Higher Education (HELP Program Commonwealth Officers) Instrument 2017

The central concept is the “HELP program Commonwealth officer,” which is defined in subsection 180-28(7) of HESA. The instrument does not reproduce that definition, but the note referring to it indicates that a HELP program Commonwealth officer is a person who falls within one of the categories set out in that subsection. The instrument then uses the power in subsection 180-28(8) to specify additional categories beyond those already in subsection (7). The net effect is that the persons listed in section 4 of the instrument are deemed to be HELP program Commonwealth officers for the purposes of the Act.

The second key concept is “Commonwealth officer,” which, as noted in the instrument, has the meaning given by subsection 179-15(2) of HESA. That definition is broad and covers officers and employees of the Commonwealth, including persons employed under the Public Service Act 1999, members of the Australian Defence Force, and persons performing duties for or on behalf of the Commonwealth. The instrument adds to this class by specifying that certain persons who may not be Commonwealth officers in the usual sense,such as University of Canberra employees,are treated as HELP program Commonwealth officers when engaged by the Commonwealth.

“Taxation officer” is defined separately in subsection 4(2) of the instrument. It adopts the meaning from section 355-30 of Schedule 1 to the Taxation Administration Act 1953, and also includes persons to whom Division 355 of that Schedule applies because of section 355-15. This is a broad definition that captures any Commonwealth officer who performs taxation functions and is thereby subject to the strict secrecy provisions of the taxation law. By extending this to HELP functions, the instrument ensures that the same level of secrecy applies to HELP information when handled by taxation officers.

The “functions set out in subsection 180-28(5)” are not listed in the source, but the instrument repeatedly references that subsection as the scope of activities for which the officers are designated. This linkage means that the instrument’s effect is limited: a designated officer cannot use HELP information for any purpose outside those functions. If the functions change by amendment to HESA, the instrument’s scope changes accordingly.

The inclusion of University of Canberra employees is notable because the University of Canberra Act 1989 (ACT) creates a body corporate that is not part of the Commonwealth. Yet the instrument treats those employees as HELP program Commonwealth officers “engaged by the Commonwealth.” This engagement likely occurs through a contract or arrangement between the Commonwealth and the University. The instrument does not create that engagement; it merely recognises it for statutory purposes. The practical effect is that University of Canberra staff performing HELP functions under such an engagement are subject to the same secrecy, integrity, and oversight obligations as Commonwealth officers, but only while acting within the scope of the engagement.

The concept of “compilation” is also relevant. The instrument is presented as Compilation No. 2, meaning it includes amendments up to the compilation date. The endnotes provide legislative history and amendment history, showing that section 4 was amended by the 2017 amendment (which repealed and substituted section 4) and again by the 2022 amendment. The original section 2 (repealed by LA s 48) and section 3 were amended. These concepts matter for legal certainty: a reader must check the compilation to know the current list of designated officers.

The instrument primarily affects five sets of persons: the Australian Government Actuary and employees of the Office of the Australian Government Actuary; Commonwealth officers engaged by the department for HELP functions; taxation officers performing HELP functions; and employees of the University of Canberra engaged by the Commonwealth for HELP functions. For each of these groups, the instrument imposes no new duties directly, but because they are designated as HELP program Commonwealth officers, they become subject to the obligations that attach to that status under HESA. This includes the secrecy provisions of Part 5-5 of HESA (such as section 179-30, which creates an offence for unauthorised disclosure of protected information). They also become bound by any applicable taxation secrecy obligations under Division 355 of Schedule 1 to the Taxation Administration Act 1953.

The Department of Education is affected as the administering body. It must maintain accurate records of which officers are designated and ensure that only authorised persons perform HELP functions. The department also bears the compliance cost of training and supervising these officers, particularly when they come from external bodies such as the University of Canberra.

The University of Canberra is directly affected. Its employees are not Commonwealth officers in the general sense, but the instrument makes them HELP program Commonwealth officers when engaged by the Commonwealth. This creates compliance obligations for the university: it must ensure that only employees who are properly engaged perform HELP functions, that those employees receive appropriate training on secrecy and privacy, and that the university itself does not create a risk of unauthorised disclosure. The university may also need to enter into agreements with the Commonwealth defining the scope of engagement. The compliance burden is not trivial; it includes managing conflicts of interest, handling records, and responding to potential audits or investigations.

The Australian Taxation Office is affected because its taxation officers who are already authorised under tax law to access protected taxpayer information may also access HELP information under this instrument. This expands the potential for cross-usage of information, but also heightens the risk that information will be used for purposes beyond those intended. The instrument does not permit taxation officers to use HELP information for general tax administration unless that falls within subsection 180-28(5).

HELP debtors and borrowers are indirectly affected. Their personal information may be accessed by a broader set of officers, including University of Canberra employees. This could improve administration efficiency,for example, when the university needs to verify a student’s HELP balance,but it also increases the number of points at which a data breach could occur. The instrument does not confer any new rights on debtors; they continue to rely on existing privacy protections under the Privacy Act 1988 and HESA.

Entities that contract with the Commonwealth to perform HELP functions may also be affected indirectly. If the instrument enables officers from the University of Canberra to perform functions that were previously outsourced to private contractors, the balance of public and private sector involvement could shift. However, the instrument does not itself authorise outsourcing; it only designates existing officers.

The instrument itself creates no duties or rights. It is a specification device. However, the effect of being designated as a HELP program Commonwealth officer is to bring the officer within the scope of duties that already exist under HESA. The most important duties are those relating to the use and disclosure of information. Under Part 5-5 of HESA, a HELP program Commonwealth officer must not disclose protected information except for the purposes of performing functions under the Act or as otherwise authorised by law. Breach of this duty is a criminal offence. The instrument does not modify these duties; it merely extends the class of persons to whom they apply.

A designated officer has the right to access the information necessary to perform the functions under subsection 180-28(5). This means they can view records in the HELP database, request information from higher education providers, and interact with debtors. They also have the right to rely on the fact that their designation is valid if they act in good faith. However, the instrument does not create any immunity or protection beyond what is already in HESA.

For University of Canberra employees, the key duty is that they must not use information obtained through their HELP functions for any purpose related to their university employment unless that falls within the scope of subsection 180-28(5). This creates a potential conflict: a University of Canberra employee may have dual roles (e.g., as a student administration officer and as a HELP program officer). The instrument does not provide guidance on how to manage that conflict; the employee must rely on general principles of Commonwealth Records Authority and privacy law. The employer bears the responsibility of ensuring appropriate separation of duties.

Taxation officers are already subject to stringent secrecy obligations under the Taxation Administration Act 1953. The instrument does not override those obligations; it adds HESA obligations. In cases where both regimes apply, the more restrictive secrecy provision likely prevails. This could create confusion, especially if the same information is used for both tax and HELP purposes. The officer must be careful to only use the information for the functions specified in subsection 180-28(5), even if tax law would permit a wider use.

The duties are enforceable by the Commonwealth Director of Public Prosecutions through criminal prosecution. There is no private right of action for a debtor whose information is mishandled; they must rely on complaints to the Office of the Australian Information Commissioner or the Commonwealth Ombudsman. The instrument thus expands the pool of potential defendants in a prosecution for unauthorised disclosure, but does not create new remedies for affected persons.

The instrument does not prescribe its own penalties. Instead, it triggers the application of existing penalty provisions in HESA and the Taxation Administration Act 1953. Under HESA, the primary enforcement mechanism is the offence provision in section 179-30 (or its equivalent in the Act as in force). That provision makes it an offence for a HELP program Commonwealth officer to disclose protected information obtained in the course of their duties unless the disclosure is for a permitted purpose. The maximum penalty is not stated in the instrument, but HESA typically provides for imprisonment of up to two years or a fine of 120 penalty units (currently $31,320) or both. These penalties apply on indictment.

For taxation officers who are HELP program Commonwealth officers, the secrecy provisions of Division 355 of Schedule 1 to the Taxation Administration Act 1953 also apply. Those provisions carry heavier penalties: up to two years imprisonment for unauthorised disclosure, and a fine of up to 120 penalty units for a record offence. There is also a civil penalty regime under the TAA for breaches of tax secrecy, with maximum penalties of up to 5,000 penalty units for a body corporate.

Enforcement is typically initiated by the Australian Federal Police or the Commonwealth Director of Public Prosecutions following a referral from the Department of Education or the Australian Taxation Office. The instrument does not create any new enforcement body. The practical enforcement challenge is that many disclosures are difficult to detect. The expansion of the pool of officers makes monitoring more costly. The instrument does not provide for auditing or reporting obligations; those are left to internal processes of the employing agency or entity.

For University of Canberra employees, enforcement may be complicated by the fact that they are not Commonwealth employees. If a breach occurs, the Commonwealth may still prosecute them under HESA because they are deemed HELP program Commonwealth officers. However, any disciplinary action or civil liability would be a matter for the University of Canberra under its own employment policies. This dual enforcement structure could result in gaps or inconsistencies.

Civil remedies are limited. A person whose information is mishandled may complain to the Privacy Commissioner under the Privacy Act 1988 if the handling involves a breach of the Australian Privacy Principles. But the instrument itself does not create a direct avenue for compensation; that would require proving a separate cause of action, such as negligence or breach of statutory duty. The practical deterrent effect depends on the perceived likelihood of prosecution and the size of penalties relative to the benefit of misuse.

The instrument operates solely under HESA, but its effect extends into several other legal domains. The most significant interaction is with the Taxation Administration Act 1953. By including taxation officers as HELP program Commonwealth officers, the instrument creates a bridge between the HELP secrecy regime and the tax secrecy regime. This means that information originally collected for tax purposes may be used for HELP administration, and vice versa. The interaction is not one-way: a tax officer who accesses HELP information is bound by both secrecy regimes, and the higher standard applies. This can complicate information handling protocols and increase the risk of a technical breach if an officer uses HELP information in a way that is permissible under tax law but not under HESA, or the reverse.

The instrument also interacts with the Privacy Act 1988. HELP program Commonwealth officers are not automatically exempt from the Privacy Act; they are “agencies” or “contracted service providers” for privacy purposes depending on their employment status. University of Canberra employees are not Commonwealth agencies, but when acting as HELP officers they may be held to the same standards under the Privacy Act through contractual terms or through HESA’s own privacy protections. The Australian Privacy Principles (APPs) apply to the handling of personal information by Commonwealth agencies. The Department of Education must ensure that University of Canberra employees comply with the APPs when handling HELP information, either by including binding contractual provisions or by the operation of HESA secrecy provisions that mirror APP obligations.

The University of Canberra Act 1989 (ACT) is relevant because it constitutes the University of Canberra as a body corporate. The instrument does not amend that Act; it simply recognises that employees of that body can be engaged by the Commonwealth. This engagement may need to comply with the University of Canberra’s own governance rules, but the instrument does not address any conflict if, for example, the University’s internal policies require disclosure of certain information that HESA prohibits. In practice, the Commonwealth engagement would likely override the university’s policies for the specific HELP functions.

The instrument may also interact with state and territory privacy laws. For instance, the ACT’s Health Records (Privacy and Access) Act 1997 or the Information Privacy Act 2014 may apply to University of Canberra employees handling health information of students. The instrument does not create an exemption from those laws; it simply adds Commonwealth obligations. This could result in overlapping compliance burdens for the university.

Finally, the instrument interacts with the administrative law framework. Decisions made by HELP program Commonwealth officers are reviewable under the Administrative Appeals Tribunal Act 1975 if they are decisions under HESA that are listed in the Act as reviewable. The instrument itself is a legislative instrument that could be challenged on administrative law grounds (e.g., ultra vires if subsection 180-28(8) does not authorise specifying a territory university’s employees). No such challenge is recorded in the litigation history, but the potential exists.

The instrument has a short but informative amendment history. The original instrument was registered on 31 May 2017 and commenced on 1 June 2017. It was made under subsection 180-28(8) of HESA. The original version likely contained sections 1, 3, and 4, with section 2 being a repeal provision that has since been repealed by operation of the Legislation Act 2003 (section 48 of that Act automatically repeals a legislative instrument’s provision about repeal after a certain period). The instrument was then amended by the Higher Education (HELP Program Commonwealth Officers) Amendment Instrument (No. 1) 2017, registered on 4 October 2017 and commencing 5 October 2017. That amendment repealed and substituted section 3 (Authority) and section 4 (the list of officers). The explanatory statement for that amendment is not in the source, but the fact that it substituted the entire list suggests that the original list may have been incomplete or required clarification. The amendment may have added the Australian Government Actuary or corrected the definition of taxation officer; the current form of section 4(2) defining “taxation officer” may have been introduced or refined at that point.

The most recent amendment was the Higher Education (HELP Program Commonwealth Officers) Amendment (Specifying University of Canberra Officers as HELP Program Commonwealth Officers) Instrument 2022, registered on 30 March 2022 and commencing 31 March 2022. This amendment added paragraph 4(1)(e) covering employees of the University of Canberra engaged by the Commonwealth. This amendment reflects a policy decision to involve a specific university in the administration of the HELP program, likely because the University of Canberra was selected to perform certain functions on behalf of the Commonwealth (e.g., managing HELP debt data for students of the university or for a broader cohort). The compilation date is 31 March 2022, meaning no further amendments have been made to date.

The amendment history is evidence of the instrument’s evolving scope. The original 2017 list was general; the 2017 no.1 amendment was a clean-up; and the 2022 amendment was a targeted expansion. This pattern suggests that the instrument will continue to be amended as the Commonwealth decides to engage additional entities or individuals. The endnotes show that section 4 was the provision most affected. The absence of any other provisions (like penalties, definitions, or application provisions) indicates the instrument is minimal by design. Its amendment history is therefore a direct map of who gets to be a HELP program Commonwealth officer and when.

No litigation history is recorded in the source. The instrument itself is a legislative instrument that has not been the subject of any published court decisions or tribunal cases, based on the absence of any reference in the text or endnotes. However, that does not mean the instrument is immune to legal challenge. A person affected by a decision of a HELP program Commonwealth officer could challenge the validity of the instrument on the ground that the officer was not validly specified. For example, a debtor might argue that a University of Canberra employee did not fall within the scope of subsection 180-28(8) because that subsection only allows specification of “Commonwealth officers” and the University of Canberra is not part of the Commonwealth. The instrument’s response is that it specifies employees of the University of Canberra who are engaged by the Commonwealth; but whether such engagement makes them “Commonwealth officers” for the purposes of subsection 180-28(8) is a question of statutory interpretation that has not been tested in court.

Another potential litigation ground is that the instrument expands the definition of HELP program Commonwealth officer beyond what Parliament intended in HESA. The instrument relies on the delegation of power in subsection 180-28(8), which states that “the Minister may, by legislative instrument, specify other persons to be HELP program Commonwealth officers.” The question is whether “other persons” can include employees of a state/territory university. The instrument does not provide its own legal advice on this point, and no court has ruled on it. The risk of litigation is low because the instrument benefits the Commonwealth and the University of Canberra, both of whom are unlikely to challenge it. Private parties would need standing and resources.

The instrument could also be relevant in litigation about information disclosure. If a HELP program Commonwealth officer discloses information in breach of HESA’s secrecy provisions, the validity of the instrument may be a collateral issue. The prosecution would need to prove that the officer was a HELP program Commonwealth officer at the time of the disclosure. If the instrument is invalid, the officer may not be subject to the HESA secrecy offence, though they would still be subject to other laws. No such case has been reported.

In summary, there is no known litigation involving this instrument. The instrument is too narrow to generate direct case law, but it could become relevant as a subordinate piece in larger disputes about administrative law, privacy, or criminal prosecution. The absence of litigation does not imply legal safety; it may simply reflect that the instrument has been in force for only a few years and the incentives to challenge it are low.

Several features of the instrument catch the unwary reader. First, the instrument does not reproduce the functions in subsection 180-28(5). A designated officer must know what those functions are, but the instrument provides no guidance. If the functions are amended (which could happen without notice to the officer), the officer’s authority may expand or contract without their knowledge. This creates a risk of inadvertent breach of secrecy because the officer may use information for a purpose that was originally permitted but is no longer covered.

Second, the definition of “taxation officer” in subsection 4(2) is broad. It includes not only officers who are taxation officers within the meaning of section 355-30 of Schedule 1 to the TAA, but also persons to whom Division 355 applies because of section 355-15. That latter category is a catch-all for any Commonwealth officer who is entrusted with tax information under certain circumstances. This means that a commonwealth officer who does not normally handle tax matters could be swept in if they are assigned to a HELP function that involves tax information. The officer might not realise they are now subject to the strict tax secrecy regime.

Third, the engagement of University of Canberra employees requires a formal engagement by the Commonwealth. The instrument does not define “engaged by the Commonwealth.” It could be a written contract, a delegation, or even an informal arrangement. Without a clear definition, there is a risk that a University of Canberra employee starts performing HELP functions without the proper engagement, making them not a HELP program Commonwealth officer and thus potentially exposing them to liability under HESA for unauthorised access to information. The instrument puts the onus on the Commonwealth and the University to formalise the engagement, but offers no checklist.

Fourth, the instrument does not include a sunset or review date. It remains in force until repealed. The 2022 amendment added University of Canberra employees, but there is no mechanism to remove them if the arrangement ends. This could lead to a situation where former University of Canberra employees are still listed in the instrument but no longer engaged, creating confusion about their status. The endnote about self-repealing provisions does not apply to this instrument (no self-repeal noted). So the list in section 4 is cumulative; amendments only add, never subtract, unless a later amendment expressly removes a category. The 2017 no.1 amendment did subtract and replace the entire section, so removal is possible, but not automatic.

Fifth, the instrument’s interaction with the Privacy Act 1988 is not addressed. A University of Canberra employee who is a HELP program Commonwealth officer is not a Commonwealth agency, but they may be a contracted service provider. If they misuse information, the Privacy Commissioner may have jurisdiction, but the employee might argue they were acting as a Commonwealth officer and are exempt from the Privacy Act. This ambiguity could lead to jurisdictional disputes.

Finally, the instrument imposes no record-keeping or reporting obligations. The Department of Education does not have to report annually on how many officers are designated or how often they exercise functions. This lack of transparency means that the compliance and oversight burden is entirely internal, and there is no public accountability for how many people have access to sensitive information.

Compliance obligations under this instrument are indirect but real. For the Department of Education, the first step is to ensure that any person who performs functions under subsection 180-28(5) falls within one of the listed categories. This means the department must maintain an up-to-date register of its officers who are designated under paragraphs (4)(1)(a) through (e). For taxation officers and Australian Government Actuary staff, the department may rely on existing personnel records. For University of Canberra employees, the department must have a formal engagement arrangement in place, and should provide the university with a list of employees authorised to act as HELP program Commonwealth officers. The department should also require the University of Canberra to certify that those employees have received training on secrecy and privacy obligations.

For the University of Canberra, compliance requires a clear internal policy that defines which employees are engaged by the Commonwealth and for what specific purposes. The university should not allow any employee to access HELP information unless the employee has signed a confidentiality agreement and has completed training modules on HESA secrecy provisions. The university must also ensure that these employees do not use HELP information for unrelated university business, such as disciplinary proceedings or marketing. This may require physical or digital separation of HELP data from other university records. The university should also have a data breach response plan that covers HELP information, and must notify the Department of Education of any suspected breach.

For individual officers designated under the instrument, compliance is about understanding the scope of their authority. They should only perform functions that they are expressly authorised to perform, and only in the manner prescribed by HESA. They must not disclose information to anyone outside the HELP program except as permitted by law. This includes not sharing information with colleagues within the same organisation who are not HELP program Commonwealth officers. They should also be aware that they are subject to both HESA and, for taxation officers, TAA secrecy provisions. Where the two regimes diverge, they must apply the stricter rule.

The Department of Education should also provide periodic audits to ensure that only designated officers are accessing HELP data. The instrument does not require such audits, but they are a practical means of reducing the risk of liability. The department should also ensure that the instrument is kept up to date: if a category of officers becomes obsolete (e.g., if the Australian Government Actuary is abolished), a new amendment should be made to remove them. Similarly, if the University of Canberra engagement ends, the department should seek a further amendment to delete paragraph (4)(1)(e). As of the current compilation, no such removal has occurred.

Finally, compliance includes monitoring changes to the parent Act. If subsection 180-28(5) is amended to add or remove functions, the scope of the designation changes automatically without any amendment to this instrument. Every designated officer must be informed of those changes. The Department of Education should maintain a communication process to notify officers of any changes to the scope of their functions. Without such a process, officers may inadvertently fall outside their authority and risk committing an offence. This is a hidden compliance cost that the instrument’s minimal drafting does not address.