legislation evolved (A1997-41 sch 2, SL2000-43 s 5), and later updated (SL2008-43 s 5; SL2013-13 s 4). These changes reflect repeated legislative attention to specifying public-health uses such as cancer-register maintenance (see s 4 and Amendment history).
• Insertion of s 4A (Totalcare superannuation contact). Section 4A was inserted by SL2008-43 s 6 and later subject to administrative amendment (A2011-22 amdt 1.191, 1.192). This provision creates a narrowly targeted pathway to contact former Totalcare employees about superannuation (s 4A) and reflects targeted, entity-specific legislative interventions (Amendment history).
• Insertion of s 4AA (deceased estates). Section 4AA was inserted by SL2013-13 s 5 and amended by A2016-13 amdt 1.57, establishing the public trustee and guardian as a prescribed authority for administration of deceased estates using roll information (Amendment history).
• Insertion of s 4AB (taxation). Section 4AB was inserted by SL2019-9 s 4, naming the commissioner for revenue as a prescribed authority for tax administration and enforcement purposes (Amendment history).
• Insertion of s 4AC (integrity commissioner). Section 4AC was inserted by SL2023-6 s 4, creating a pathway for the integrity commissioner to obtain and, in limited circumstances, share roll information for corruption and public-interest disclosure functions. This is a recent addition that interacts with Integrity Commission Act 2018 and the Public Interest Disclosure Act 2012 (Amendment history).
• Prescribed entity updates. Section 5 (prescribed entity) has been amended multiple times. It was amended by SL1994-16 s 4, removed and reinserted in the 2000s, and updated by SL2002-22 s 4 and later amendments including A2015-15 amdt 3.37 (Amendment history).
• Ballot-paper and miscellaneous changes. Section 5A (declaration ballot papers) was originally inserted by SL1995-4 s 3 and later amended by A2012-1 s 20; its heading was altered by A2023-43 amdt 2.76 to reflect current form and placement (Amendment history).
• Recent omnibus amendment. The Electoral and Road Safety Legislation Amendment Act 2023 (A2023-43) inserted an amendment to Part 2.2 and specifically amended s 5A, with the sch 2 pt 2.2 commencing on 29 November 2023 (Legislation history). SL2023-6 also is a 2023 instrument with changes.

The endnotes record numerous other subordinate instrument insertions, omissions, technical renumberings and editorial amendments under the Legislation Act 2001. The record shows repeated legislative attention to the roll-disclosure regime, with the trajectory over time being the addition of narrowly tailored purposes and authorities (public health, deceased estates, tax administration, integrity investigations), rather than a broad liberalisation. The amendment history also demonstrates reliance on subordinate legislation to update operational detail as agencies and policy needs change.

For practitioners, the amendment record signals the need to check the latest republished text and the endnotes for recent insertions. It also demonstrates that the Regulation has been used as the instrument of choice for adding narrow, targeted roll-disclosure pathways over several decades. The republished law includes endnotes that identify each amending instrument, its notification date and commencement, which should be consulted where precise historical timing or transitional arrangements are relevant.

The republished Regulation and its endnotes do not record any litigation history. The document includes a detailed legislation and amendment history but provides no case law, judicial decisions, or administrative-review outcomes arising from the Regulation itself. The absence of litigation references in the text means:

• No appellate or reported decisions are cited within the Regulation’s endnotes or the body of the instrument, and no statutory notes quote judicial interpretation of these specific provisions.
• Any legal disputes about the scope, interpretation or application of the Regulation would therefore need to be researched outside this text, in court records, tribunal decisions, or administrative review determinations under the Electoral Act 1992 or other relevant Acts (for example the Integrity Commission Act 2018 or the Public Interest Disclosure Act 2012).
• Because the Regulation operates by naming prescribed authorities and prescribing narrow purposes rather than by laying out general standards, litigation might be expected to focus on (a) whether a particular disclosure fell within the authorised purpose, (b) whether a prescribed authority properly limited authorisation such that the “only use” condition was complied with, or (c) whether a recipient exceeded the permitted purpose in its subsequent use or disclosure. The text does not provide examples of such disputes having arisen to judgment.

Practitioners should therefore treat the Regulation as an area where interpretative disputes would be resolved under the Electoral Act and by courts or tribunals, but they must look outside the Regulation’s text to find any reported litigation. Where a client faces an enforcement action or a challenge to a disclosure decision, the relevant starting point in litigation research will be the Electoral Act and any judicial decisions interpreting the Act’s provisions concerning roll information, as well as decisions under the Integrity Commission Act and the Public Interest Disclosure Act where section 4AC is relied upon.

The Regulation contains a number of technical features and implementation risks that can catch implementers if not accounted for. These are concrete, textual, and operational:

• “May give” and “only use” form a two-step constraint that places decision risk on the prescriber. The prescribed authority must authorise disclosure such that “the only use of the information authorised by [the prescribed authority] is for a prescribed purpose” (see s 4(3) and equivalent subsections). If an authorisation is imprecisely worded or fails to restrict use to the narrow listed purpose, then the giver may have authorised an impermissible use. That is liable to be litigated or reviewed under the Electoral Act rather than resolved within the Regulation (ss 4-4AC).
• No operational safeguards in the text. The Regulation does not provide rules about retention, destruction, security controls, audit logs, access controls, or subcontractor obligations. The absence of such operational duties in the text means that implementers must look to the prescribing authority’s own governance frameworks or other statutes to ensure data security; failing to do so could create regulatory or reputational risk even if the disclosure was within the authorised purpose (compare ss 4-4AC and Dictionary).
• Broad definition of roll information. Roll information is defined to include “a copy of a roll or of information contained on a roll” (Dictionary). That can encompass single records or bulk extracts. Implementers need to be careful: the permitted purpose may not justify bulk or unnecessary data sharing in the absence of additional limiting criteria. The Regulation does not itself qualify the volume, granularity, or format of permitted disclosures.
• Targeted but potentially surprising inclusions. Some of the prescribed uses are narrowly targeted and may not be intuitively linked to electoral administration. For example, s 4A authorises contacting former Totalcare employees about superannuation and specifies Totalcare by ABN; failure to note that this entity-specific pathway exists could lead to missed opportunities or incorrect denials when dealing with older employment-related matters.
• Onward disclosure via integrity pathways. Section 4AC permits the integrity commissioner to give roll information to persons with statutory compulsion powers in order to fulfil investigatory tasks. That creates an explicit exception to the otherwise tight gatekeeping: roll information can be used to seek warrants or compel documents in the course of integrity investigations (s 4AC(3)(b) and example). Implementers should recognise that judicial or law-enforcement requests that cite this pathway will be operating under a different factual matrix than routine administrative uses.
• Cross-Act definition traps. The Regulation relies on definitions in other statutes (for example tax law is defined by Taxation Administration Act 1999, s 4; corrupt conduct and disclosable conduct are defined in Integrity Commission Act 2018 and Public Interest Disclosure Act 2012 respectively). Misunderstanding those external definitions can lead to misconceived authorisations. Practitioners must consult the referenced Acts to ensure the purpose stated in an authorisation aligns with the statutory definitions.
• Lack of express sanctions in the Regulation. Because the Regulation does not itself define offences or penalties for misuse, it might be tempting for agencies to treat the constraints as advisory rather than binding. That would be a misreading: the “may only use” phrasing is a statutory restriction; any penalty or corrective action, though, will come from the Electoral Act or other statutes. Not appreciating that split can cause a failure to escalate or report a breach to the correct authority promptly.
• Precise corporate identity for prescribed entity. Section 5 prescribes a particular partnership and lists constituent companies and ABNs. Failure to use the exact corporate identification in compliance programmes or in legal drafting could produce confusion about who is the “prescribed entity” under s 67(1)(b) of the Act.
• Ballot-paper technicality. Section 5A prescribes a precise textual modification for declaration ballot papers. Electoral administrators and printers must ensure the exact insertion of Declaration next to Ballot paper in the heading as required; typographical or layout deviations could be challenged in close-run procedural disputes about ballot form compliance.
• Editorial and republication changes. The endnotes show many editorial amendments authorised by the Legislation Act 2001. Practitioners should be alert to the fact that editorial changes can take effect on the republication date and that the republished text includes such amendments. Reliance on an earlier printout or an unrepublished instrument risks citing obsolete numbering or text.

These “gotchas” arise directly from the language and structure of the Regulation. They translate into practical risk points: inadequate drafting of authorisations, absence of technical controls, failure to consult cross-referenced Acts, and operational errors around the precise entities and ballistic details the Regulation prescribes.

Compliance requires attention at two levels: legal-authorisation steps taken by prescribed authorities before disclosure, and operational controls imposed on recipients after disclosure. The Regulation’s text supplies a narrow legal test and the following operational checklist is a direct application of that test.

For prescribed authorities (the givers)

1. Authorise with restrictive wording. When a prescribed authority (for example the chief health officer, director-general of the Treasury, commissioner for revenue, public trustee and guardian, or integrity commissioner) decides to give roll information, ensure the authorisation instrument explicitly states that the only use authorised is the prescribed purpose named in the relevant section (see s 4(3); s 4A(2); s 4AA(3); s 4AB(3); s 4AC(3)). Avoid broad authorisations or open-ended data-sharing clauses.

2. Document the legal basis. Keep a written record referencing the specific subsection (for example “pursuant to Electoral Regulation 1993 s 4AB(3)”) and set out the factual basis for why the recipient requires the information for the prescribed purpose.

3. Minimise the scope of data. Apply data minimisation: disclose only the fields and records necessary to perform the prescribed purpose. The Regulation defines roll information broadly (Dictionary). Limit bulk extracts when a targeted subset will achieve the purpose.

4. Contractualise recipient obligations. Execute a written agreement or memorandum that records the statutory use restriction and requires the recipient to use the information only for the prescribed purpose, to prohibit onward disclosure except as permitted by the Regulation, and to commit to technical and organisational security measures.

5. Agree retention and destruction. Although the Regulation does not set retention or destruction rules, prescribed authorities should specify retention limits and a secure destruction method for the recipient, consistent with the authority’s own information-governance obligations.

6. Record and audit. Keep an audit trail of disclosures: who received roll information, for what purpose, what dataset was given, the legal authorisation used, and when data was deleted or returned. This provides evidence that the giver complied with the “only use” condition.

7. For integrity-commissioner disclosures, confirm statutory compulsion powers where applicable. Under s 4AC(3)(b), if roll information is given to a person or entity that has power to require production of documents or answers, confirm the recipient’s statutory compulsion power and document the nexus to the integrity-commissioner purpose.

For recipients (the persons or entities given roll information)

1. Restrict use to the prescribed purpose. The statutory text is explicit: recipients “may only use the information for a prescribed purpose” (s 4(4); ss 4A(3), 4AA(4), 4AB(4), 4AC(4)). Implement internal policies and role-based access controls to ensure data cannot be used for other purposes.

2. Control onward disclosure. Ensure contract terms or legal conditions forbid onward disclosure unless it fits within an express exception in the relevant subsection (for example, where the integrity commissioner authorises a particular recipient under s 4AC(3)(a) or where the recipient has statutory compulsion powers under s 4AC(3)(b)).

3. Implement technical safeguards. Even though the Regulation does not set security standards, compliance requires secure transfer methods, encryption in transit and at rest, multi-factor authentication for access, and logging of access and usage.

4. Maintain records and permit audit. Agree to allow the prescribing authority reasonable access for compliance checks and maintain records sufficient to demonstrate use only for the prescribed purpose.

5. Train staff. Ensure personnel with access understand the statutory restriction and the consequences of misuse. Training should be documented and refreshed periodically.

6. Return or destroy data. At completion of the prescribed purpose, return or securely destroy the roll information as contractually required. Consider certification of destruction or an attestation as part of the close-out.

7. For public-health or tax purposes, ensure targeted approaches. For health programs (s 4) and tax administration (s 4AB), apply epidemiological or compliance-minimisation principles and ensure disclosures are technically necessary for the specific program or investigation.

For electoral administrators and printers (ballot paper compliance)

1. Adopt the exact heading required. Section 5A prescribes a precise heading , the heading in the Act, schedule 1 modified by inserting Declaration next to Ballot paper , so ensure printed materials match that instruction exactly.

For corporate and identity compliance

1. Use the exact prescribed-entity identifiers. Section 5 prescribes ActewAGL retail partnership with the listed corporate entities and ABNs. Use those corporate names and ABNs in any legal or administrative references.

Cross-cutting recommendations

1. Read cross-referenced statutes. Consult the Integrity Commission Act 2018, the Public Interest Disclosure Act 2012, the Taxation Administration Act 1999, and the Electoral Act 1992 to ensure the permitted purpose aligns with statutory definitions and that any compulsion powers or investigatory thresholds are met.

2. Seek legal advice on edge cases. If a proposed use sits on the border of the prescribed purpose (for example, a multi-step contact campaign that includes follow-up outside the original specified contact goal), obtain written legal advice and consider seeking a formal amendment to the Regulation if the use cannot be confined.

3. Monitor the amendment history. The Regulation has been amended repeatedly. Track subordinate instruments and the republished text to ensure the authorised purposes and prescribed authorities have not changed.

These steps implement the Regulation’s textual command: restrict authorisations to the prescribed purposes and ensure recipients use the data only for those purposes (ss 4-4AC; s 5; s 5A). Because the Regulation does not itself prescribe technical or procedural modalities, legal compliance will often entail layering the Regulation’s narrow statutory requirements onto broader corporate or public-sector information-governance frameworks.