National Redress Scheme for Institutional Child Sexual Abuse (Commonwealth Powers) Regulations 2018

Primary concepts established by the Regulations are narrow and technical: "prescribed laws" and the identification of those laws for the Act's purposes. The concept of "the Act" is defined narrowly within the Regulations (regulation 4). The Regulations do not define "information sharing" themselves; rather they state that the Regulations' objective is to "prescribe information sharing provisions for the purposes of" the Act (regulation 1). That links the notion of information sharing to the Act’s own architecture.

The Regulations implement the Act’s delegation to prescribe which provisions of State law operate in a particular way under the Act. Regulation 2 makes clear the Regulations are made under section 12 of the Act. Regulation 5 is the list: it identifies specific sections of Victorian Acts as "prescribed laws for the purposes of section 10(4) of the Act." The Regulations therefore perform a mapping function: they point the reader of the Act to the Victorian statutory provisions that have been selected to interact with the Commonwealth‑powers framework established by the Act.

The selected provisions are drawn from statutes with functions across criminal investigation and prosecution (for example Crimes Act 1958 s 330, reg 5(c); Major Crime (Investigative Powers) Act 2004 s 20 and s 68, reg 5(j)), surveillance and interception (Surveillance Devices Act 1999 ss 9C, 11, 12, 24 and 30E, reg 5(q); Telecommunications (Interception) (State Provisions) Act 1988 s 22, reg 5(r)), protective regimes (Witness Protection Act 1991 s 10, reg 5(u); Sex Offenders Registration Act 2004 s 64, reg 5(p)), oversight and integrity bodies (IBAC Act ss 40 and 44, reg 5(h); Victorian Inspectorate Act ss 33-35 and 39, reg 5(t)), public health and mental health (Public Health and Wellbeing Act 2008 s 48B, reg 5(n); Mental Health Act 2014 s 140, reg 5(k)), and disclosure/protected‑disclosure frameworks (Ombudsman Act ss 25B, 26A and 26F, reg 5(l); Protected Disclosure Act ss 52, 53, 74 and 81, reg 5(m)). The list also includes the Inquiries Act 2014 (ss 43, 83 and 115, reg 5(i)) and a number of statutes connected to covert or controlled operations (Crimes (Controlled Operations) Act 2004 s 36, reg 5(e)), assumed identities and confidentiality (Crimes (Assumed Identities) Act 2004 s 30, reg 5(d)), and anti‑terror laws (Terrorism (Community Protection) Act 2003 ss 13ZJ, 37 and 37A, reg 5(s)).

The Regulations rely on the interpretative practices applicable to Victorian statutory rules. The endnotes set out that headings, examples, notes, punctuation and provision numbers form part of the Statutory Rule where applicable (endnote 1: Interpretation section). They also state that material printed after the endnotes (explanatory memorandum, table of provisions, etc.) is not part of the Statutory Rule (endnote 1: "Other material"). The endnotes therefore define the permissible scope for reading and relying on the Statutory Rule text.

Conceptually, then, the Regulations operate as a targeted cross‑reference instrument: they do not by themselves change the substantive duties or disclosure exemptions in the listed Acts; they signal which statutory provisions the Act’s s 10(4) mechanism will interact with. The Regulations therefore function as a switchboard between Commonwealth redress powers and discrete State confidentiality, investigatory or oversight provisions named in the list.

At the statutory level the Regulations affect two groups: the legal architecture of the National Redress Scheme as created under the Act, and the persons and bodies subject to the listed provisions in the Victorian Acts. The Regulations directly identify which provisions of Victorian law are "prescribed laws" for the Act’s s 10(4) purpose (regulation 5). That means entities or officers who hold or control information governed by those specified sections are the practical subjects of whatever information‑sharing mechanism the Act implements; the Regulations operate to bring them into the Act’s reach as mapped.

Which public bodies and statutory regimes are implicated can be read from the list in regulation 5. For example, the Children, Youth and Families Act 2005 sections listed (reg 5(a)) will involve child protection agencies and officials who operate under that Act. The Independent Broad‑based Anti‑corruption Commission Act provisions (reg 5(h)) will engage IBAC’s officers and functions. The inclusion of provisions from the Surveillance Devices Act 1999 (reg 5(q)) and Telecommunications (Interception) (State Provisions) Act 1988 (reg 5(r)) signals potential impact on agencies using surveillance or interception powers. Section 10 of the Witness Protection Act 1991 (reg 5(u)) engages persons responsible for witness protection. The listing of Mental Health Act 2014 s 140 (reg 5(k)) and Public Health and Wellbeing Act 2008 s 48B (reg 5(n)) engages health services and their record‑keeping and disclosure controls.

Private parties are affected indirectly to the extent their information is held by the public bodies or is the subject of statutory secrecy or disclosure regimes in the listed Acts. For instance, records held on victims, alleged perpetrators, or witnesses by child welfare agencies, courts, law enforcement, mental‑health services or corrective services may be subject to the interaction between the Act and the listed prescribed laws.

Because the Regulations prescribe specific sections rather than whole Acts there is a targeted impact: only the listed provisions are prescribed for s 10(4) purposes (regulation 5). Entities that assume the entire Act is captured will be mistaken; compliance requires a mapping exercise against the precise section numbers listed.

The Regulations also affect legal advisers, privacy officers and compliance teams within the impacted agencies. These officers must reconcile the statutory text of each listed provision with the requirements and architecture of the Act’s s 10(4). The Regulations make no procedural prescriptions; operational agencies must therefore interpret how to fulfil any information‑sharing obligations that flow from the Act against the statutory constraints of the listed provisions.

Finally, the Regulations have temporal effect: they commenced 1 October 2018 (regulation 3) and are recorded to sunset 25 September 2028 under the Subordinate Legislation Act 1994 (endnote 1). Parties implementing compliance programs should therefore note the Regulations’ fixed statutory lifespan in planning long‑term arrangements.

The Regulations themselves do not set out operational duties or individual rights beyond the role‑assignment function: they prescribe which Victorian statutory provisions are relevant to a particular provision of the Act (s 10(4)). Regulation 1 states the objective is to "prescribe information sharing provisions for the purposes of the Act" and regulation 5 identifies those provisions by specific citations. Any duties or rights that arise flow from the Act and the listed Victorian provisions, not from the Regulations as independent sources of substantive obligations.

From the text of the Regulations the following legal relationships can be stated with source citations:

• The Regulations are made under s 12 of the Act (regulation 2). That is the statutory delegation empowering the Executive to make these prescriptions.
• The Regulations define "the Act" for their own purposes as the National Redress Scheme for Institutional Child Sexual Abuse (Commonwealth Powers) Act 2018 (regulation 4). The effect is to anchor subsequent references to "the Act" within this instrument.
• Regulation 5 prescribes particular sections of specified Victorian Acts "for the purposes of section 10(4) of the Act." The Regulations therefore determine which statutory provisions of Victorian law are relevant to s 10(4) of the Act.

Any rights to access information, exemptions from disclosure, obligations to keep information confidential, or powers to disclose will rest in the text of:

• the Act (not reproduced in the Regulations but defined as "the Act" in reg 4), and
• the specific sections of Victorian Acts listed in regulation 5.

Because the Regulations are limited to prescription of provisions, practical duties that arise will include:

• An operational requirement on public bodies to interpret and implement any s 10(4) sharing mechanism in light of the listed Victorian provisions.
• A due‑diligence obligation for affected agencies to map their record holdings and decision‑making processes against the listed sections to determine whether and how the Act’s mechanisms permit or require information sharing.

The Regulations do not create standalone privacy or redress entitlements nor do they set penalties. Rights and duties to share or withhold information therefore must be sought by reference to the Act’s s 10(4) and to the underlying provisions of the listed Acts (regulation 5). The Regulations therefore function as a statutory pointer: they do not by themselves alter the text or penalties in the named sections of the Victorian Acts.

Finally, the endnotes set out interpretation rules that affect statutory construction of the Rules (endnote 1: Interpretation of Legislation Act 1984 provisions). These affect how the Regulations' text, headings and examples are read and therefore indirectly affect how duties and rights derived from these Regulations are to be ascertained.

The Regulations contain no penalty provisions and impose no enforcement mechanism within their text. There is no fine, criminal sanction, or administrative penalty created by any regulation in this instrument. The document’s operative content is the identification of listed statutory sections for s 10(4) purposes (regulation 5), and it contains no enforcement clause directed at compliance with these Regulations themselves.

Because the Regulations operate by reference to the Act and to specific sections of Victorian statutes, any enforcement or penalties for non‑compliance with disclosure obligations, confidentiality rules, or investigatory safeguards will lie in the statutory provisions of:

• the National Redress Scheme for Institutional Child Sexual Abuse (Commonwealth Powers) Act 2018 (the "Act") as to the Commonwealth’s powers and mechanisms, and
• the Victorian Acts and sections listed in regulation 5 as to the State law consequences for contravening their provisions.

The endnotes give interpretative guidance but do not import enforcement provisions (endnote 1). The Statutory Rule framework also imposes a sunset under the Subordinate Legislation Act 1994 (endnote 1), but that is a formal expiry mechanism and not a penalty.

Enforcement therefore requires legal work: to determine the applicable sanction for any action taken or withheld under the combined operation of the Act and a prescribed law, an adviser must examine:

• the Act’s provisions (especially s 10(4) as referenced) to see what conduct the Act permits, requires, or protects; and
• the particular listed section within the relevant Victorian statute to identify if that section creates an offence, immunity, confidentiality duty, or other sanction.

The Regulations do not allocate investigative or prosecutorial functions, nor do they designate an enforcement agency. In short, enforcement is delegated to the instrumenting Acts themselves; the Regulations function purely as a map linking the Acts.

The Regulations are explicitly cross‑referential in purpose. They operate as a technical instrument that ties the Commonwealth‑powers Act to specific Victorian statutory provisions. Regulation 5 states the list is "prescribed laws for the purposes of section 10(4) of the Act." The exact legal interaction therefore depends on the content of s 10(4) of the Act, which the Regulations do not reproduce; the Regulations merely nominate which Victorian statutory provisions are within the ambit of s 10(4).

From the list in regulation 5 the Regulations interact with a broad array of State laws that regulate secrecy, disclosure, investigatory powers and oversight. For example:

• The Children, Youth and Families Act 2005 (specified sections, reg 5(a)) interacts with the Act insofar as child protection records and related information are governed by those sections.
• Secrecy provisions connected to law enforcement or national security, such as the Surveillance Devices Act 1999 (reg 5(q)) and the Telecommunications (Interception) (State Provisions) Act 1988 (reg 5(r)), will need to be read together with the Act’s sharing mechanism.
• Oversight and integrity statutes such as the Independent Broad‑based Anti‑corruption Commission Act 2011 (reg 5(h)), the Victorian Inspectorate Act 2011 (reg 5(t)), and the Inquiries Act 2014 (reg 5(i)) are included, signalling that information in oversight processes may be subject to the Act’s cross‑jurisdictional handling as prescribed.

The endnotes incorporate rules of statutory interpretation from the Interpretation of Legislation Act 1984 (endnote 1). These rules govern how headings, examples, punctuation and provision numbers in this Statutory Rule are to be read and therefore affect its interaction with other legislation. The endnotes also make clear that explanatory memoranda and other material placed after the endnotes do not form part of the Statutory Rule (endnote 1: "Other material"), which limits the interpretive materials available when construing interactions.

Because the Regulations only prescribe particular sections, they do not displace or amend the rest of any named Act. Interaction is therefore sectional and specific; other sections of the same Acts remain subject to their own terms. Users of the Regulations must therefore perform sectional mapping: the Regulations will be engaged only to the extent the particular section of a Victorian Act is invoked under s 10(4) of the Act.

Finally, the Regulations were made under section 12 of the Act (regulation 2). That route of delegation determines the lawful ambit of prescription: any contention about whether a listed provision should have been prescribed under the Act would be a legal issue about the limits of s 12 and s 10(4) of the Act rather than about these Regulations’ text alone.

The Regulations record no amendments at the date of publication. The endnotes include a specific Table of Amendments entry stating "There are no amendments made to the National Redress Scheme for Institutional Child Sexual Abuse (Commonwealth Powers) Regulations 2018 by statutory rules, subordinate instruments and Acts" (endnote 2). The endnotes also state there are no amendments "Not in Operation" (endnote 3). The Statutory Rule therefore remains in its original form as at the published version.

The Rules were made on 25 September 2018 and commenced on 1 October 2018 (endnote 1; regulation 3). The endnotes also note a sunset under the Subordinate Legislation Act 1994: the Statutory Rule will sunset 10 years after the day of making, on 25 September 2028 (endnote 1). That sunset is part of the subordinate legislation regime rather than a substantive amendment; it means the Regulations are subject to an expiry date unless remade or otherwise extended in accordance with the Subordinate Legislation Act 1994.

There are no entries in the Explanatory Details section (endnote 4) and therefore no additional legislative history or Ministerial explanatory changes recorded in this instrument. The Interpretation of Legislation Act 1984 authorities cited in the endnotes (for headings, notes, punctuation, provision numbers etc.) reflect general statutory drafting and interpretive practice rather than amendments to the Regulations themselves.

If an owner of a system of processes needs to track whether the list of prescribed laws changes over time, the current Statutory Rule version and the Victorian legislation website are the primary sources. As at the recorded Version No. 001 (version as at 1 October 2018) no further modifications are recorded in the instrument.

The Regulations include no litigation history or case citations. The text contains no references to judicial decisions and the endnotes contain no record of legal proceedings. There is therefore no litigation history supplied within this instrument to inform interpretation.

Because the Regulations operate by reference to s 10(4) of the Act and to specific sections of Victorian statutes, any judicial questions arising from their operation would require examination of:

• the Act itself, including s 10(4) and s 12 (the head power for these Regulations), and
• the listed Victorian statutory provisions as they apply to the facts in issue.

Absent any cases cited in the Regula­tions text or the endnotes, there is no domestically recorded litigation history to summarise in this instrument. Practitioners seeking precedent on disputes over whether a listed provision should be used for information sharing under the Act, or on the lawful extent of disclosures made pursuant to the Act and a prescribed law, must consult case law on the Act and on the listed Victorian provisions; that material is not part of this Statutory Rule.

The Regulations’ lack of litigated points in their text is itself a practical signal: interpretive disputes will arise, if at all, in proceedings focused on the Act and the listed sections, not on the Regulations’ drafting choices. Any litigation would therefore be principally about the interaction of Commonwealth and State law as mediated by the Act’s delegated prescriptions, and the Regulations would be evidentiary support for the selector of sections rather than the substantive legal source.

Several practical traps and technical points arise from the structure and wording of these Regulations. Each is grounded in the instrument’s text.

1. Specificity of prescription: regulation 5 prescribes individual sections, not whole Acts. Practitioners should not assume that an entire Act is captured. For example, only sections 41, 124, 191, 209 and 213 of the Children, Youth and Families Act 2005 are listed (reg 5(a)), not the full Act. Likewise, only the listed sections of the Surveillance Devices Act 1999 and other Acts are prescribed (reg 5(q), etc.). Compliance requires cross‑checking exact section numbers.

2. Limited purpose: the Regulations prescribe provisions "for the purposes of section 10(4) of the Act" (reg 5). Because the Regulations do not reproduce s 10(4), readers must consult the Act to know what legal consequences follow from being a "prescribed law." The Regulations alone do not explain the legal effect of the prescription.

3. No standalone powers: the Regulations do not themselves authorise disclosure. The stated objective is to "prescribe information sharing provisions" (reg 1), but the instrument only identifies which State provisions are prescribed; it does not create a separate information‑sharing regime or procedural rules.

4. Interpretative material: the endnotes incorporate provisions of the Interpretation of Legislation Act 1984 (endnote 1). Headings, examples, punctuation and provision numbers are declared part of the Statutory Rule where applicable. Practitioners should therefore treat headings and punctuation in this Statutory Rule as legally relevant parts of the instrument.

5. Explanatory materials are non‑statutory: the endnotes state that explanatory memoranda and other materials printed after the endnotes do not form part of the Statutory Rule (endnote 1: "Other material"). Do not rely on post‑endnote material as authoritative text of the Regulations.

6. Sunset date: the instrument will sunset on 25 September 2028 under the Subordinate Legislation Act 1994 (endnote 1). Any long‑term compliance programs should account for that statutory expiry unless the Regulation is remade or replaced.

7. No penalties or enforcement in the Rule itself: because the Regulations lack penalty provisions, any enforcement or breach consequences will be governed by the Act and by the listed Victorian provisions. That increases legal complexity: agencies must reconcile two separate statutory texts to determine liability or immunity.

8. Delegation route: the Regulations were made under s 12 of the Act (reg 2). A legal challenge that the Executive exceeded s 12 when prescribing particular sections would focus on the textual limits of s 12 and s 10(4) of the Act, not on the Regulations’ drafting per se.

9. Cross‑agency mapping required: the list reaches into a wide set of regimes , criminal law, health, oversight, surveillance, witness protection, and more (reg 5(a)-(u)). Agencies need to perform a record‑by‑record assessment to know whether particular datasets are governed by listed sections.

10. No procedural guidance: the Regulations do not specify documentation, consent, record‑keeping, or review mechanisms for information sharing. That absence creates operational risk and requires agencies to develop their own compliant processes consistent with the Act and the listed sections.

These "gotchas" flow from what the Regulations state and omit. The instrument is a compact technical pointer that leaves substantive legal rights, duties, processes, and sanctions to the Act and the individually listed Victorian statutory provisions.

Because the Regulations perform a mapping function rather than creating substantive procedural content, compliance is a two‑step exercise: (A) determine whether the Agency or records you manage are governed by one or more of the listed sections in regulation 5, and (B) implement policies and processes consistent with the combined obligations of the Act (especially s 10(4) and the delegation in s 12) and the listed Victorian provisions.

Practical steps grounded in the instruments’ text:

1. Identify relevant sections precisely. Regulation 5 lists specific sections by Act and number (reg 5(a)-(u)). Legal teams should create a master cross‑reference table mapping each listed section to the agency units and record types that the provision touches. Do not assume whole‑of‑Act coverage; match by section number.

2. Read the Act’s s 10(4) and s 12. The Regulations are prescribed "for the purposes of section 10(4) of the Act" and were made under s 12 (regs 5 and 2). Compliance therefore cannot be determined from the Regulations alone. Obtain and interpret the Act’s relevant sections to understand the legal basis for any information sharing or limitation on disclosure.

3. Map statutory constraints and permissions. For each affected dataset, compare the text of the relevant Victorian section in regulation 5 with the Act’s sharing mechanism. Identify where the State provision creates an express secrecy, immunity, or restriction and whether the Act provides a lawful exception or direction that alters or authorises disclosure.

4. Document decision‑making. Because the Regulations do not set procedural rules, create internal authorisation protocols that record:

   • the legal basis (Act s 10(4) + specific prescribed law citation);
   • the decision taker (position and delegation); and
   • the purpose and scope of any disclosure. These records will be necessary in case of later review, oversight inquiry, or litigation.

5. Update privacy and records policies. Where health, mental health, child welfare, or criminal justice records are involved (reg 5(a), 5(k), 5(n), 5(c), etc.), ensure organisational privacy impact assessments reflect the cross‑jurisdictional sharing enabled by the Act and the Regulations.

6. Engage data holders and oversight bodies. Several listed provisions concern oversight bodies and investigatory agencies (regs 5(h), 5(i), 5(t)). Where disclosures might affect ongoing investigations or oversight activity, consult the relevant body to determine operational constraints before proceeding.

7. Train staff on section‑specific rules. Because the Regulations capture specific sections that may create unique disclosure conditions (for example, witness protection, surveillance device warrants, telecommunications interception), ensure legal training focuses on those provisions and the interplay with the Act.

8. Check sunset and renewal timelines. The endnotes state the Statutory Rule will sunset on 25 September 2028 unless remade (endnote 1). Compliance programs that expect permanent arrangements should build in a review at least 12-18 months before the sunset date to assess continuity.

9. Seek legal advice on ambiguous intersections. Where the Act’s s 10(4) language and a prescribed law’s secrecy or immunity clause appear to conflict, obtain written legal advice to support operational decisions. The Regulations do not resolve conflicts of law; they only nominate the provisions for s 10(4) purposes.

10. Maintain an audit trail of disclosures. Because the Regulations create no procedural constraints or record‑keeping obligations, agencies should impose their own rigorous logs for any sharing made pursuant to the Act and a prescribed law, noting legal basis, recipients, data categories, and authorising officer.

In short, compliance is an exercise in statutory mapping, legal analysis and robust internal process development. The Regulations provide the list of provisions to consider; the Act and the underlying State provisions provide the legal content that defines lawful action.