The Act structures a scheme around a small set of defined concepts that determine permissions, duties and liabilities. The central concepts are "authority", "assumed identity", "authorised person" (officer or civilian), "issuing agency", and "corresponding law/authority".

• Authority: An "authority" is an authorisation granted under s 6 to acquire or use an assumed identity, and includes any variation under s 9. Authorities must be in writing in a form approved by the chief officer and must include specified information including details of the assumed identity, evidence to be acquired, issuing agencies, conditions, and (for civilians) supervisor and period (s 7). Authorities for officers run until cancelled (s 8(1)); authorities for civilians have a statutory maximum term of three months (s 7(2)(h)(iii), s 8(2)) but may be renewed (s 8(3)).
• Assumed identity and evidence: "Assumed identity" refers to an identity the authorised person will adopt for operations. "Acquire" an assumed identity includes acquiring evidence of that identity or taking steps toward acquiring evidence of it (s 3). "Evidence" of identity is broadly defined to include documents and other things that can evidence identity, such as licences, birth certificates, cards or credit cards (s 3).
• Authorised persons and supervision: Authorised persons are either authorised officers (law enforcement officers authorised under an authority) or authorised civilians (non-law-enforcement persons authorised under an authority). If a civilian is authorised, the chief officer must appoint a law enforcement supervisor (s 6(3)). Supervisors must meet minimum rank or position requirements (s 6(4)).
• Issuing agencies: An issuing agency is any entity named in the authority that issues evidence of identity, and is further divided into government issuing agencies (entities that perform government functions and are named in the authority) and non-government issuing agencies (s 3). Government issuing agencies are legally obliged to comply with requests for evidence made under s 15 and s 26 where those sections are authorised in an authority (ss 16, 27(2)). Non-government issuing agencies may, but are not required to, comply (ss 17, 27(3)).
• Court involvement and Registers: The Registrar of Births, Deaths and Marriages and the Register are engaged through Supreme Court orders under s 11. The Court may order the Registrar to make entries in the Register or issue certificates in relation to an assumed identity, but only on application by the chief officer and only if the Court is satisfied the order is justified having regard to the nature of the activities to be undertaken under the authority (s 11(1)-(3)). Those proceedings are heard in closed court (s 11(4)). When a chief officer cancels an authority and there exists an entry created because of a s 11 order, the chief officer must apply for cancellation under s 13 within 28 days (s 12(2)).
• Mutual recognition and corresponding laws: The Act contemplates reciprocal or corresponding legislative frameworks in other jurisdictions. "Corresponding law" means a law of another jurisdiction that corresponds to this Act or is declared by regulation to correspond to it (s 3). The Act applies certain provisions to corresponding authorities and enables cross-jurisdictional requests and cancellation directions (Parts 5 and s 30).
• Liability, protection and indemnity: The Act creates a layered framework of protection from criminal liability and statutory indemnities. Officers of issuing agencies are not criminally responsible for offences if acting to comply with a request or direction under s 15 or s 18 (s 19). Authorised persons acting in accordance with an authority and in the course of duty (or in accordance with supervisor directions for civilians) are protected from criminal liability for things that would otherwise be offences, subject to the proviso that the act would not be an offence if the assumed identity were the person's real identity (s 22(c)). Indemnity obligations require law enforcement agencies to indemnify issuing agencies and authorised persons for liabilities incurred in complying or acting under an authority, provided regulatory requirements have been met (ss 20, 23, 29). The regulations may therefore materially affect the operation of the indemnities (s 37; see ss 20(2)(b), 23(2)(c), 29(2)(b)).
• Misuse and disclosure offences: Misuse by authorised officers or civilians is criminalised where they intentionally, knowingly or recklessly acquire or use an assumed identity while knowing or being reckless that the act is not in accordance with the authority or not in the course of duty/directions (s 31). Unauthorised disclosure of information likely to reveal an assumed identity is an offence, with higher penalties where disclosure endangers health or safety or prejudices investigations (s 32).

The Act defines "reckless" in objective-subjective terms (s 4): awareness of a substantial risk and the risk being unjustifiable having regard to known circumstances. This definition will determine culpability in prosecutions under the misuse and disclosure provisions.

Operationally, the design separates acquisition of identity evidence obtained from issuing agencies (administrative route) from the creation of Register entries or certificates (judicial route), preserves confidentiality around judicial applications, imposes structured oversight through records and audits, and transfers certain financial and legal liability to the requesting law enforcement agency via indemnities, conditioned by regulations. Decisions to grant, vary or cancel an authority rest with chief officers or, where delegated, senior officers of specified seniority (s 36).

The Act allocates decision-making power and obligations across several actor types and thereby distributes costs, duties and legal exposure in a specific manner.

Primary actors with duties and decision power

• Chief officers of law enforcement agencies: A chief officer (for the Police Service, the Commissioner of Police; for the Australian Crime Commission, the CEO; see s 3) is the central decision-maker for granting, varying and cancelling authorities (s 6(1), s 9(1)). Chief officers must conduct periodic reviews at least once every 12 months (s 10), keep records and arrange audits (ss 34-35), make applications to the Supreme Court under s 11 where Register entries are required, and submit an annual report to the Minister with specified content (s 33). The chief officer also must apply to cancel Register entries within 28 days after cancelling an authority (s 12(2)). The chief officer consequently bears substantial administrative and legal obligations, and monetary exposure via indemnities if liabilities are incurred in compliance scenarios (ss 20, 23, 29).
• Senior officers to whom functions may be delegated: Delegation is restricted; chief officers may delegate functions related to granting, variation and cancellation of authorities only to senior officers defined by rank or position (s 36). Delegation cannot extend beyond what s 36 allows.
• Law enforcement officers: Law enforcement officers may apply for authorities (s 5) and, if authorised, may acquire and use assumed identities in the course of duty (s 21(1)). They are criminally liable if they intentionally/knowingly/recklessly misuse an authority (s 31). They may be indemnified by their agency for liabilities arising from lawful authorised conduct, subject to regulations (s 23).
• Authorised civilians: Non-law-enforcement persons may be authorised to acquire or use assumed identities only if the chief officer is satisfied it would be impossible or impracticable for a law enforcement officer to do so (s 6(2)(c)). Civilians require a supervisor appointed by the chief officer (s 6(3)), and their authority is limited in time to a maximum three months unless renewed (s 7(2)(h)(iii), s 8(2)-(3)). Civilians face the same misuse offence (s 31) and indemnity framework (s 23).

Issuing agencies and their officers

• Government issuing agencies: These are entities performing government functions and named in an authority (s 3). The chief officer of a government issuing agency must comply with requests made under s 15 or s 26 within a reasonable period (ss 16(1), 27(2)). If the agency produces evidence under Part 3 or Part 5, the chief officer (or officer) must cancel it if directed (s 18, s 28). Officers who comply with requests or directions are protected from criminal liability for doing so (s 19). The requesting law enforcement agency must indemnify an issuing agency and its officers for liabilities incurred while complying, where regulatory requirements are met (s 20). Thus government issuing agencies are compelled actors in the process, with statutory protections and financial indemnity.
• Non-government issuing agencies: The chief officer of a non-government issuing agency may comply with requests but is not required to do so (ss 17, 27(3)). If they do comply and incur liability, the requesting law enforcement agency must indemnify them subject to regulations (s 20(2)). Non-government issuing agencies therefore retain discretion but face incentives to condition compliance on indemnity arrangements.

Judiciary and registry actors

• Supreme Court and the Registrar: The Supreme Court decides whether to make Register entries or issue certificates under s 11, based on an application by a law enforcement chief officer and the Court’s satisfaction the order is justified given the nature of the activities. Applications are heard in closed court (s 11(4)). The Registrar of Births, Deaths and Marriages must give effect to court orders within the period stated or, if none stated, within 28 days (s 11(5)). The Registrar may create supporting records (s 11(2)). When cancellation orders are made, the Registrar must effect them within 28 days (s 13(4)).

Other affected groups

• Ministers and Parliament: The chief officer must deliver an annual report to the Minister, who decides whether to exclude sensitive material before the report is laid before Parliament (s 33(1)-(4)). The Minister therefore exercises a gatekeeper function over parliamentary disclosure of operational detail.
• The public and individuals whose identities are affected by entries or disclosures: The Act limits public access to information about applications and orders regarding Register entries by providing for closed court hearings (s 11(4), s 13(3)) and restricting searches of court custody information in relation to those proceedings unless a judge orders otherwise in the interests of justice (s 14). Individuals and the public thus face constrained visibility into the creation and cancellation of official records made under the Act.

Who pays and who bears risk

• Law enforcement agencies carry indemnity and cost risk: The law enforcement agency that requests or directs issuing agencies to produce or cancel evidence must indemnify the issuing agency and its officers for liabilities and reasonable costs incurred by them in complying, provided any regulatory requirements are met (s 20(2)). The agency must also indemnify authorised persons acting under an authority (s 23(2)). Regulations can impose requirements that condition indemnity (ss 20(2)(b), 23(2)(c), 29(2)(b)).
• Operational oversight and internal control costs fall on law enforcement agencies: Record-keeping, audits at least every six months, review of authorities annually, supervisor appointment and management, court applications and ongoing administration require resourcing (ss 10, 34-35). The chief officer must both oversee and report on these functions (ss 10, 33, 34, 35).

Enforcement exposure

• Authorised persons can be criminally prosecuted for misuse (s 31), and disclosure by any person can be prosecuted (s 32). The Act does not itself specify which prosecuting agency brings such prosecutions; the statutory offences exist regardless of prosecutorial practice.

In sum, the statutory design concentrates decision-making with law enforcement chief officers and places financial and administrative burdens on law enforcement agencies while compelling government issuing agencies to comply with requests and offering limited protections and indemnities to issuing agencies and to authorised persons when regulatory conditions are satisfied.

The Act creates a network of statutory duties (to apply, to decide, to comply, to report, to indemnify, to keep records, to audit) and correlative rights and protections (to use identity evidence, to be indemnified, to be protected from criminal liability).

Duties imposed on law enforcement agencies and chief officers

• Application and decision duties: A law enforcement officer may apply for an authority (s 5(1)). The chief officer may grant or refuse on consideration of the application and any additional information requested (ss 5(4), 6(1)). Before granting, the chief officer must be satisfied on reasonable grounds that the assumed identity is necessary for investigation/intelligence-gathering, that the risk of abuse by the authorised person is minimal, and, if for a civilian, that it is impossible or impracticable for a law enforcement officer to do the task (s 6(2)). These statutory thresholds are the formal decision-making criteria that must be recorded and are subject to internal review obligations (s 10).
• Supervision duty: If an authority is granted to an authorised civilian, the chief officer must appoint a law enforcement supervisor to supervise the acquisition or use of the assumed identity; the supervisor must meet specified rank requirements (s 6(3)-(4)).
• Review and cancellation duties: Chief officers must conduct periodic reviews at least every 12 months to determine whether continued use is necessary and must cancel where it is no longer necessary (ss 10(1)-(4), 9(1)(b)). The chief officer must give written notice of any variation or cancellation to the authorised person and, if a civilian, to the supervisor (s 9(2)-(3)); variation/cancellation takes effect on the notice date or later date stated (s 9(4)).
• Court application duties: To obtain Register entries or certificates, the chief officer must apply to the Supreme Court under s 11; to cancel such entries the chief officer must apply under s 13 where the cancellation of the authority has already occurred (ss 11(3), 12(2), 13(2)). Where the chief officer cancels an authority that resulted in a Register entry, the chief officer must apply for cancellation within 28 days (s 12(2)). Applications under s 11 and s 13 are to be heard in closed court (ss 11(4), 13(3)).
• Reporting and record-keeping duties: The chief officer must submit an annual report to the responsible Minister containing specified information such as numbers of authorities granted and refused, descriptions of activities, fraud or unlawful activity identified by audit, and other information the Minister considers appropriate (s 33(1)). The chief officer must advise the Minister of any information that should be excluded before the report is laid before Parliament and the Minister must exclude in the circumstances prescribed (s 33(2)-(3)). The chief officer must cause appropriate records to be kept that include dates, names, details of requests to issuing agencies, nature of duties undertaken, financial transactions and review details (s 34). The chief officer must also arrange audits of those records at least every six months while an authority is in force and at least once in the six months after cancellation or expiry, and must ensure audits are conducted by a person not involved in granting or authorisation (s 35).
• Indemnity duties: If the law enforcement agency makes a request under s 15 or s 26 or gives a direction under s 18, the law enforcement agency must indemnify the issuing agency and any officer for liabilities incurred in complying, provided regulatory requirements are met (s 20(1)-(2)). Similarly, where the chief officer grants an authority, the law enforcement agency must indemnify the authorised person for liabilities incurred in the course of acquiring or using an assumed identity in accordance with the authority, again subject to regulatory requirements (s 23(1)-(2)). For cross-jurisdiction requests, the same indemnity principle applies (s 29).

Duties and powers of issuing agencies

• Duty to comply for government issuing agencies: When a government issuing agency receives a properly made request under s 15, the chief officer of that agency must comply with the request within the reasonable period stated (s 16(1)). For requests from participating jurisdictions under s 27, government agencies must comply within the reasonable period stated (s 27(2)).
• Discretion for non-government issuing agencies: Non-government issuing agencies may comply at their discretion (ss 17, 27(3)). That discretion allows non-government entities to negotiate conditions, including indemnity arrangements, before complying.

Rights and protections

• Protection from criminal liability for issuing-agency officers: Officers who comply with a request or direction under s 15 or s 18 are not criminally responsible for offences that would otherwise arise from doing the thing (s 19).
• Protection from criminal liability for authorised persons: Authorised persons who do something in the course of acquiring or using an assumed identity in accordance with an authority are not criminally responsible for the thing, provided that for officers it is in the course of duty and for civilians it is in accordance with supervisor directions, and provided doing the thing would not be an offence if the assumed identity were the person's real identity (s 22).
• Statutory indemnities: The law enforcement agency must indemnify issuing agencies, officers and authorised persons for liabilities incurred because of compliance or authorised action, where regulatory requirements are satisfied (ss 20, 23, 29). These indemnities are contractual/statutory protections that shift financial exposure back to the requesting agency.
• Limited delegation but clear chains of responsibility: The Act restricts delegation of chief officer functions to specified senior officers (s 36). This provides clarity about who is accountable for granting, varying and cancelling authorities.

Limitations and exclusions

• Particular qualifications exception: Sections 22 and 23 do not apply where a particular qualification is necessary to do the thing and the person does not have that qualification (s 24(1)-(2)). The Act clarifies that possession of a document indicating the qualification does not cure the lack of the real qualification.
• Publication and secrecy limits: Court applications for Register entries and cancellations are to be heard in closed court (s 11(4), s 13(3)), and s 14 limits access to information in relation to those proceedings unless a judge orders otherwise.

Rights to challenge or seek review

• The Act provides for internal reviews by the chief officer (s 9(1)(b) requires cancellation if satisfied on a review that use is no longer necessary), and records and audit mechanisms intended for internal control (ss 10, 34-35). The Act does not specify external appeal mechanisms or rights of third parties to challenge decisions; where the Supreme Court itself makes entries or cancellation orders, the usual judicial processes would apply to those court proceedings. The statutory text does not create or name a specific external review body, nor does it state appeal rights from chief officer decisions within the Act.

In short, the Act creates mandatory duties on chief officers and government issuing agencies, discretionary roles for non-government issuing agencies, statutory protections and indemnities for compliance and authorised activity, and internal oversight through records, audit and annual reporting. The indemnities and the regulation-making power mean that some of the operation of these duties depends on regulations yet to be considered.

The Act creates criminal offences targeted at misuse of assumed identities and unauthorised disclosure of information about assumed identities, and sets out penalties. It also provides protections for certain actors and indemnity mechanisms, while prescribing internal audit and reporting obligations as a form of administrative enforcement.

Criminal offences and penalties

• Misuse by authorised persons (s 31): An authorised officer is guilty of an offence if they intentionally, knowingly or recklessly acquire evidence of, or use, an assumed identity covered by their authority when they know, or are reckless as to whether, the acquisition or use is not in accordance with the authority or not in the course of duty. The same conduct by an authorised civilian is criminal where it is not in accordance with the authority or the supervisor’s directions. The prescribed penalty for each such offence is imprisonment for a term not exceeding two years (s 31(1)-(2)).
• Disclosure offence (s 32): A person is guilty of an offence if they intentionally, knowingly or recklessly disclose information and know or are reckless that the information reveals, or is likely to reveal, that an assumed identity used by another person is not the other person's real identity, and the disclosure is not made in connection with the administration or execution of this Act, in relation to legal proceedings arising from the Act, or in accordance with any requirement imposed by law (s 32(1)(a)-(c)). The base penalty is imprisonment for up to two years. A higher penalty applies where the disclosure is committed with intent to endanger health or safety, or where the person knows or is reckless that disclosure endangers safety or prejudices an investigation or intelligence-gathering; the penalty in these aggravated circumstances is imprisonment for up to four years (s 32(2)).
• Culpability standard: Many offences apply where the actor intentionally, knowingly or recklessly does the prohibited act (s 31, s 32). The Act defines "reckless" in s 4, requiring awareness of a substantial risk and that it would be unjustifiable to take the risk. Whether conduct is "reckless" is a question of fact (s 4(3)).

Protections that affect enforcement exposure

• Protection from criminal liability for issuing-agency officers (s 19): Officers of an issuing agency who do something that would otherwise be an offence are not criminally responsible for the offence if they act to comply with a request under s 15 or a direction under s 18.
• Protection and indemnity for authorised persons (ss 22-23): Provided the authorised person acts in accordance with an authority and in the course of duty (or subject to supervisor directions for civilians), they are protected from criminal liability for conduct that would otherwise be an offence, and the agency must indemnify them for liabilities incurred, subject to regulatory requirements. However, protections do not apply where a particular qualification is required and not possessed (s 24).

Administrative enforcement and oversight

• Audits and reporting as enforcement mechanisms: The Act requires the chief officer to ensure records are kept (s 34), and to arrange audits of those records at least every six months while an authority is in force and at least once in the six months after cancellation or expiry (s 35). The person conducting the audit cannot be one who granted, varied or cancelled the authorities or who is or was an authorised person under those authorities (s 35(3)(b)). Audit results are reported to the chief officer (s 35(4)). These provisions create administrative accountability and a basis for detecting misuse or unlawful activity, which the chief officer must report annually to the Minister (s 33(1)(d)).
• Ministerial and parliamentary oversight: The chief officer must report annually to the Minister and the Minister must lay a copy of the report before Parliament within 15 sitting days of receipt, subject to exclusions for material that could endanger safety, prejudice investigations, or compromise operational activities (s 33(1)-(4)). This creates a mechanism for parliamentary scrutiny but allows the executive to redact sensitive material.
• Court supervision where Registers are involved: Supreme Court orders are required to create or cancel Register entries and certificates (ss 11-13). Those applications are to be heard in closed court (s 11(4), s 13(3)) and court custody information about the proceedings is not searchable except by judge’s order in the interests of justice (s 14). The judiciary thus plays a gatekeeping role where official Register entries and certificates are sought.

Who enforces criminal offences

• The Act creates offences but does not specify prosecutorial or enforcement agencies in the text. Enforcement of criminal offences in practice would follow ordinary criminal procedure and prosecutorial practice in the jurisdiction; the Act itself establishes substantive offences and penalties (ss 31-32).

Implementation levers affecting enforcement

• Regulation dependence for indemnities: The indemnities in ss 20, 23 and 29 operate only where "any requirements prescribed under the regulations have been met" (s 20(2)(b), s 23(2)(c), s 29(2)(b)). The details of those requirements will therefore affect who is shielded from liabilities and the circumstances in which indemnity will be available. The Act gives the Governor power to make regulations and to prescribe differential application (s 37), thereby creating a regulatory lever that could expand, contract or condition indemnity and compliance mechanisms.

Sanctions for failing to meet administrative duties

• The Act does not set express penalties for failure to comply with administrative obligations such as record-keeping (s 34), arranging audits (s 35), conducting reviews (s 10), or reporting (s 33). Non-compliance with these administrative duties would be subject to internal accountability, ministerial oversight and any other law or regulations that might apply, but the statutory text does not itself prescribe criminal or civil penalties for those failures.

Summary

The Act establishes custodial offences for misuse and disclosure with maximum terms of two and up to four years, provides statutory protections and indemnities for compliant conduct contingent on regulations, creates administrative enforcement through mandated records, audits and reporting, and restricts external access to court proceedings connected to Register entries. The actual operation of indemnities, and therefore the financial and liability exposure of issuing agencies and authorised persons, is sensitive to the content of regulations. The Act creates criminal exposure primarily for authorised persons and for anyone who discloses information that reveals an assumed identity without lawful purpose, while offering protections for those who comply with statutory processes.

The Act is designed to operate alongside, and make express references to, other instruments and legal regimes. Key interactions and dependencies specified in the text include birth, death and marriage registration law, cross-jurisdictional cooperation, general criminal law, and administrative law processes.

Interaction with birth, death and marriage registration law

• Register and Registrar: The Act uses the term Register and Registrar as defined in the Births, Deaths and Marriages Registration Act 1999 (s 3). The Supreme Court may order the Registrar to make an entry in the Register or issue a certificate of birth, death or marriage in relation to an assumed identity under an authority or corresponding authority (s 11(1)).
• Creation and cancellation of Register entries: Creation of Register entries or certificates must be by Court order (s 11), and cancellation of those entries is also by Court order under s 13, exercisable only on application by the same chief officer who applied under s 11 (s 13(2)). Where a chief officer cancels an authority and there is an entry in the Register resulting from a s 11 order, the chief officer must apply for cancellation under s 13 within 28 days (s 12(2)). These provisions create an interaction whereby the ordinary statutory regime for vital records is temporarily modified by court orders to support law enforcement activities, but the modification must occur through formal judicial process using the Registrar as the operational agent.
• Registrar’s ancillary records: The Registrar may create supporting records deemed necessary to support the entry or certificate made under a Court order (s 11(2)). The Registrar must effect cancellation orders within 28 days (s 13(4)). The Act therefore creates a judicially authorisable exception to ordinary registration practice.

Cross-jurisdictional and federal interactions

• Corresponding laws and participating jurisdictions: The Act contemplates corresponding laws in other jurisdictions, and defines "corresponding law" to include laws declared by the regulations to correspond to this Act (s 3). The Act provides for mutual recognition and mutual assistance by allowing chief officers to make requests to issuing agencies in participating jurisdictions (s 26) and to respond to requests from participating jurisdictions (s 27). It also makes certain provisions of this Act apply to corresponding authorities as if they were authorities granted under s 6 (s 30). This establishes a formal mechanism for interstate and potentially federal cooperation.
• Referenced Commonwealth Act: The definition of "Australian Crime Commission" uses the Australian Crime Commission Act 2002 of the Commonwealth (s 3), and s 11(3)(a)(iii) allows the chief officer of a Commonwealth participating agency within the meaning of Part 1AC of the Crimes Act 1914 to apply to the Supreme Court for Register entries. The Act therefore contemplates interaction with federal investigative agencies where they are participating agencies under Commonwealth law.

Criminal law and qualifications exceptions

• Protection conditional on substantive law: Sections 22 and 23 provide protection from criminal liability and indemnity for authorised acts but include a qualification that protection does not apply where a particular qualification is needed and the person lacks it (s 24). That interacts with other statutes or regulatory regimes where licencing, registration or specific professional qualifications are required by law to do particular acts; the Act explicitly leaves liability exposure where the substantive law requires a qualification that the authorised person does not have.

Administrative law and delegation

• Delegation limits: The Act restricts delegation of chief officer functions, permitting delegation only to senior officers defined by rank or position for specified functions related to granting, variation and cancellation of authorities (s 36). This creates an internal administrative hierarchy and interacts with general public sector governance norms and administrative law. The Act does not create an express private right of appeal from chief officer decisions; judicial review or other remedies available under general administrative law remain the potential avenues for external challenge, although the Act itself does not specify them.

Evidence and legal proceedings

• Use of evidence in proceedings: Section 32(1)(c) exempts disclosures made "in connection with the administration or execution of this Act or a corresponding law" and disclosures "for the purposes of any legal proceeding arising out of or otherwise related to this Act" from the disclosure offence. This permits the use of identity-related information where necessary for lawful proceedings, while criminalising extraneous disclosures. The Act also references "any requirement imposed by law" as a further lawful ground for disclosure (s 32(1)(c)(iii)).

Regulations and consequential law

• Regulations: The Governor may make regulations for the purposes of the Act and may apply regulations differently according to specified factors (s 37). The regulations may authorise matters to be determined or regulated by persons or bodies specified in the regulations (s 37(3)). Crucially, several of the Act’s indemnity provisions condition indemnification on satisfaction of "any requirements prescribed under the regulations" (ss 20(2)(b), 23(2)(c), 29(2)(b)). The content of such regulations will therefore materially interact with the operational availability of indemnities and thus with issuing agencies’ willingness to comply and with authorised persons’ exposure to liability.
• Administrative Arrangements Act: Section 38 assigns administration of the Act to the Minister for Justice and Workplace Relations and the Department of Justice until otherwise ordered under the Administrative Arrangements Act 1990. That determines which portfolio and department implements and coordinates the Act, and thus which machinery of government arrangements will be used to make regulations and guidance.

Records, privacy and public access law

• Closed court hearings and restricted access to court records: Sections 11(4), 13(3) and 14 restrict public and third-party access to Court proceedings and any material in custody of the court in relation to applications under s 11 or s 13. This creates a specific statutory limitation on public access to court-held material in these limited contexts and intersects with general public access to court records. Data protection and privacy obligations under other statutes are not expressly modified by this Act, but the Act’s secrecy provisions and the indemnity regime may affect how agencies handle the data in practice.

In summary, the Act is designed to operate alongside existing registration law for births, deaths and marriages, create cross-jurisdictional reciprocity with corresponding laws, and interact with general criminal and administrative law. Key operational dependencies and legal interactions are mediated by the regulations, which can condition indemnities and other procedural matters, and by Court orders that manipulate Register entries, subject to closed hearings and restricted access. Users and administrators of the Act must therefore plan both for the statutory processes it prescribes and for the interlocking obligations and constraints imposed by other legal regimes.

The text supplied is the Act as enacted and does not include any amendment schedule, legislative history or later amendment provisions within the document. The document records the short title as the Police Powers (Assumed Identities) Act 2006 and states that the Act "commences on a day to be proclaimed" (ss 1-2). No amending Acts, dates of amendment, or historical notes on statutory modification are present in the provided text.

What the Act itself authorises in respect of change

• Regulations: The Act grants the Governor power to make regulations for the purposes of the Act, including differential application and authorising matters to be determined by persons or bodies specified in regulations (s 37). Because the indemnity provisions in ss 20, 23 and 29 are expressly conditional on "any requirements prescribed under the regulations" having been met, the regulations may be used to alter operational requirements materially without amending the Act itself (s 20(2)(b), s 23(2)(c), s 29(2)(b)). In practical terms, this means the regulatory instrument that follows could produce significant operational change even absent formal amendment of the Act.
• Delegation rules: The Act restricts delegation of chief officer functions but allows delegation to senior officers as defined (s 36). Any change to that framework would require amendment to the Act.
• Corresponding laws: The Act allows regulations to declare that laws of other jurisdictions correspond to this Act (s 3 definition of "corresponding law" includes laws "declared by the regulations to correspond"). Thus regulations can expand the set of participating jurisdictions and modify mutual recognition arrangements without primary legislative amendment.

Information absent from the supplied text

• No schedule listing the dates when the Act was passed, no notes of amendments or editorial notes indicating subsequent legislative change, and no identification of regulations made under s 37 are included in the supplied text. If the user requires the statute’s amendment history, subsequent versions or regulation instruments, those will need to be retrieved from an official statutory database or the relevant parliamentary records. This Act as supplied contains the operative provisions but not any post-enactment legislative history or lists of regulations.

Consequences for practitioners

• Because the Act’s indemnities and some operability depend explicitly on "requirements prescribed under the regulations" and because the definition of "corresponding law" can be filled by regulation, practitioners should treat the statutory text provided as a baseline and verify the operative regulatory instruments and any subsequent amending Acts when advising on current practice. The absence of amendment history in the text means regulatory instruments and potentially amending legislation must be checked to assess present obligations, indemnities and cross-jurisdictional arrangements.

The supplied Act text does not list any decisions or cases that interpret or apply the Act. The statutory text itself establishes a role for the Supreme Court in making and cancelling Register entries and certificates in closed hearings (ss 11-13) and provides for restricted access to court-custodied materials in relation to those proceedings (s 14). These procedural features will shape any future litigation arising under the Act.

What the Act prescribes about litigation procedures

• Closed court hearings for Register orders: Applications under s 11 to have the Registrar make an entry in the Register or issue a certificate must be heard in closed court (s 11(4)). Likewise, applications to cancel entries under s 13 must be heard in closed court (s 13(3)). The Act also creates a restriction on searching court custody information concerning those proceedings; a person is not entitled to search such information unless a judge orders otherwise in the interests of justice (s 14(1)). These constraints will limit public reporting and access to procedural materials in cases where Register entries or cancellations are sought.
• Applicant standing for Register orders: Only specific persons may apply under s 11, namely the chief officer of a law enforcement agency, the chief officer of a law enforcement agency under a corresponding law, or the chief officer of a Commonwealth participating agency within specified Commonwealth law provisions (s 11(3)(a)(i)-(iii)). For cancellation under s 13, only the chief officer who applied for the original order may apply for cancellation (s 13(2)). This limits standing to the law enforcement applicant rather than wider public or third-party applicants.
• Evidentiary and disclosure limits: Section 32 protects against unauthorised disclosure of assumed-identity information but permits disclosure in connection with administration or execution of the Act or for legal proceedings arising out of or related to the Act (s 32(1)(c)). This creates a legal pathway for disclosure to support litigation related to the Act but criminalises extraneous disclosures.

Implications for future litigation

• Restricted public records: The statutory confidentiality and closed-court rules will reduce the amount of publicly available material about applications for Register entries and cancellations. Any reported litigation that involves Register orders will likely be limited to what the Court permits to be disclosed. That may affect the availability of precedent or public law analysis based on such proceedings.
• Judicial role in authorisation for Register manipulation: Because the Supreme Court assesses whether a s 11 order is "justified, having regard to the nature of the activities undertaken or to be undertaken by the officer or person under the authority or corresponding authority" (s 11(3)(b)), there is scope for judicial evaluation of whether particular investigative activities warrant the production of official registration documents. That judicial function provides a potential judicial check on executive use of Register manipulation powers.
• No statutory appeal framework for chief officer decisions: The Act does not specify internal or external appeal mechanisms from chief officer decisions to grant or refuse authorities. Challenges to chief officer decisions would therefore, if pursued, rely on general administrative law remedies such as judicial review, subject to any relevant statutory privative clauses or procedural bars outside the text. The Act itself does not limit such remedies; the Act simply does not create statutory rights of appeal.

Absence of named cases

• The Act as supplied does not include any litigation history, reported decisions, or case names. Practitioners seeking to understand judicial interpretation of ambiguous provisions such as the test for "justified" in s 11, the content of "reasonable grounds" in s 6(2), or the boundary between lawful authorised conduct and misuse will need to consult case law databases for any subsequent decisions applying or interpreting the Act.

Practical note

• Because Register-related proceedings are to be heard in closed court, any litigation arising from or about those orders may generate limited public precedent. Practitioners should therefore be prepared to rely heavily on the statutory text, on related administrative law principles, and on any available regulatory or departmental guidance when advising clients or preparing applications under the Act.

This Act contains several non-obvious traps and operational pitfalls that practitioners and compliance officers should be aware of. Each item below cites the relevant provision and explains the concrete mechanism.

1. Two distinct routes to identity evidence, with different requirements and limits

   • Court orders are required to create Register entries or issue birth, death or marriage certificates (s 11). By contrast, administrative requests under s 15 may obtain "evidence similar to that ordinarily produced or given by the issuing agency" but explicitly cannot be used to obtain Register entries or certificates (s 15(4)). Attempting to secure a Register entry via an administrative request under s 15 is not available.

2. Closed court process limits transparency and public oversight

   • Applications under s 11 and s 13 must be heard in closed court (ss 11(4), 13(3)). Access to court-custodied materials in relation to these proceedings is restricted except by judge’s order in the interests of justice (s 14). This reduces public visibility into the judicial process for Register manipulation.

3. Indemnities are conditional on regulations

   • The law enforcement agency’s duty to indemnify issuing agencies, officers and authorised persons is triggered only where "any requirements prescribed under the regulations have been met" (ss 20(2)(b), 23(2)(c), 29(2)(b)). If regulations are not yet in force or if requirements are not met, indemnities may not be available and issuing agencies may face exposure. Practitioners must check the regulations.

4. Government issuing agencies must comply; non-government issuing agencies may refuse

   • Government issuing agencies are required to comply with properly made requests (s 16(1), s 27(2)). Non-government agencies may comply but are not compelled (ss 17, 27(3)). Expect negotiation and possible refusal from private sector issuers, and verify whether the issuing agency is named in the authority as required (s 7(3)(a)).

5. Supervisor and rank requirements for civilians are strict

   • If an authorised civilian is used, the chief officer must appoint a supervisor who meets rank requirements: at least sergeant for Police, or senior investigator rank for the Australian Crime Commission (s 6(4)). Authorities for civilians must state the supervisor and have a specified period not exceeding three months (s 7(2)(h)(i)-(iii)). Failure to meet these requirements could strip protections and indemnities.

6. Protections exclude activities requiring particular qualifications

   • Sections 22 and 23 do not apply to acts where a particular qualification is required and the authorised person lacks it (s 24). Possessing a document that merely indicates the qualification is insufficient. This catches scenarios where creating or using certifications or licences would otherwise require professional or statutory qualifications.

7. Recklessness standard is fact-intensive

   • The Act defines "reckless" (s 4) and several offences apply where a person is "reckless" about the existence of variation/cancellation (s 25) or about whether actions are in accordance with the authority (ss 31-32). Because recklessness depends on knowledge of substantial risk and unjustifiability, both factual proof and careful record-keeping about notices and instructions are vital.

8. Authorities can be varied or cancelled at any time by the chief officer

   • The chief officer may vary or cancel an authority at any time (s 9(1)(a)) and must cancel if on review they are satisfied that continued use is not necessary (s 9(1)(b), s 10(4)). Authorities can become ineffective with immediate effect upon notice (s 9(4)(a)). Authorised persons who fail to monitor notice dates may unwittingly commit misuse offences, though s 25 provides protection where the person is unaware and not reckless.

9. Duties to cancel Register entries follow strict timelines

   • When an authority that resulted in a Register entry is cancelled, the chief officer must apply to the Court to cancel the entry within 28 days (s 12(2)). Missing this deadline could leave a register entry in place longer than intended and raise operational or privacy complications.

10. Audits must be independent of those who authorised or used identities

    • Audits of records must not be conducted by a person who granted, varied or cancelled the authorities or who is or was an authorised person under the authorities (s 35(3)(b)). Agencies must appoint independent auditors and ensure audit schedules meet the statutory six-month cycle.

11. Annual report must be laid before Parliament but may be redacted

    • The chief officer must provide an annual report to the Minister (s 33(1)), and the Minister must lay the report before both Houses within 15 sitting days (s 33(4)), but the Minister may exclude information the chief officer advises could endanger safety, prejudice investigations or compromise operational methodologies, and must exclude such material if satisfied (s 33(2)-(3)). This creates a controlled transparency regime that can limit public scrutiny.

12. Non-obvious distinction between "acquire an assumed identity" and "use" it

    • The definition in s 3 treats "acquire" as including taking steps to acquire evidence, and "use" as representing the identity to be real. Practical processes must treat the acquisition of documents and the operational representation as distinct compliance steps each bound by the authority.

13. Cross-jurisdictional requests require the participating jurisdiction and may trigger different compliance regimes

    • The Act contemplates requests to issuing agencies in participating jurisdictions (s 26) and reciprocal requests into this jurisdiction (s 27). Practitioners must check whether a jurisdiction is a participating jurisdiction under regulations or corresponding law and whether local administrative rules apply.

14. Criminal offences apply to anyone disclosing information, not only authorised persons

    • The disclosure offence in s 32 is not limited to authorised persons, but applies to any person who discloses information revealing an assumed identity, except in defined lawful situations. Media, private investigators, or third parties could potentially be exposed.

15. The Act does not itself specify appeal routes for chief officer decisions

    • The text does not set out appeal mechanisms against chief officer decisions to grant or refuse an authority. Judicial review remains a potential remedy but the Act does not provide explicit procedural routes for challenge.

These "gotchas" follow directly from the Act’s wording and indicate areas where procedural missteps, regulatory gaps, or lack of awareness of technical distinctions can produce legal exposure or operational failure.

This section translates the statutory mechanics into a practical compliance checklist for law enforcement agencies, issuing agencies (government and non-government), authorised persons, supervisors and legal advisers. Each step maps to specific statutory provisions.

For law enforcement agencies and chief officers

1. Prepare application materials consistent with s 5

   • Ensure every application for an authority is in writing in the form approved by the chief officer and contains the required content: applicant name, name of person to be authorised, for civilians the proposed supervisor and explanation of necessity, details of the proposed assumed identity, reasons for need, details of the investigation or intelligence-gathering exercise, details of any issuing agencies and types of evidence to be issued, and details of any intended application to the Supreme Court under s 11 (s 5(3)(a)-(viii)).
   • If additional information is necessary, promptly provide it in response to any chief officer request under s 5(4).

2. Apply the statutory decision criteria under s 6(2)

   • Document the reasonable grounds relied upon: necessity for investigation or intelligence-gathering into criminal activity; assessment and evidentiary basis for minimal risk of abuse; and, where the applicant is a civilian, why it is impossible or impracticable for a law enforcement officer to perform the task (s 6(2)(a)-(c)). Keep written records of the decision rationale and supporting material for audit and potential review.

3. If authorising civilians, ensure supervisor appointment and rank compliance

   • Appoint a supervisor who meets the rank or position requirements (sergeant or above for Police; senior investigator or above for Australian Crime Commission) under s 6(4). Record the appointment formally in the authority (s 7(2)(h)(ii)).

4. Draft the authority in the approved written form and include required particulars

   • The authority must state the granter’s name and date, details of the assumed identity, the evidence that may be acquired, any conditions, the reason for granting, and the authorised person’s name if an officer. For civilians, include supervisor name and the authority period not exceeding three months (s 7(1)-(2)). State issuing agencies to which requests may be made and whether an application for a Register entry or certificate under s 11 is authorised (s 7(3)(a)-(b)).

5. Address requests for issuing-agency compliance under s 15

   • If the authority authorises a request under s 15, prepare a request that names the issuing agency, states the evidence to be produced and gives a reasonable period for compliance (s 15(2)-(3)). Remember s 15 cannot be used to obtain Register entries or certificates (s 15(4)).

6. Use the Court for Register entries and certificates if needed

   • If a Register entry or certificate is required, make a s 11 application to the Supreme Court. The applicant must be the chief officer or an equivalent chief officer from a corresponding law or specified Commonwealth participating agency (s 11(3)(a)). Prepare material to show that an order is justified given the nature of anticipated activities; be prepared for the application to be heard in closed court (s 11(4)) and for the Registrar to be required to effect the order within any stated period or within 28 days (s 11(5)).

7. Keep meticulous records and prepare for audits

   • Establish record-keeping systems that capture every authority’s grant date, variation, cancellation and the identity of the person making the decision; the name of the authorised person and the assumed identity; requests to issuing agencies; general nature of duties undertaken; financial transactions under the assumed identity; and review details (s 34(2)(a)-(f)). Arrange audits at least every six months while an authority is in force and at least once within six months after cancellation, and ensure auditors are not persons who granted or were authorised under the authority (s 35(1)-(3)).

8. Conduct periodic reviews and take cancellation action when no longer necessary

   • Review authorities at least once every 12 months to determine continued necessity and cancel if no longer necessary (s 10(1)-(4)). Provide written notice of variation or cancellation to the authorised person and the supervisor if a civilian (s 9(2)-(3)). If cancelling an authority that produced a Register entry, apply to the Court to cancel within 28 days (s 12(2)).

9. Ensure indemnity and regulatory preconditions are satisfied

   • Before making requests to issuing agencies or authorising acts that may expose issuing agencies or authorised persons to liability, ensure any requirements prescribed by regulations for indemnity are met (s 20(2)(b), s 23(2)(c), s 29(2)(b)). If regulations are silent or specific conditions exist, secure written indemnity undertakings and internal legal advice.

10. Produce the annual report and manage public disclosure risks

    • Prepare the annual report required by s 33, including the specified elements. Consult the Minister about any information that should be excluded before the report is laid before Parliament and document the reasons; the Minister will decide on exclusion consistent with s 33(2)-(3).

For government issuing agencies

1. Prepare administrative processes to respond within a reasonable period

   • Where a lawful request under s 15 or s 27 is received from a chief officer, the chief officer of a government issuing agency must comply within the reasonable period stated in the request (s 16(1), s 27(2)). Define internal procedures to accept, verify and fulfil such requests, and to create supportive records where necessary (s 16(2)).

2. Require appropriate authorisation and indemnity assurances if needed

   • Although government issuing agencies must comply, ensure that requests are accompanied by a valid authority and, where appropriate, evidence of indemnity or that regulatory preconditions for indemnity are satisfied under s 20. Document compliance and cancellation actions.

3. Implement cancellation and record-alteration procedures

   • If directed in writing to cancel evidence of an assumed identity, implement cancellation promptly as required by s 18 and s 28. Maintain logs of cancellations and directives received.

4. Train officers on protection from criminal liability

   • Officers who comply in good faith with s 15 requests or s 18 directions are protected from criminal liability under s 19. Train staff on verifying lawful requests and on record-keeping to demonstrate compliance with statutory duties.

For non-government issuing agencies

1. Build a compliance policy and a process for assessing requests

   • Since compliance is discretionary (s 17), establish a process to evaluate requests, request proof of authority and indemnity, and seek legal advice when the potential for liability exists.

2. Secure indemnity agreements before complying

   • Where compliance could expose the agency to liability, require written indemnity from the requesting law enforcement agency, and confirm that any regulatory preconditions for indemnity are met (s 20(2)).

For authorised persons and supervisors

1. Understand the limits of the authority and follow directions

   • Authorised persons must act strictly within the terms of their authority and, where civilians, follow supervisor directions (s 21(1)-(2)). Document instructions and maintain contemporaneous logs to show that conduct was in accordance with the authority.

2. Maintain awareness of variations and cancellations

   • Variations or cancellations take effect on the date notice is given unless a later date is specified (s 9(4)). Section 25 provides protection where a person is unaware and not reckless, but legal risk exists if a person is reckless about the existence of variation or cancellation. Keep updated records and confirm authority status regularly.

3. Do not undertake activities requiring a particular qualification unless qualified

   • Sections 22 and 23 protections do not apply if a particular qualification is needed and the person lacks it (s 24). Verify statutory or regulatory qualifications required for any act intended under an assumed identity.

4. Record financial transactions and operations

   • The records required under s 34 include general details of financial transactions entered into using the assumed identity. Maintain audited financial logs and receipts in a secure manner consistent with audit requirements.

For legal advisers and compliance teams

1. Review and interpret regulations

   • Because indemnities and the definition of corresponding laws can be conditioned by regulations, review current regulations under s 37 to confirm indemnity preconditions, any declaration of corresponding laws and participating jurisdictions, and other operational rules.

2. Advise on Court applications and closed-court practice

   • For s 11 applications, prepare material to show why a Register entry or certificate is justified and be ready to argue necessity in closed Court. Anticipate confidentiality protections and prepare redaction or public-interest arguments where appropriate.

3. Draft and review formal authorities and requests

   • Ensure authorities meet the content requirements set out in s 7 and that requests to issuing agencies include a reasonable period for compliance (s 15(3)). Record the reasons for decisions under s 6(2) and ensure decisions are documented for audits.

4. Prepare indemnity instruments and contractual arrangements

   • Coordinate indemnity instruments where required, and ensure those instruments satisfy any regulatory preconditions. Ensure internal budgeting for probable indemnity costs when planning operations.

5. Implement data handling, privacy and security safeguards

   • Given the sensitivity of identity evidence and the criminalisation of disclosure (s 32), create strict access controls, training and auditing to prevent unauthorised disclosure and to meet record-keeping and audit obligations (ss 32, 34, 35).

In practical terms, compliance requires procedural checklists tied to statutory steps: initial application (s 5), chief officer decision recorded against s 6(2) criteria, creation of a written authority conforming to s 7, supervisor appointment and period limitations where civilians are involved, correct route selection for obtaining evidence (s 11 for Register entries, s 15 for other issuing agency evidence), indemnity confirmations per s 20 and relevant regulations, secure and auditable record-keeping (s 34), semi-annual audits and post-cancellation audit (s 35), and annual reporting to the Minister and Parliament with ministerial clearance for redactions (s 33).