Human Services (Complex Needs) Act 2009

The Act’s architecture rests on a set of interlocking legal concepts: eligibility, assessment, care plan, care plan co‑ordinator, authorised information sharing, and confidentiality limits. Each concept has statutory content and practical implications for service providers, administrators and the person concerned.

Eligibility (s 7) is a gatekeeping concept. It is multi‑criteria: age (at least 16), at least two clinical categories (mental illness, acquired brain injury, intellectual impairment, severe substance dependence), an element of violent or dangerous behaviour that has caused or is likely to cause serious harm (s 7(c)), and the need for intensive supervision and support with expected benefit from coordinated services (s 7(d)). The text uses language such as “appears to satisfy” (s 7(b)) and “appears to be an eligible person” in the notice provision (s 9(a)), which embeds a preliminary assessment threshold rather than an exact diagnostic determination. The Secretary makes a determination whether a person is eligible (s 8), but may not determine a person eligible if the person refuses to be considered (s 8(2)).

Assessment and contracting are operational levers. The Secretary may contract external persons or organisations to assess eligible persons and develop care plans, or arrange for such assessment and development (s 11). The Secretary may consult expert advisers for eligibility determination and care plan development and monitoring (s 5). Delegation of powers is permitted to specified classes of employed persons except for the power of delegation itself (s 6).

Care plans (Part 2 Div 3) are the core instrument. A care plan is developed and approved under s 12. Care plans may list recommended care, treatment, support and housing that take account of the person’s best interests (s 12(3)(a)). They must specify a duration not exceeding 12 months on initial approval (s 12(3)(b)), though extensions are permitted with a total maximum duration of 36 months (s 18(2)-(3)). The Secretary may approve a plan with or without modification (s 12(4)), and must give the person a copy of the plan and notify the person in writing within 14 days of approval (s 15).

Care plan development requires consultation with the person and, where appropriate and agreed by the person, family and carers (s 13(a)). It requires consultation with current service providers across a list of service types, including offender services (s 13(b)), and a comprehensive assessment of needs (s 13(c)), including consideration of relevant personal and health information (s 13(d)). The Secretary must ensure these steps are undertaken either directly or through an engaged service provider.

Care plan co‑ordinator is the designated implementation agent (s 16). The Secretary must appoint a coordinator when approving a plan (s 16(1)). The coordinator monitors implementation, coordinates services, and reports to the Secretary when requested (s 16(2)-(3)). Coordinators and service providers are authorised to seek and disclose personal and health information for specified purposes (ss 14, 16(3)-(5), 17). Authorised disclosure is framed by the functional test that the disclosure be in the best interests of the person and would assist the recipient to give effect to the care plan (s 14(2); s 17(1)-(2)).

Confidentiality and statutory carve‑outs are central. A broad confidentiality duty covers relevant persons, defined expansively to include the Secretary, departmental contractors, service providers, and persons employed by or working for bodies involved in the care planning process (s 23(1)-(2)). Unauthorised disclosure attracts a penalty of 60 penalty units (s 23(2)). Exceptions to the confidentiality rule include disclosures to courts in criminal legal proceedings, pursuant to court orders under other Acts, disclosures with the Minister’s consent in the public interest and disclosures expressly authorised or required by this Act or other Acts (s 23(3)).

Interaction with other laws is expressly preserved. Section 24 states that nothing in the Act affects the operation of the Privacy and Data Protection Act 2014 or the Health Records Act 2001 or any obligation imposed by or under those Acts, signalling that privacy and data protection obligations remain applicable despite the Act’s authorisations for disclosure in particular circumstances.

Administrative flexibility and discretion are built into the statutory design. The Secretary has broad powers to determine eligibility (s 8), approve plans with modification (s 12(4)), appoint coordinators (s 16), vary or terminate plans (s 18(1)), and contract out assessments and plan development (s 11). The Act does not set detailed standards for what constitutes “best interests,” “comprehensive assessment,” or “intensive supervision and support,” leaving those standards to administrative practice, departmental policy and the professional judgment of providers, within the statutory constraints.

Primary subjects

• Persons who meet the eligibility criteria in section 7. That is, individuals aged 16 or over who appear to satisfy two or more specified clinical criteria (mental illness, acquired brain injury, intellectual impairment, severe substance dependence), who have exhibited or are exhibiting violent or dangerous behaviour that caused or is likely to cause serious harm, and who require intensive supervision and stand to benefit from coordinated services (s 7). These persons may be approached for assessment under the Act and may be the subject of care plans.

• Service providers who are engaged to assess eligible persons, develop care plans, or who are identified in an approved care plan. The Act contemplates contracting private or non‑governmental organisations to perform assessment and plan development (s 11). Service providers identified in a care plan are specifically authorised to exchange personal and health information among themselves under the Act if certain tests are met (s 17). The Act therefore imposes obligations and authorises actions that directly affect both public and private service providers involved in welfare, health, mental health, disability, drug and alcohol treatment, offender services and housing and support services (see s 13(b), s 14(2)(d)).

• The Department of Human Services and the Secretary. The Secretary carries central decision‑making authority, including determinations of eligibility (s 8), approval and variation of care plans (ss 12, 18), appointment of care plan co‑ordinators (s 16), contracting for services (s 11) and consultation with expert advisers (s 5). These administrative functions place implementation responsibilities and discretion within the Department.

• Care plan co‑ordinators appointed under s 16. Co‑ordinators are statutory functionaries whose duties include monitoring implementation and coordinating services (s 16(2)). They are authorised to seek personal and health information from the Secretary and service providers (s 16(4)), and are answerable to the Secretary for reporting when requested (s 16(2)(c)).

Indirectly affected actors

• Courts, the Tribunal and the Public Advocate. These actors are present as potential information sources or recipients. Section 14(2) authorises disclosure of personal or health information by the Public Advocate and the Tribunal, and by other persons or organisations providing specified services, in response to requests for information during care plan development. Additionally, the Tribunal is defined in the Act with reference to the Mental Health and Wellbeing Act 2022 (s 3), reflecting interconnection with mental health review mechanisms.

• Families, guardians, attorneys and carers. The Act requires consultation where appropriate and with the person’s agreement (s 13(a)), and mandates service of notices and care plans to parents or guardians for persons under 18 and to guardians or attorneys for adults in specified circumstances (s 21). These parties are recipients of documents and may participate in meetings as supporters or advocates (s 22).

• Offender services and criminal justice agencies. The definition of “offender services” in s 3 includes providers of correctional services under the Corrections Act 1986, Victoria Police in relation to persons suspected of or charged with offences, and courts and tribunals relating to persons charged with or convicted of offences. Those bodies are both potential sources of information and potential service providers within care plans (s 13(b), s 14(2)(d)).

Who bears costs and compliance burdens

• The Department (via the Secretary) bears the administrative cost burden of determining eligibility, contracting for assessments and plan development, approving plans and appointing coordinators. The Act authorises these actions (ss 8, 11, 12, 16) but does not appropriate funds directly; funding and procurement decisions will sit with government budget processes and contractual arrangements.

• Contracted service providers bear operational and compliance burdens: conducting comprehensive assessments (s 13(c)), consulting with current providers (s 13(b)), preparing care plans in line with the Secretary’s requirements (s 11), sharing and using personal and health information in accordance with the Act’s authorisations (ss 14, 17), and adhering to confidentiality obligations (s 23). Service providers need to reconcile the Act’s permissions with obligations under the Privacy and Data Protection Act 2014 and the Health Records Act 2001 (s 24).

• Individuals may bear indirect costs in the form of potential loss of control over the sharing of their personal and health information with multiple agencies if they consent or if sharing is authorised under the Act. The Act provides procedural protections: written notice before consideration for eligibility, notification if a care plan is approved, and the ability to refuse assessment or a care plan (ss 9, 10, 15(c), 19). Where a person refuses to be considered, the Secretary must not determine them eligible (s 8(2)).

Concentrated beneficiaries and decision makers

• The Department and its contracted providers are decision makers and operational beneficiaries in the sense that the Act channels assessments, plan development and coordination work to them (ss 5, 6, 11, 12, 16). The Act also concentrates discretion in the Secretary to determine eligibility, approve and vary plans, which centralises administrative control.

The Act does not create new criminal liabilities beyond the confidentiality penalty in s 23(2). There are no express rights of appeal, merits review or compensation in the statutory text for persons adversely affected by a Secretary’s determination or by inclusion in a care plan, although other laws may provide review avenues outside the Act. The Tribunal and courts appear in the Act as information actors and as preserved bodies in relation to other legislation (see s 3 definition of Tribunal and s 14(2)(c)).

Statutory duties imposed on the Secretary and public administration

• Determine eligibility subject to requirements. The Secretary may determine whether a person is an eligible person or not (s 8(1)), but must not determine someone eligible if the person has refused to be considered (s 8(2)). Before making the determination the Secretary must notify the person in writing of the consideration and related matters (s 9).

• Cause development and approve care plans. If the Secretary determines that a person is eligible, the Secretary must cause a care plan to be developed (s 12(1)). The Secretary may engage service providers to develop plans (s 12(2)) and may approve a care plan with or without modification (s 12(4)). The Secretary must notify the person and give the person a copy of the care plan within 14 days of approval (s 15).

• Appoint a care plan co‑ordinator. Upon approving a care plan the Secretary must appoint a co‑ordinator in relation to that plan (s 16(1)). The Secretary may seek personal or health information from the co‑ordinator and service providers for monitoring and review (s 16(3)).

• Enter into contracts for assessment and care planning. The Secretary may contract with persons or organisations to assess eligible persons and develop care plans (s 11).

• Vary or terminate plans. The Secretary may vary or terminate a care plan if of the opinion it is appropriate to do so (s 18(1)), and must notify the person and service providers if the plan is terminated (s 18(4)). The Secretary may extend the duration of a plan but total duration cannot exceed 36 months (s 18(2)-(3)).

Duties and obligations on service providers and care plan co‑ordinators

• Develop and implement plans in accordance with instructions. Service providers engaged by the Secretary must undertake assessments, consult as required, consider relevant personal and health information and develop care plans that may specify care, treatment, support and housing (ss 11, 12, 13). The Secretary may cause plans to be developed by contracted providers (s 11).

• Share information within care plans when in the person's best interests. Service providers identified in a care plan may disclose personal or health information to other service providers identified in the plan if satisfied that the disclosure is in the best interests of the person and would assist in giving effect to the plan (s 17(1)). They may also use information so obtained if use meets the same tests (s 17(2)). Care plan co‑ordinators are authorised to seek information from the Secretary and from service providers (s 16(4)) and to provide reports to the Secretary (s 16(2)(c)).

• Comply with confidentiality obligations. Relevant persons must not disclose personal or health information acquired through their role, except to the extent necessary to carry out functions under this Act or another Act, or except as otherwise authorised (s 23(2)-(3)). A breach attracts a statutory penalty (s 23(2), 60 penalty units).

Rights and procedural protections for persons

• Right to prior written notice and explanation. Before the Secretary considers whether a person is eligible, the person must be notified in writing of the Secretary’s intention to consider eligibility, the possible development of a care plan should they be determined eligible, the types of information the Secretary and service providers may seek, and that the person may refuse to be considered or refuse a care plan (s 9). The Secretary must notify the person in writing of the determination (s 10) and must provide a copy of any approved care plan within 14 days (s 15).

• Right to refuse assessment or a care plan. A person may at any time in writing or orally refuse to be considered for eligibility or refuse to be the subject of a care plan (s 19(1)). Refusals must be made to the Secretary for eligibility refusals, and to the Secretary or the care plan co‑ordinator for refusals to be the subject of a plan (s 19(2)-(3)). The person or organisation to whom a purported refusal is made must determine, in professional judgment, whether the communication constitutes a refusal for the purposes of the Act (s 19(4)). The Secretary cannot determine a person eligible if they have refused to be considered (s 8(2)).

• Right to support and assistance. The Act permits eligible persons or those being considered to have support persons present or to receive advice in relation to matters under the Act (s 22).

Statutory standards and procedural details

• Comprehensibility and accessibility of notifications. The Secretary must endeavour to ensure notifications are comprehensible to the person and that content is explained orally (s 20(1)). If a person appears incapable of reading and understanding information, the Secretary must use reasonable endeavours to convey the information in the language, mode or terms most likely to be understood (s 20(2)).

• Consultation requirements during plan development. The Secretary or engaged service provider must consult the person and, where appropriate and agreed, their family and carers (s 13(a)), consult persons and organisations currently providing relevant services (s 13(b)), carry out a comprehensive assessment of needs (s 13(c)), and obtain and consider relevant personal and health information (s 13(d)).

Information rights and limits

• Authorised sources of information. In developing a care plan the Secretary or contracted service provider may seek personal or health information from any person or organisation (s 14(1)). The statute identifies authorised disclosers in response to such requests, including the Secretary, the Public Advocate, the Tribunal, and organisations that provide or have provided relevant services to the eligible person (s 14(2)).

• Preservation of other statutory obligations. Section 24 preserves the operation of the Privacy and Data Protection Act 2014 and the Health Records Act 2001, meaning obligations under those statutes remain in force despite the Act’s authorisations. This creates parallel duties that parties must reconcile when sharing personal or health information.

Remedial and enforcement mechanisms

• Confidentiality breach penalty. The Act prescribes a penalty for unauthorised disclosure by relevant persons (s 23(2), 60 penalty units). The Act does not set out an internal merits review mechanism, nor does it expressly create civil causes of action in relation to determinations under the Act. Administrative decisions to approve, vary or terminate care plans rest with the Secretary (s 12(4), s 18(1)).

Statutory penalties and enforcement provisions are narrowly focused in the Act. The primary statutory sanction is contained in the confidentiality provision, which makes it an offence for a relevant person to disclose personal or health information acquired by reason of their role under the Act except to the extent necessary to carry out functions under this Act or another Act or regulations, or as otherwise authorised by the Act (s 23(2)). The specified penalty for contravening s 23(2) is 60 penalty units. The Act does not specify additional monetary penalties or criminal offences tied directly to the conduct of care plan implementation, failures to comply with Secretary directions, or breaches of duties by contracted service providers beyond the confidentiality provision.

Enforcement agents and mechanisms

• Prosecution or regulatory enforcement is not described in the Act beyond the imposition of the penalty unit for unauthorised disclosure. The Act does not specify which enforcement body is responsible for commencing proceedings for breaches of s 23(2). In practice, prosecution for offences against Victorian Acts is normally the responsibility of the Director of Public Prosecutions or a designated prosecution authority, but the Act does not identify an enforcement agency.

• Administrative enforcement is delivered through the Secretary’s powers. The Secretary has broad operational control: determining eligibility (s 8), approving care plans and making variations (s 12(4), s 18(1)), appointing co‑ordinators (s 16(1)), and contracting service providers for assessments and plan development (s 11). These powers enable the Secretary to shape implementation through procurement, contract terms and administrative oversight.

Civil remedies and review

• The Act does not create explicit statutory rights of review or internal merits appeal against the Secretary’s decisions to determine eligibility, approve or vary a care plan, or to appoint a care plan co‑ordinator. The statutory silence on review mechanisms means affected persons may need to rely on general administrative law remedies available under Victorian common law, the Administrative Law Act where applicable, or judicial review in the Supreme Court or other judicial mechanisms outside the Act for errors of law, procedural unfairness or improper exercise of power. The Act itself contains no express appeal path.

Information sharing and authorised disclosure as an enforcement mechanism

• The Act authorises disclosure of personal and health information to specified actors for the purpose of developing and implementing care plans, subject to “best interests” and assistance tests (ss 14(1)-(2), 15(b), 17(1)-(2), 16(3)-(5)). Those authorisations create a legal basis for providers to exchange information necessary to implement plans. They also create potential compliance obligations under privacy law that may be enforced through regulatory mechanisms under the Privacy and Data Protection Act 2014 and the Health Complaints Commissioner for health records issues.

Ministerial discretion and public interest exception

• Section 23(3)(c) permits disclosure with the Minister’s consent, in accordance with conditions specified by the Minister, if the Minister is of the opinion that it is in the public interest. This provides an explicit statutory channel for disclosure beyond the other enumerated exceptions, but it is qualified by the Minister’s opinion and by any conditions the Minister prescribes. Use of this exception should be treated as an exceptional route rather than the default.

Practical enforcement risks and gaps

• The Act concentrates operational compliance control in administrative processes and contractual arrangements rather than criminalisation or broad enforcement regimes. The confidentiality penalty is significant but narrowly scoped, and the Act leaves out detailed enforcement architecture for other potential breaches, such as failing to carry out comprehensive assessments, failing to consult, or failing to provide copies of plans within the 14 day period (s 15). Where disputes arise over eligibility determinations or the content of care plans, statutory silence on appeal or review mechanisms points to reliance on general administrative law remedies, which may be slower and more resource intensive.

• Service providers and the Department must also manage overlapping statutory frameworks. Section 24 expressly preserves the operation of the Privacy and Data Protection Act 2014 and the Health Records Act 2001. Enforcement under those Acts remains available for privacy breaches, and the Act’s authorisations for disclosure must be reconciled with obligations and complaint mechanisms under those regimes. The Act’s interaction with the Family Violence Protection Act 2008 information sharing arrangements is noted in the Act’s explanatory material and s 23 note, leading to a multi‑layered compliance environment.

Express preservation of privacy and health records regimes

• Section 24 explicitly provides that nothing in the Act affects the operation of the Privacy and Data Protection Act 2014 or the Health Records Act 2001 or any obligation under those Acts. In practical terms this means that although the Act authorises certain disclosures and uses of personal and health information for the purposes of developing and implementing care plans (ss 14, 16, 17), those actions must still be carried out in a manner consistent with privacy and health records law. Service providers and the Department must therefore treat the Act’s information sharing authorisations as a statutory basis for information exchange that exists alongside and must be reconciled with privacy obligations, consent requirements and complaint mechanisms contained in those other statutes.

Authorised disclosure provisions and their statutory sources

• Section 14(2) identifies authorised disclosers who may respond to requests for personal or health information in relation to care plan development, including the Public Advocate and the Tribunal, and any person or organisation that provides or has provided specified services. Section 17 authorises service providers identified in a care plan to disclose and to use personal or health information about the person to another service provider identified in the plan where the disclosure or use is in the best interests of the person and would assist in giving effect to the plan. These provisions situate lawful inter‑agency information exchange within the care plan context.

Interaction with mental health law

• The Act references, and has been amended to align with, mental health law developments. The definition of “mental illness” in s 7(b)(i) is explicitly tied to the Mental Health and Wellbeing Act 2022, and the Act defines “Tribunal” to mean the Mental Health Tribunal established under that Act (s 3). Through these cross‑references the Act connects with mental health assessment, treatment and review frameworks. The Act does not displace mental health law mechanisms such as involuntary treatment orders; rather, it operates in parallel for the purpose of coordinating services for persons with multiple and complex needs.

Interaction with offender, police and justice processes

• The Act’s definition of “offender services” includes correctional service providers, Victoria Police in relation to persons suspected of or charged with offences, and courts and tribunals in relation to charged or convicted persons (s 3). The Act permits obtaining personal and health information from these actors for care plan development (s 14(2)(d)) and contemplates their role in providing services consulted during plan development (s 13(b)). However, the Act does not alter criminal law processes or the powers of police, prosecutors or courts. It instead provides a statutory basis to involve justice system actors in planning and information exchange where appropriate and lawful.

Interaction with guardianship and substitute decision makers

• Section 21 requires that notices or care plans be given to parents or guardians in certain circumstances: for persons under 18 with parents or guardians, and for adults where a guardian has been appointed under the Guardianship and Administration Act 2019 or where an attorney responsible for personal matters under an enduring power of attorney has been appointed under the Powers of Attorney Act 2014 (s 21). The Act’s amendments reflect alignment with those statutes. Those guardians and attorneys are recipients of notices and may be engaged in consultations or decisions where the person has authorised or where statutory duties require it.

Family Violence Protection Act information sharing

• The Act contains a note in s 23 referring readers to Part 5A of the Family Violence Protection Act 2008 in relation to information sharing obligations of prescribed information sharing entities under that Act. That note signals potential overlap where family violence information sharing regimes may operate and cautions practitioners to consider the separate statutory rules that apply in family violence contexts. Practitioners must therefore consider whether an entity is an information sharing entity under the Family Violence Protection Act and whether the information sharing gateways in that Act apply.

Ministerial public interest exception

• The confidentiality regime in s 23(3)(c) permits disclosure with the Minister’s consent, in accordance with conditions specified by the Minister, if the Minister considers it is in the public interest. This provides a statutory pathway for disclosure outside the Act’s other enumerated exceptions, but it is conditioned on the Minister’s exercise of opinion and imposition of conditions.

Tension points and practical reconciliation

• The Act expressly authorises certain disclosures for care planning (ss 14, 17) while s 24 preserves privacy law. In practical terms agencies and service providers must assess whether the specifics of a proposed disclosure are authorised by the Act and whether any additional obligations or constraints under the Privacy and Data Protection Act 2014, the Health Records Act 2001, or the Family Violence Protection Act 2008 apply. This creates an implementation need to document legal bases, obtain consent where appropriate, and ensure that disclosures are limited to what is necessary to achieve the care plan objectives.

Regulatory and enforcement overlap

• Because the Act leaves privacy and health records obligations intact, privacy regulators, health complaints bodies and civil litigation may provide enforcement routes for conduct in the care planning context. The Act’s own confidentiality penalty is an additional statutory sanction, but not the exclusive regulatory or legal consequence for mishandling personal or health information.

The Act as printed incorporates a series of amendments that modify definitions, cross‑references and certain operational provisions. The Act’s endnotes and Table of Amendments in the published version record the following legislative instruments and their relevant entries:

• Health and Human Services Legislation Amendment Act 2010, No. 29/2010 (Assent 8 June 2010). The table notes that s 60 of that Act amended the definition of Department in s 3.

• Severe Substance Dependence Treatment Act 2010, No. 43/2010 (Assent 10 August 2010). Section 47 substituted s 7(b)(iv) to make “severe substance dependence” a criterion in s 7(b)(iv) (see the table entry and the note that s 7(b)(iv) was substituted by No. 43/2010 s. 47). That change aligns the eligibility test with the statutory definition in the Severe Substance Dependence Treatment Act 2010.

• Disability Amendment Act 2012, No. 22/2012 (Assent 8 May 2012). The table records amendments, including an amendment to the Department definition noted at s 85.

• Mental Health Act 2014, No. 26/2014 (Assent 8 April 2014). The table records that s 455 (Schedule item 14) inserted or amended the definition of Tribunal and made consequential changes such as substituting s 3 references and s 14(2)(c). Specifically, the Act’s text shows that the S. 3 def. of Mental Health Review Board was repealed and “Tribunal” was inserted as the Mental Health Tribunal under the Mental Health and Wellbeing Act 2022 by later amendment entries.

• Victoria Police Amendment (Consequential and Other Matters) Act 2014, No. 37/2014 (Assent 3 June 2014). The table records that s 10 (Schedule item 82) amended the definition of offender services in s 3.

• Powers of Attorney Act 2014, No. 57/2014 (Assent 26 August 2014). The table records that s 154 amended s 21(b) in relation to attorneys and guardians.

• Privacy and Data Protection Act 2014, No. 60/2014 (Assent 2 September 2014). The table records that s 140 (Schedule 3 item 27) amended s 3 definition of personal information and other cross‑references.

• Statute Law Revision Act 2015, No. 21/2015 (Assent 16 June 2015). The table lists s 3 (Schedule 1 item 25) as an amendment entry.

• Family Violence Protection Amendment (Information Sharing) Act 2017, No. 23/2017 (Assent 14 June 2017). This Act inserted the Note to s 23 and is recorded in the table as having commenced in part on 26 February 2018, reflecting the addition regarding Part 5A of the Family Violence Protection Act 2008.

• Guardianship and Administration Act 2019, No. 13/2019 (Assent 4 June 2019). The table shows s 221 (Schedule 1 item 22) amended the Public Advocate and guardianship cross‑references, with a commencement date of 1 March 2020.

• Mental Health and Wellbeing Act 2022, No. 39/2022 (Assent 6 September 2022). The table records that ss 838 and 839 commenced on 1 September 2023 and affected s 3 definitions and s 7(b)(i) substitution aligning “mental illness” with the Mental Health and Wellbeing Act 2022.

Textual notes in the Act show where specific amendments occurred. For example:

• S. 3 definitions contain multiple amendment footnotes showing the Department, Public Advocate, Tribunal, Secretary and personal information definitions were updated by the listed Acts. The textual footnotes record the instrument and section that effected the change, for instance S. 3 def. of Department amended by Nos 29/2010 s. 60, 22/2012 s. 85.

• Section 7(b)(i) was substituted by No. 26/2014 s. 455 (Schedule item 14.3), as noted in the marginal notes.

• Section 14(2)(c) was substituted by No. 26/2014 s. 455 (Schedule item 14.4), as the marginal note records.

• Section 21(b) was substituted by No. 57/2014 s. 154, reflecting changes to notices to guardians and attorneys under the new Powers of Attorney Act.

Commencement history

• The Act was assented to on 12 May 2009 and came into operation on 31 May 2009 under s 2(2), as recorded in the endnotes. Some amendment provisions have specific later commencement dates recorded in the Table of Amendments, for example the Mental Health and Wellbeing Act 2022 amendments to this Act commenced on 1 September 2023 for the relevant items (see Table of Amendments entries).

Transitional provisions and repeal of earlier Act

• Part 4 records repeal of the Human Services (Complex Needs) Act 2003 (s 25) and transitional provisions that preserve assessments and care plans in process at the date of repeal (s 26). Section 26(2) deems care plans accepted under the previous Act and in force immediately before repeal to be care plans approved by the Secretary under s 12 of this Act, ensuring continuity.

Practical implication of amendment history

• The amendment history shows iterative alignment with other statutory regimes: mental health law, guardianship and powers of attorney, privacy and data protection, family violence information sharing, and offender services. Practitioners should consult the consolidated Act version and the specific amending instruments for the precise text of definitions and cross‑references, particularly where eligibility and information sharing depend on statutory definitions (for example, the definition of “mental illness” now points to the Mental Health and Wellbeing Act 2022).

The Act’s endnotes and the published version include an “Explanatory details” note which records “No entries at date of publication” for explanatory details and the Table of Amendments. The published materials supplied with the statute do not contain or cite any judicial decisions interpreting the Human Services (Complex Needs) Act 2009. The endnotes do not list cases.

From the statute text provided, there is no record of litigation history or reported judicial interpretation of specific provisions of this Act. The Act does not itself contain a schedule of case law or reported decisions. Practitioners should therefore treat the statute as largely untested in reported judicial proceedings on the printed record and should check commercial legal databases, court registries or more recent legislative materials for any judicial consideration post‑dating the Act’s consolidation to 1 September 2023.

Given the absence of cases in the provided materials, the main sources for interpreting obligations, rights and standards under the Act will be the statutory text, departmental policy and procedural guidelines, contract terms used by the Secretary for procurement of assessments and care planning services, relevant privacy law guidance from the Office of the Victorian Information Commissioner or equivalent bodies, and adjacent regimes such as the Mental Health and Wellbeing Act 2022 and the Family Violence Protection Act 2008. Where disputes arise about the exercise of administrative power by the Secretary, the appropriate remedies may include judicial review for errors of law, procedural unfairness or unreasonable exercise of power under general administrative law principles, though such outcomes would need to be tested in the courts.

If litigation history is material to a particular matter, practitioners should conduct a discrete case law search as the consolidated statute and table of amendments do not purport to include judicial decisions.

Several practical and legal pitfalls arise from the Act’s text that parties implementing or affected by the scheme should watch for.

Consent and the refusal mechanism

• A person may refuse to be considered for eligibility and may refuse to be the subject of a care plan at any time (s 19(1)). The Secretary must not determine that a person is an eligible person if the person refuses to be considered for eligibility (s 8(2)). However, the Act requires the person or organisation receiving a purported refusal to determine whether, in professional judgment, it constitutes a refusal for the purposes of the Act (s 19(4)). This introduces an element of professional judgment which may create uncertainty for both practitioners and persons refusing; a refusal is not an absolute self‑executing bar unless the receiving entity accepts it as such. Records should be kept documenting how the professional judgment was reached.

“Appears to” language and evidentiary threshold

• The test in s 7(b) uses “appears to satisfy” and the notice obligation in s 9(a) uses “appears to be an eligible person,” which suggests the Secretary can operate on preliminary evidence and professional assessments rather than requiring conclusive diagnosis or proof. That flexibility aids early intervention but raises practical questions about documentation standards, reversibility of decisions and the basis for challenging a determination. It also means threshold decisions may be made on the balance of probabilities or professional judgment rather than judicially definitional standards.

Best interests test is professional and vague

• Sections authorising disclosure and use of personal and health information repeatedly use a two‑part test: the disclosure or use must be in the best interests of the person and would assist the recipient in giving effect to the care plan (see ss 14(2), 15(b), 17(1)-(2)). The statute provides no further definition of “best interests” or criteria to weigh competing interests such as confidentiality, public safety and the person’s autonomy. This leaves significant scope for professional judgment and agency policy to fill the gaps.

Duty to reconcile with other privacy law

• Although information sharing is authorised for care plan purposes, section 24 preserves the operation of the Privacy and Data Protection Act 2014 and the Health Records Act 2001. Practitioners may face conflicting obligations: the Act authorises certain disclosures but privacy statutes impose standards for lawful handling of information. There is no textual hierarchy provided; implementers must therefore document legal bases, consent processes and necessity assessments. Failure to satisfy privacy law requirements could lead to complaints or regulatory action even where the Act is invoked as the authorising statutory basis.

Confidentiality penalty narrow but significant

• The confidentiality prohibition in s 23(2) carries a penalty of 60 penalty units for disclosure beyond the permissible scope. The Act’s exceptions are narrow and include ministerial consent for public interest disclosure (s 23(3)(c)). Parties must be careful in managing ad hoc disclosures, and should seek legal advice before disclosing where there is any doubt.

No express appeals or internal review

• The Act does not provide an express statutory right of appeal or internal merits review against the Secretary’s determinations on eligibility, care plan approval with or without modification, variation, termination, or appointment of a care plan co‑ordinator. Affected persons must therefore consider judicial review and administrative law remedies where appropriate, which may be more resource intensive and slower than a statutory review route.

Contracting and Secretary’s power to modify plans

• The Secretary may engage providers to develop plans (s 11) and may approve plans with or without modification (s 12(4)). This creates a risk that contracted providers expend effort and cost developing plans that are substantially altered on approval, unless contract terms allocate responsibility for such costs and set procedural expectations about the Secretary’s role. Contract drafting should therefore address approval processes and compensation for work that is modified or rejected.

Overlap with family violence and other information sharing regimes

• The Act’s note in s 23 references Part 5A of the Family Violence Protection Act 2008. In cases where family violence information is implicated, different statutory gateways and protections apply. Practitioners must identify whether organisations are information sharing entities under that Act and apply the separate legal tests for disclosure. Failure to properly apply overlapping regimes risks unlawful disclosure or failure to disclose when necessary.

Time limits on plans require active review

• Care plans must initially specify a duration of not more than 12 months (s 12(3)(b)), and total duration may not exceed 36 months (s 18(3)). Implementers must maintain active case management to ensure timely reviews and lawful extensions. Failure to monitor time limits may leave service provision without an authorised care plan beyond permitted durations, with implications for lawful information sharing and coordination.

Scope of authorised disclosers during plan development

• Section 14(2) lists who may disclose personal and health information in response to requests. The list includes the Secretary, the Public Advocate, the Tribunal and any person or organisation that provides or has provided specified services. However, the Act does not expressly authorise compulsory production of records from third parties such as private medical practitioners or non‑service entities. Practitioners must secure lawful consent or rely on statutory bases and consider privacy law when seeking records from third parties.

“Best interests” and risk of inter‑agency disagreement

• Because the sharing test requires a sending provider to be “satisfied” that the disclosure is in the person’s best interests and will assist the recipient (s 17(1)), disagreements between providers about the propriety of disclosures are possible. The Act does not prescribe a dispute resolution mechanism for such inter‑provider disagreements; contracting and departmental policy should consider escalation and review processes to manage conflicts.

For Departments and the Secretary

• Establish clear eligibility assessment protocols. Given the “appears to satisfy” language in s 7(b), create procedural guidance that documents the evidentiary basis for preliminary eligibility decisions, the roles of expert advisers (s 5), the scope of delegated decision makers (s 6), recordkeeping standards, and how refusals under s 19 are captured and validated under s 19(4). Maintain auditable files showing how determinations were made.

• Contract terms for assessment and plan development. Use procurement contracts under s 11 that allocate responsibilities, set deliverables and timelines (for example, delivery of a plan within a specified period), define the standards for a “comprehensive assessment” (s 13(c)), and include clauses covering modification by the Secretary (s 12(4)), intellectual property, confidentiality responsibilities and payment on milestones. Include indemnities and performance metrics for quality of assessments.

• Documented processes for approval, notification and review. Ensure the Secretary’s processes deliver the notifications required by ss 9, 10 and 15 within statutory time frames, including provision of a copy of the care plan within 14 days of approval (s 15). Implement checklists for s 20 obligations to communicate in comprehensible formats and to provide oral explanation where necessary. Establish procedures for varying or terminating plans (s 18), and ensure termination notifications reach the person and service providers (s 18(4)).

• Appoint and support care plan co‑ordinators. Provide job descriptions, training and reporting templates for care plan co‑ordinators appointed under s 16. Define responsibilities for monitoring, coordination, recordkeeping and reporting to the Secretary (s 16(2)-(3)). Ensure coordinators understand their authority to request personal and health information (s 16(4)) and confidentiality obligations (s 23).

• Privacy law alignment and legal sign‑offs. Before using the Act’s information sharing authorisations, obtain legal advice and privacy‑law sign‑offs to ensure disclosures are consistent with the Privacy and Data Protection Act 2014 and the Health Records Act 2001 (s 24). Where appropriate, document informed consent from the person and record the legal basis for disclosures, including necessity and minimisation tests.

For service providers

• Follow consultation and assessment requirements. When engaged to assess or develop care plans (s 11), comply with s 13 by consulting the person in person, consulting current service providers (s 13(b)), conducting comprehensive needs assessments (s 13(c)), and obtaining relevant personal and health information (s 13(d)). Keep contemporaneous notes and records to demonstrate compliance.

• Evidence the “best interests” test for information sharing. When disclosing or using personal or health information under ss 14 and 17, document the decision process showing why the disclosure is in the person’s best interests and how it would assist the recipient to give effect to the care plan. Reasoned records will be important if a privacy complaint or enforcement action follows.

• Observe confidentiality obligations and limit disclosures. Adhere to s 23 by ensuring disclosures are only those necessary to carry out functions under this Act or under other lawful obligations. Maintain secure record systems, access controls and training for staff about the penalty for unauthorised disclosures (s 23(2)).

• Be mindful of overlapping information sharing regimes. Identify when family violence information sharing rules under the Family Violence Protection Act 2008 apply, and coordinate disclosures to align with the specific gateways in that Act. Also take account of obligations under the Privacy and Data Protection Act and the Health Records Act.

• Manage consent properly. Where possible, obtain and record informed consent for information sharing and the content of care plans, including consent for disclosure to named providers. Remember that the person may refuse to be considered for eligibility or refuse to be the subject of a care plan (s 19). If a person exercises a refusal, follow the s 19(4) requirement to assess whether the communication is a valid refusal in professional judgment, and document the decision.

• Contract and funding implications. If developing plans under contract, ensure contract clauses cover liability, confidentiality, records retention, data security and change management in the event the Secretary modifies the plan under s 12(4). Seek clarity on procurement payment terms to manage the risk that substantial preparatory work may be altered on approval.

For legal advisers and compliance officers

• Map statutory bases before disclosing. Before responding to requests for information from the Secretary or care plan co‑ordinator, map the legal bases for disclosure: the Act’s authorisations (s 14, s 17), consent where available, privacy exemptions in the Health Records Act or Privacy and Data Protection Act, and any family violence information sharing gateways. Retain legal advice where disclosures are novel or sensitive.

• Prepare template notices and accessibility resources. Draft compliant notice templates for s 9, s 10 and s 15 that incorporate the elements set out in those sections and comply with s 20’s accessibility requirements. Include translated materials and alternative communication formats where necessary, and document how oral explanations are provided.

• Prepare for administrative review risk. Because the Act does not provide express internal merits review, prepare for possible judicial review challenges. Ensure administrative decisions are lawful, reasoned, procedurally fair and contain adequate reasons, particularly where deprivation of autonomy or extensive information sharing is involved.

• Monitor timing and renewals. Track care plan durations carefully. Initial plans cannot exceed 12 months (s 12(3)(b)) and total duration cannot exceed 36 months (s 18(3)). Set calendar reminders and governance for plan review and extension decisions.

Recordkeeping and audit

• Maintain auditable records of: eligibility assessments and evidence; notices served and how oral explanations were provided; consent forms and refusals; the chain of information exchanges and the grounds relied upon for each disclosure; the content of care plans and any modifications; coordinator reports to the Secretary; and contract performance records.

• Conduct periodic audits to verify that disclosures were justified under the Act’s tests and consistent with privacy obligations. Use audit findings to refine policies and training.

Operational checklists

• Before making or responding to an information request under s 14: (1) confirm statutory authority under the Act or other law; (2) confirm whether the person has refused consideration or a care plan (s 8(2), s 19); (3) record the necessity and proportionality of the disclosure; (4) obtain legal or privacy sign‑off where required.

• When sharing information under s 17: (1) ensure both prongs of the test are demonstrably met; (2) minimise data shared to what is necessary; (3) log disclosures and notify the person where appropriate; (4) check for any guardianship or attorney structures under s 21 and involve them as required.

By following these practical steps, agencies and service providers can operationalise the Act’s scheme while managing the legal risks arising from overlapping privacy regimes, the Act’s professional judgment standards, and the procedural rights of persons subject to care planning.