Office for Early Childhood Development Act 2024

The Act centres on three interlocking concepts: stewardship of the early childhood development system, a targeted information‑sharing architecture, and special measures for Aboriginal children.

Stewardship: The Office is statutorily tasked as the steward of the State’s early childhood development system with a specific performance objective to reduce the proportion of developmentally vulnerable children at school start (s 6(1)). Stewardship is operationalised through functions that include policy and system design, commissioning services, funding models for universal preschool for 3 and 4 year olds, place‑based service delivery, workforce planning and strategic direction for government services (s 6(2)(d)-(i), (m)). The Chief Executive is the operative official empowered to require reports and information to support these functions (s 10-11).

Information sharing: Part 3 creates a permissive, but regulated, information‑sharing framework. A defined list of entities (including the Office, Department, Commissioners, Guardian, Child Development Council, State authorities, government and non‑government schools, education and care services and specified Aboriginal organisations) may provide prescribed information to one another despite any other Act or law, subject to regulatory requirements and statutory limits (s 12(1)-(2)). Prescribed information is defined by reference to development, health, education, safety, welfare or wellbeing of particular children or classes of children (s 12(9)). The Act distinguishes de‑identified data, which may be shared without restriction (s 12(3)-(4)), from prescribed identifiable or relational data, which can only be used for the stated purpose and is subject to penalties for misuse (s 12(7)). The Office is authorised to publish received information where publication would further Act objects and not reasonably identify anyone (s 12(8)).

Aboriginal focus: The Act imposes additional functions and principles in relation to Aboriginal children. The Office must promote cultural safety in early childhood services, align supports by working in partnership with Aboriginal families and organisations, support national agreements relevant to Aboriginal early development, and drive Aboriginal data sovereignty (s 7(1)(a)-(d)). The Act requires the Office to have regard to and seek to give effect to the UN Declaration on the Rights of Indigenous Peoples when performing functions that affect Aboriginal children (s 7(3)) and sets principles emphasising safeguarding cultural identity and supporting Aboriginal self‑determination (s 7(2)(a)-(c)).

Complementary concepts: The Act preserves long‑standing legal protections, including legal professional privilege, without prejudice privilege and public interest immunity (s 17(1)), and prevents the Act from affecting the Public Sector (Data Sharing) Act 2016 (s 13). It also gives the Minister and Chief Executive administrative tools such as committee creation (with mandatory Aboriginal representation on committees, s 8(3)), delegation (revocable at will, s 9(2)(d)), and regulatory powers (s 18).

The Act’s reach is broad in institutional terms because of its definition of State authority and its list of entities in the information‑sharing regime. “State authority” includes persons who hold offices established by an Act, public sector agencies (within the meaning of the Public Sector Act 2009), local councils, and a wide catchment of incorporated and unincorporated bodies established for a public purpose or subject to Crown or local council control (s 3). The regulations can add entities to, or exclude entities from, that definition (s 3(e), (i)). The Act explicitly excludes certain oversight bodies from the definition of State authority: the Guardian for Children and Young People, the Commissioner for Children and Young People and the Commissioner for Aboriginal Children and Young People, and any other entity prescribed by regulation (s 3(f)-(i)).

Entities listed in the Part 3 information‑sharing regime include the Office, the Department (Education and Children's Services Act 2019 definition, s 3), the Commissioners and Guardian, the Child Development Council, State authorities, government and non‑government schools, education and care services under the Education and Care Services National Law, the Association of Independent Schools of South Australia, Catholic Education South Australia, and the South Australian Aboriginal Community Controlled Organisation Network Inc (s 12(1)(a)-(m)). The regulations may add other entities or classes of entities (s 12(1)(m)). The Act makes clear that the Chief Executive’s power to require information or reports extends beyond State authorities to any specified entity, and explicitly includes officers and employees in scope (s 11(1)).

Individuals affected include children and families who are the subjects of the prescribed information and documents used by the Office and other recipients under s 12. Those involved in administering the Act, including persons engaged in the administration or formerly engaged, are subject to confidentiality obligations (s 15(1)). Employees and agents of employers who cause detriment for providing information under the Act may be subject to tort claims, Equal Opportunity Act processes or criminal sanction for victimisation (s 16).

Decision‑makers and payers: The Minister and the Chief Executive are decision nodes. The Minister must ensure the Office exists (s 5), may establish committees, and may issue exemptions from report and information requirements (s 10(4), s 11(6)), may determine committee fees (s 8(5)) and may prescribe fees by fee notice under the Legislation (Fees) Act 2019 (s 18(4)). The Chief Executive determines operational decisions such as issuing notices for reports and information (s 10-11), delegating functions (s 9) and establishing committees (s 8(1) subject to ministerial establishment). The Governor may make regulations that can alter coverage and obligations (s 18(1)-(3)).

Consequences for private and non‑government providers: Non‑government preschool and care providers that are education and care services under the National Law are within the sharing regime (s 12(1)(i)). The Chief Executive’s information notices (s 11) can apply to any specified entity whether or not that entity is a State authority, so private providers, contractors and community organisations can be required to supply information or documents relevant to Office functions and face penalties for non‑compliance (s 11(4)). The regulations can also prescribe further entities subject to the regime (s 12(1)(m)).

Duties imposed on the Office and on other entities are set out across multiple Parts of the Act. Primary duties for the Office are statutory functions and principles: the Office must act as steward of the State’s early childhood development system and focus on reducing school‑start developmental vulnerability (s 6(1)). It must facilitate research, enable secure data sharing, support universal child health and development checks, implement funding models for preschool access, commission services, align supports by partnering with families and government bodies, and provide strategic direction for government services among other functions (s 6(2)(a)-(n)). The Office must consider the views of children and their families (s 6(3)) and have regard to the UN Convention on the Rights of the Child and other international human rights instruments affecting children (s 6(4)). For Aboriginal children the Office has additional functions and must act in accordance with principles protecting cultural identity and supporting self‑determination (s 7).

Information duties: The Chief Executive can issue written notices requiring a State authority to prepare and provide a report setting out specified matters and requirements, including reasons, purposes for use and a time period for delivery (s 10(1)-(2)). If a State authority refuses or fails to comply, after consultation the Chief Executive may report the refusal or failure to the Minister and include details in the Office’s annual report (s 10(3)). The Minister may exempt a State authority from s 10 (s 10(4)). Separately, the Chief Executive may require information and documents from any specified entity (whether or not a State authority) that are reasonably required for performance of the Office’s functions (s 11(1)); those notices must state the reason and purposes and any other regulatory requirements (s 11(2)). Failure to comply with an s 11 notice is an offence carrying a maximum penalty of $5,000 (s 11(4)), and the Minister may exempt an entity from operation of s 11 (s 11(6)).

Information‑sharing duties and limits: Entities listed in s 12(1) may provide prescribed information to other listed recipients despite other Acts, subject to regulations and the provider’s reasonable belief that the provision will assist the recipient to perform relevant official functions (s 12(2)). Providers must observe regulatory requirements and recipients must not disclose the prescribed information further except in enumerated circumstances such as assisting with official functions, managing risk as an employer, lesser or preventing a serious threat, where required under another Act, by court order, with consent of the person responsible for the child, or in circumstances prescribed by regulation (s 12(6)(a)-(g)). There are statutory prohibitions on using prescribed information for a purpose other than that for which it was provided, with a maximum penalty of $10,000 (s 12(7)).

Confidentiality and misuse: Persons engaged in the administration of the Act must not divulge personal information obtained in course of duties except in limited, enumerated circumstances, and misuse carries a penalty up to $10,000 (s 15(1), (3)). It is an offence to make a materially false or misleading statement in information provided under the Act, with a maximum penalty of $10,000 (s 14). Victimisation by causing detriment to someone for providing or intending to provide information under the Act is an act of victimisation with civil and criminal consequences, and a direct personal offence carries a maximum penalty of $10,000 (s 16(1), (6)).

Rights and protections: The Act preserves established legal protections including legal professional privilege, without prejudice privilege and public interest immunity (s 17(1)). Persons are excused from answering questions or producing material under the Act if they could not be compelled to do so in proceedings in the Supreme Court (s 17(2)). A person providing information or documents under the Act has the same protections, privileges and immunities as a witness in proceedings before the Supreme Court (s 17(3)). The Act also provides protection from claims related to breach of professional codes where actions are done in accordance with the Act (s 17(4)). The Office must have regard to Aboriginal principles and international instruments when its functions affect Aboriginal children (s 7).

Discretionary powers: The Minister may issue exemptions from duties to provide reports or information (s 10(4), s 11(6)), the Chief Executive may delegate functions including to persons acting in specified positions and the delegation is revocable at will and may allow further delegation (s 9). The Governor may make regulations that can exempt persons or classes from provisions of the Act and prescribe fees and fines (s 18). The Minister may prescribe fees by fee notice (s 18(4)). These discretionary instruments will materially shape who bears duties and when.

The Act sets specific criminal and civil incentives and disincentives, and multiple enforcement pathways. Offences and maximum penalties are dispersed across the statute and include both pecuniary penalties and constrained criminal processes.

Failure to provide information: Failure to comply with an information requirement issued by the Chief Executive under s 11(1) is an offence with a maximum penalty of $5,000 (s 11(4)). For failure by a State authority to comply with a report notice under s 10, the Chief Executive’s statutory remedies are administrative rather than criminal: after consultation the Chief Executive may report the refusal or failure to the Minister and to the Minister responsible for the State authority, and include details in the Office’s annual report (s 10(3)). The Minister may exempt entities from these obligations (s 10(4), s 11(6)).

Misuse and false statements: Making a statement knowing it is false or misleading in a material particular in information provided under the Act is an offence with a maximum penalty of $10,000 (s 14). Using prescribed information for purposes other than those for which it was provided carries a maximum penalty of $10,000 (s 12(7)). The confidentiality provisions impose a maximum penalty of $10,000 for unauthorised divulging of personal information obtained in the course of administration, and an identical penalty for improper secondary use of disclosed information (s 15(1), (3)).

Victimisation: Causing detriment to someone on the ground that they have provided or intend to provide information under this Act constitutes an act of victimisation (s 16(1)). A person who personally commits such an act is guilty of an offence with a maximum penalty of $10,000 (s 16(6)). Proceedings for the victimisation offence under subsection (6) may only be commenced by a police officer or a person approved by the Commissioner of Police or the Director of Public Prosecutions (s 16(7)). Victims have options to pursue remedies in tort or as if under the Equal Opportunity Act 1984, but those options are mutually exclusive (s 16(3)).

Administrative and reporting consequences: For non‑criminal non‑compliance by State authorities with s 10 report requirements, the primary enforcement tools are reputational and administrative: reporting to Ministers and publication in the Office’s annual report (s 10(3)). The Minister and regulations can also provide exemptions, fees and civil sanctions for regulatory breaches; regulations may set fines up to $10,000 for offences against the regulations (s 18(2)(c)).

Protections for providers and witnesses: Section 17 preserves legal professional privilege, without prejudice privilege and public interest immunity (s 17(1)). Persons are protected from being compelled under the Act to answer questions or produce documents that could not be compelled in Supreme Court proceedings (s 17(2)). Persons providing information under the Act have the same protections as witnesses before the Supreme Court (s 17(3)). The Act also contains an employer defence in tort proceedings for victimisation where the defendant can prove it exercised all reasonable diligence to prevent the act (s 16(5)).

Initiation and limitation of prosecutions: Notably, the victimisation criminal offence under s 16(6) has a restricted gate for commencement of proceedings, permitting only police officers or persons approved by the Commissioner of Police or the DPP to commence proceedings (s 16(7)). Other offences under the Act do not have an express restriction in the text, but the Act leaves open regulatory enforcement approaches via regulations (s 18).

Regulatory instruments: The Governor and the Minister have powers to shape enforcement in practice by regulation and fee notices (s 18(1)-(4)). Regulations can prescribe exemptions, fees, fines and mechanisms for proof and can confer discretion to specified entities (s 18(2)-(3)).

The Act is designed to operate within the existing legal architecture and expressly addresses interaction with other legislation in several places.

Primacy of the Public Sector (Data Sharing) Act 2016: The Act contains a specific non‑derogation clause for the Public Sector (Data Sharing) Act 2016, stating that nothing in Part 3 affects the operation of that Act (s 13). Part 3 contains the information gathering and sharing rules; therefore the data sharing arrangements established under this Act are declared not to affect the operation of the Data Sharing Act. Mechanically, this means entities should treat the Data Sharing Act as a parallel regime that remains applicable and unaffected by the new sharing permissions in s 12. The Act, however, also contains an apparent override clause in s 12(2) that permits entities to provide prescribed information "despite any other Act or law". The explicit preservation of the Data Sharing Act in s 13 means that the operation of s 12 must be read alongside and without derogation of the Data Sharing Act.

"Despite any other Act or law" clause: Section 12 begins with a broad provision that, despite other Acts or law, entities to which the section applies may provide prescribed information and documents to one another in accordance with the regulations if the provider reasonably believes the provision will assist the recipient to perform relevant official functions (s 12(2)). This clause creates an express statutory pathway to set aside conflicts with other statutory restrictions or common law limits on disclosure, subject to regulatory requirements and other limits in s 12. That said, the statutory preservation of the Data Sharing Act in s 13 narrows the practical scope of this override by leaving that Act unaffected.

Conflicts with privacy, privilege and public interest immunity: The Act explicitly preserves legal professional privilege, without prejudice privilege and public interest immunity (s 17(1)). It also provides that a person is excused from answering a question or producing material under the Act if they could not be compelled to do so in the Supreme Court (s 17(2)). The confidentiality and misuse prohibitions in s 15 create penalties for unauthorised disclosure, and the Act permits disclosure in specified circumstances including where required by other Act or law, or with consent (s 15(1)(a)-(b)). Therefore, while the Act opens information sharing across certain entities, it retains boundaries where privilege or court compulsion would prevent disclosure.

Interplay with other State Acts and regulations: The Minister may exempt entities from some obligations under the Act (s 10(4), s 11(6)), and the Governor may make regulations that exempt persons or classes from operation of specified provisions (s 18(2)(a)). The regulations can incorporate or apply codes, standards or policies prepared by the Minister or other specified entities (s 18(3)(e)), meaning compliance with other regulatory instruments can be folded into the Act’s regime by delegated instruments.

Court orders, law enforcement and child protection: The Act contemplates that disclosure or communication permitted under s 12 may be required or authorised under other Acts or by court or tribunal orders (s 12(6)(d)-(e)). Section 15 allows disclosure to law enforcement or for administration or enforcement of the Act (s 15(1)(c)-(d)), and allows disclosure to agencies performing child protection functions (s 15(1)(f)). These cross‑references create operational intersections with child protection, law enforcement and judicial processes.

Regulatory fees and incorporation of external documents: The Minister may prescribe fees by fee notice under the Legislation (Fees) Act 2019 (s 18(4)). The regulations may incorporate codes or standards published elsewhere, and require those documents to be kept available for inspection (s 18(3)(e), s 18(5)). In practice, this means regulatory compliance may involve interaction with fee regimes and externally authored policy instruments.

Overall, the Act creates its own sharing permissions and limits but expressly maintains privilege and specific statutory regimes such as the Data Sharing Act, and provides delegated instruments and ministerial discretion to navigate overlaps. Entities should read the Act alongside the Data Sharing Act, existing privacy laws and relevant child protection and education legislation when deciding how to respond to notices or share information under s 12.

The Act’s legislative history as recorded in the source indicates that the Office for Early Childhood Development Act 2024 is the principal Act, enacted in 2024 as Act No 61. The Act received assent on 5 December 2024 and its commencement was fixed by proclamation for 6 March 2025, as published in the Gazette on 20 February 2025 at page 193. The legislative history included in the statute text records no subsequent amendments, consequential amendments or repeals. The "Notes" section directs readers to consult the Index of South Australian Statutes or legislation.sa.gov.au for further information concerning the Act and subordinate legislation made under it. The Act itself provides an express power for the Governor to make regulations and for the Minister to issue fee notices under the Legislation (Fees) Act 2019 (s 18(1), (4)). Any future changes to coverage, fees, exemptions or procedural detail are likely to be implemented through those regulation‑making powers and fee notices rather than by amendment to the primary statute, at least for the kinds of operational adjustments the Act contemplates (s 18(2)-(5)).

Because the statutory text in the source contains the instrument establishing the Office and the enumerated powers and duties, but does not list any amendment instruments, it is reasonable on the basis of the source to state that, as at the recorded commencement date, the Act in its original form set out the functions, information powers and safeguards described in the text. For a practitioner advising clients, the practical consequence is that operational details and entity coverage may be altered by regulations or fee notices under the Act without primary legislation being amended, because s 18 grants broad regulatory scope, including the ability to exempt classes of persons or prescribe fees and fines up to $10,000. The regulations may also add or remove entities from lists in Part 3 (see s 12(1)(m) and s 18). Therefore the Act’s core architecture is stable in primary text but operational detail is designed to be implemented and refined by subordinate instruments.

The source document contains no references to judicial decisions, litigation, case law or recorded legal challenges to the Office for Early Childhood Development Act 2024. The legislative history portion of the text records the enactment, assent and commencement dates of the principal Act but lists no cases or court proceedings. On the basis of the source, there is no reported litigation history to analyse.

Practitioners should note that absence of litigation in the source does not preclude future challenges, particularly to the Act’s information‑sharing provisions, scope of executive discretion, interpretation of "despite any other Act or law" in s 12, or claims concerning Aboriginal data sovereignty and consent. The Act preserves legal professional privilege and public interest immunity (s 17), and creates enforcement pathways and defences (for example the employer defence to tort claims in s 16(5)). Because the source contains only the statutory text and legislative history, any litigation that might subsequently arise after commencement will need to be located in court databases and reported decisions. For present purposes the statutory record shows no litigation history.

Several features of the Act warrant careful attention because they create operational risks, potential compliance traps and points where discretion or overlapping regimes may produce uncertainty.

Broad scope of "State authority" and regulatory expansion: The definition of State authority in s 3 is expansive, covering offices established by Act, public sector agencies, local councils, and a wide range of incorporated and unincorporated bodies established for a public purpose or subject to Crown or council control (s 3(a)-(d)). The regulations may further extend or limit coverage (s 3(e)). That breadth means organisations that might not expect to fall within a statutory “State authority” could be captured, especially as regulations may prescribe further entities. Entities should not assume narrow coverage.

Wide reach of information notices: The Chief Executive’s power to require information under s 11 extends to any specified entity "whether or not the entity is a State authority" and to officers and employees (s 11(1)). Failure to comply is an offence with a $5,000 maximum penalty (s 11(4)). Practitioners should note that the Minister can exempt entities (s 11(6)), but absent exemption an entity may face notices even if it is a private or community provider.

"Despite any other Act or law" versus the Data Sharing Act: Section 12 includes a broad override phrase allowing sharing "despite any other Act or law" (s 12(2)). However s 13 states nothing in Part 3 affects the operation of the Public Sector (Data Sharing) Act 2016, effectively preserving the Data Sharing Act as a separate regime. This creates a technical tension. Entities should not assume that s 12 relieves them of obligations under the Data Sharing Act; they must read both regimes together and consult subordinate regulations to see how conflicts are intended to be resolved.

Prescribed information and regulatory detail still needed: The Act permits sharing of "prescribed information and documents" (s 12(2)) and identifies some categories (s 12(9)), but many operational rules are deferred to regulations. The Act leaves substantial detail to subordinate instruments, including what counts as prescribed information, procedural requirements for sharing, and circumstances in which a recipient can re‑disclose beyond the listed exceptions (s 12(6)). Entities should monitor subordinate legislation and be cautious about sharing until regulatory parameters are clear.

Penalties for misuse and false information: The Act creates substantial penalties (up to $10,000) for misusing information provided under the Act (s 12(7)), making materially false or misleading statements (s 14), and confidentiality breaches (s 15(3)). There is potential criminal or civil exposure for staff and agencies. Organisations must implement controls to avoid inadvertent disclosure or improper use.

Victimisation enforcement constraints: The Act makes victimisation an offence and permits tort or Equal Opportunity Act remedies, but imposes a restricted commencement rule for criminal proceedings under s 16(6): only police officers or persons approved by the Commissioner of Police or the DPP may commence proceedings (s 16(7)). This gatekeeping may affect prompt criminal enforcement of victimisation complaints.

Office discretion to publish and report failures: The Chief Executive can report refusals to supply information to Ministers and include them in the Office’s annual report (s 10(3)), and the Office may publish information it receives if it considers publication furthers the Act’s objects and would not reasonably identify anyone (s 12(8)). These reputational levers can be consequential for entities, even where no criminal penalty applies.

Aboriginal data sovereignty and obligations: The Act requires the Office to drive Aboriginal data sovereignty (s 7(1)(d)) and to give effect to principles supporting Aboriginal self‑determination (s 7(2)). For entities collecting or sharing Aboriginal data, statutory obligations in s 7 may create specific expectations for partnership and data governance beyond standard privacy considerations. However the Act does not set out a detailed Aboriginal data governance model; much will depend on how the Office operationalises these obligations.

Delegation and revocability: The Chief Executive’s delegations are revocable at will and may be conditional; delegated powers may be further delegated where the instrument allows (s 9). Entities dealing with delegates should verify delegation instruments are in writing and current (s 9(2)(a)), and be alert to potential rapid changes in who holds delegated authority.

Regulatory and fee powers: The Governor and Minister are empowered to make regulations, exemptions and fee notices (s 18). Regulations can set fines up to $10,000 for breaches of the regulations (s 18(2)(c)). Operational rules and compliance costs are therefore likely to be set out in subordinate instruments, so entities should track both the Act and regulations.

Entities affected by the Act should adopt a structured compliance programme that addresses governance, data handling, legal thresholds for disclosure, staff training and interaction with the Office. The following practical checklist and steps are grounded in the Act’s text.

Governance and point‑people

• Nominate a senior accountable officer for dealings with the Office and for internal oversight of information notices, disclosure requests and responses to s 11 and s 10 notices.
• Maintain a register of any notices received under s 10 or s 11, including dates, statutory grounds, specified purposes and deadlines (s 10(2), s 11(2)-(3)).

Legal review and privilege

• Before responding to a notice, check for legal professional privilege, without prejudice privilege or public interest immunity claims, which the Act preserves (s 17(1)-(2)).
• If the entity intends to refuse or limit disclosure on privilege grounds, document the legal basis carefully, engage legal counsel and consider early consultation with the Office (s 10(3) suggests consultation before reporting refusals).

Assess notice scope and apply for exemptions where appropriate

• Examine whether the entity is exempt under any Ministerial notice or regulation (s 10(4), s 11(6), s 18(2)(a)). If so, rely on the exemption in writing.
• If non‑compliance is necessary, engage with the Chief Executive in consultation to explain refusal or difficulty, because the Chief Executive may report refusals and include details in the Office’s annual report (s 10(3), s 11(5)).

Data mapping and prescribed information

• Map the datasets and documents likely to be "prescribed information and documents" under s 12(9) and monitor regulations that may define or expand the category.
• Establish a process to assess whether data are de‑identified within the meaning of s 12(3)-(4); de‑identified data can be shared without restriction, but the de‑identification standard is functional and must be defensible.

Consent and disclosure authorisations

• Where information relates to a particular child, seek consent from the person responsible for the child where appropriate, because several disclosure exceptions under s 12(6)(f)(i) rely on consent.
• Document consents carefully, including scope, purpose and time limits, and ensure consent covers the recipient’s intended use consistent with the Act’s permitted purposes.

Data sharing agreements and purpose limitation

• Use written data sharing agreements or memoranda of understanding that articulate the purpose for which information is provided, permitted onward uses, retention periods and security controls. The Act makes it an offence to use prescribed information for a purpose other than that for which it was provided (s 12(7)).
• Include clauses to prevent unauthorised secondary use and to require notification if re‑use is contemplated.

Privacy and confidentiality controls

• Implement role‑based access controls, audit logs and technical safeguards for personal information shared under the Act. Section 15 makes unauthorised disclosure an offence (s 15(1)-(3)).
• Train staff on the Act’s confidentiality obligations, and on recognising and reporting potential victimisation under s 16.

Aboriginal data sovereignty and cultural safety

• For data concerning Aboriginal children, develop data governance practices aligned with s 7(1)(d) and the principles in s 7(2), including engagement with Aboriginal organisations and community representatives. Ensure any data sharing respects cultural identity and community consent regimes where appropriate.

Records, reporting and publication

• Keep a register of disclosures and requests, including the statutory basis and the specific provisions of s 12 relied on.
• If the Office publishes information received under s 12, verify that publication could not reasonably be expected to lead to identification of a person (s 12(8)).

Responding to notices under s 11 and s 10

• Comply within the period specified in the notice where possible (s 10(2)(c), s 11(3)). If compliance is difficult, consult immediately with the Chief Executive and document the consultation because the Chief Executive must consult before reporting a refusal or failure (s 10(3), s 11(5)).
• If a notice is believed to be unlawful or overbroad, seek legal advice promptly and consider seeking judicial review if necessary. Preserve evidence of the basis for refusal and any communications.

Handling false information and victimisation risks

• Establish disciplinary and HR protocols for dealing with allegations of materially false or misleading statements under s 14 and for acts of victimisation under s 16. Note that a person who personally commits victimisation is guilty of an offence (s 16(6)), and criminal proceedings for that offence may only be commenced by a police officer or a person approved by the Commissioner of Police or the DPP (s 16(7)).

Monitor subordinate instruments and fee notices

• Track regulations and fee notices under s 18, because the regulations will specify prescribed information, procedures and potentially fees and fines. The Minister may also prescribe fees by fee notice under the Legislation (Fees) Act 2019 (s 18(4)).

Practical operations checklist

• Implement a standard operating procedure for incoming s 10 and s 11 notices.
• Maintain templates for data sharing agreements, consent forms and legal privilege claims.
• Ensure IT controls and secure transmission channels for any data transfers.
• Conduct privacy impact assessments for new data exchanges under s 12, especially where Aboriginal data are involved.
• Train staff on statutory confidentiality, penalties and the organisation’s obligations under the Act.

By aligning governance, legal review, technical safeguards and clear operational protocols with the statutory text, entities can reduce legal and operational risk under the Act. The Act places significant responsibility on recipient and provider entities to use information for stated purposes only, to protect confidentiality and to observe protections for Aboriginal children, with statutory penalties for misuse and false statements that require robust internal controls.