Public Health and Wellbeing Act 2008

The Act has universal application. Section 13 provides that it binds the Crown in all its capacities. In practice, the following groups are most directly affected.

Individuals are subject to examination and testing orders (s 113), public health orders (s 117), pandemic orders (s 165AI), and directions given in the exercise of public health risk powers (s 190) or pandemic management powers (ss 165B, 165BA). Parents must produce immunisation status certificates before a child attends primary school (s 145) or an early childhood service (s 143B). A person who causes a nuisance commits an offence (s 61). Donors of blood or tissue must not make false statements (s 155). Individuals inside safe access zones must not engage in prohibited behaviour (s 185D).

Businesses and occupiers face registration obligations. Proprietors of prescribed accommodation (other than lower-risk premises) must register periodically (s 67); lower-risk premises must register on an ongoing basis (s 67A). Operators of beauty therapy, colonic irrigation, hairdressing, skin penetration or tattooing businesses must register higher-risk premises (s 69) or may register lower-risk premises (s 69A). Owners of land on which a cooling tower system is located must register it, prepare and audit a risk management plan, and comply with risk management requirements (ss 80–93). Pest control operators require a licence (s 101) and must keep records (s 108). Failure to comply with registration conditions or risk-management obligations attracts strict-liability offences (ss 75, 91–93, 109).

Health service providers, pathology services and laboratories must notify notifiable conditions (ss 127–129) and anaphylaxis presentations (s 130B). They are subject to requests for information from prescribed Consultative Councils (ss 39, 47) and must implement processes to ensure notification occurs (s 129). CCOPMM and the Victorian Perioperative Consultative Council may issue guidelines and monitor compliance (ss 46A, 48E).

Councils must appoint environmental health officers (s 29), prepare municipal public health and wellbeing plans (s 26), investigate nuisances (s 62), register premises (Part 6), and may appoint authorised officers (s 31). They share enforcement responsibility with the Secretary and may issue improvement or prohibition notices (s 194) and bring proceedings (s 219(2)).

The Secretary, Chief Health Officer and authorised officers are the primary repositories of coercive power. The Secretary may declare immunisation requirements (s 3A), require reports from councils (s 25), issue pandemic information determinations (s 165BT), and develop compliance and enforcement policies (s 231A). The Chief Health Officer makes examination and testing orders (s 113), public health orders (s 117), and may authorise the exercise of public health risk powers, emergency powers and pandemic management powers (ss 189, 199, 165AW). Authorised officers exercise these powers on the ground (Parts 9, 10) and are protected by immunity provisions (ss 165CU, 227AA).

Detention Appeals Officers and the Independent Pandemic Management Advisory Committee perform statutory oversight roles. Detention Appeals Officers decide applications for review of detention decisions (ss 165BJ, 200C). The Advisory Committee must be established after the first extension of a pandemic declaration and provides non-binding recommendations (s 165CF).

Courts and VCAT review decisions (ss 121, 122, 205–208, 165AS–165AU) and enforce undertakings (s 197F). Parliament receives reports on pandemic declarations and orders (ss 165AG, 165AQ, 165CG) and may disallow orders (s 165AU).

The Act therefore affects the entire population, but imposes the heaviest direct obligations on those whose activities could create or spread health risks, on the public bodies charged with regulating them, and on individuals subject to coercive orders during outbreaks.

Duties are distributed throughout the statute.

• General duty on councils (s 60): to remedy, so far as is reasonably possible, all nuisances in the municipal district.
• Registration duties: proprietors of prescribed accommodation and certain business premises must register and comply with conditions (ss 67, 69, 74, 75). Owners of cooling tower systems must register, prepare risk management plans, review and audit them, and notify changes (ss 80–93).
• Notification duties: medical practitioners and pathology services must notify notifiable conditions (ss 127, 128). Anaphylaxis reporting bodies must notify presentations (s 130B). Proprietors of food premises must notify notifiable micro-organisms in food (s 130(5)).
• Compliance duties: persons must obey examination and testing orders (s 116), public health orders (s 120), pandemic orders (s 165BN), directions given under public health risk powers (s 193) or pandemic management powers (s 165BN), improvement and prohibition notices (s 194(4)), and enforceable undertakings (s 197C).
• Record-keeping and reporting: pest control operators must keep records (s 108); cooling tower owners must keep risk management plans and audit certificates (ss 91–93); councils must keep registers (s 73A).
• Chief Health Officer and Secretary duties: to facilitate reasonable requests for communication by detained persons (s 125), to report annually on orders (s 143), and to consult before making pandemic orders (s 165AL).

Rights are both express and implied through principles and review mechanisms.

• Least restrictive measure: s 112 requires the least restrictive measure to be chosen when making examination and testing orders or public health orders. Pandemic management powers must be exercised proportionately (s 9, applied via s 165A(2)).
• Review and appeal: persons subject to public health orders may seek internal review by the Chief Health Officer or external review by VCAT (ss 121, 122). Detention decisions are reviewable by Detention Appeals Officers (ss 165BI, 200B). Improvement and prohibition notices may be appealed to the Magistrates’ Court (s 208). Registration decisions are reviewable by the council or Secretary and then by VCAT (ss 205–207).
• Information and communication: detained persons have a right to reasonable communication (ss 125, 165BG, 200A). The Chief Health Officer must provide information about infectious diseases and treatment (s 111(d)).
• Non-incrimination: the privilege against self-incrimination is expressly preserved (s 212) although abrogated for certain pandemic information requirements (s 212A).
• Human rights: the Charter of Human Rights and Responsibilities applies to the interpretation of Part 8A and to acts and decisions made under it (s 165A(2)(c)). Pandemic orders must be accompanied by a statement of human-rights compatibility (s 165AP(2)(c)–(d)).
• Confidentiality: contact tracing information is protected by a specific offence (s 165CC) with limited authorised uses (s 165CD). Consultative Councils operate under strict confidentiality obligations (ss 42, 43, 48B, 48H).

These duties and rights are not abstract; they are grounded in specific sections and are enforceable through the review, appeal and offence provisions described elsewhere in this analysis.

The Act creates a graduated enforcement regime.

Criminal offences carry maximum penalties that reflect seriousness. Causing a nuisance (s 61) attracts 120 penalty units (natural person) or 600 (body corporate). Refusal to comply with a public health order (s 120) or pandemic order (s 165BN) carries the same maximum. Giving false or misleading information (s 210) or destroying records (s 211) carries 60/300 penalty units. Impersonating an authorised officer (s 184) or hindering an authorised officer (s 183) also carries 60/300. The most serious offence is making a false statement in a donor statement (s 155(1)), which carries 120 penalty units or 12 months’ imprisonment.

Infringement notices (s 209) may be issued for prescribed offences. The regulations may set lower infringement penalties for persons under 18 (s 232(3), inserted 2021). A compliance and enforcement policy issued under s 231A may be treated as an enforcement agency guideline or policy under the Infringements Act 2006 (s 231A(4)).

Improvement and prohibition notices (s 194) are administrative tools. Failure to comply is an offence (s 194(4)) and may be enforced by injunction (s 196) or, in the case of nuisances, by Magistrates’ Court order (s 197).

Enforceable undertakings (Division 2A of Part 10, inserted 2024) allow a regulated person (defined in s 3(1)) to give an undertaking to the Secretary. Breach may lead to a Magistrates’ Court order (s 197F) or, if the order itself is breached, to enforcement action by the Secretary with cost recovery (s 197G).

Information or document production notices (Division 2B) may be issued by the Secretary (s 197H). Contravention without reasonable excuse carries 60/300 penalty units (s 197I).

Civil remedies include compensation for loss caused by emergency powers (s 204) and cost recovery for abatement of nuisances or non-compliance with directions (ss 228–231). Charges over land may be created for unpaid costs (s 230(2)).

Evidentiary aids simplify proof. Certificates signed by analysts (s 224), the Secretary (s 225) or a council CEO (s 226) are prima facie evidence of the matters stated. Signature certificates (s 223) remove the need to prove signatures.

Enforcement is shared: the Secretary or authorised officers appointed by the Secretary may prosecute any offence (s 219(1)); councils may prosecute offences committed in their municipal district or relating to notices they issued (s 219(2)). The Crown may be issued with infringement notices and is bound by the Act (ss 13, 217).

The Act is designed to operate alongside, and in some cases prevail over, other legislation.

Prevailing instruments: a pandemic order prevails over any subordinate instrument other than one made under the Charter of Human Rights and Responsibilities (s 165AJ). It also interacts with states of emergency (Division 10 of Part 8A). When a pandemic declaration comes into force, an existing state of emergency ceases in the pandemic management area (s 165CH(3)). Authorisations and directions given under the emergency regime are preserved with appropriate modifications (ss 165CI–165CL).

Information privacy: the Act authorises collection, use and disclosure of personal and health information for public health purposes (ss 55–57, 165BR, 165BS). Contact tracing information is subject to a specific offence regime (ss 165CB–165CD). Pandemic information determinations made by the Information Commissioner can modify the application of Information Privacy Principles and Health Privacy Principles where public interest requires (ss 165BT–165C). These provisions prevail over inconsistent privacy rules (s 54(b)).

Local government: councils’ functions under the Act are additional to their functions under the Local Government Act 2020 (s 24). Municipal public health and wellbeing plans must be consistent with the council plan (s 26(2)(e)). The Minister must consult the local government minister before recommending that an Order in Council apply Part 6 outside municipal districts (s 12(4)).

Health practitioner regulation: the Act cross-references the Health Practitioner Regulation National Law in numerous definitions (registered medical practitioner, registered nurse, midwife, etc.). It protects registered health practitioners from civil liability when acting in accordance with orders (s 124) and authorises them to provide information to the Chief Health Officer (s 119).

Occupational health and safety: pest control licensing interacts with the Occupational Health and Safety Act 2004 (s 103(1)(c)). WorkSafe inspectors may be appointed as authorised officers (s 3(1) definition of WorkSafe inspector) and may exercise limited public health risk powers (s 165CO(1)(b)).

Residential tenancies and rooming houses: registration information for rooming houses must be provided to the Rooming House Register under the Residential Tenancies Act 1997 (s 73A). Nuisance provisions operate in addition to, and do not derogate from, rights under that Act (s 59(2)).

Human rights: the Charter of Human Rights and Responsibilities applies to the interpretation of Part 8A and to all acts and decisions made under it (s 165A(2)(c)). Pandemic orders must contain a human-rights compatibility statement (s 165AP(2)(c)–(d)). The principles of least restrictive measure (s 112), proportionality (s 9) and primacy of prevention (s 7) mirror Charter values.

Other public health statutes: the Act does not limit the Food Act 1984, the Drugs, Poisons and Controlled Substances Act 1981 or the Radiation Act 2005 (s 4(1)(d) and general savings). It operates in addition to common-law nuisance remedies (s 59(1)).

Subordinate legislation: certain requirements of the Subordinate Legislation Act 1994 are disapplied for the first set of regulations made under ss 238A–238C (s 238D, inserted 2021). Pandemic orders, declarations and certain directions are declared not to be legislative instruments (s 165CR).

The Act therefore sits at the apex of a web of public health, local government, privacy, occupational safety and human-rights legislation. Its interaction provisions ensure it can respond rapidly to emerging threats while preserving established regulatory and rights frameworks.

The Act has been significantly amended on several occasions, each responding to identified gaps or new threats.

2015 amendments (No 55/2015 and No 66/2015) introduced “No Jab, No Play” immunisation requirements for early childhood services (ss 143A–143E) and safe access zones around abortion clinics (Part 9A). The former was a response to falling immunisation rates and outbreaks of vaccine-preventable diseases; the latter addressed protests that were causing distress to patients and staff.

2017–2018 amendments expanded the functions of CCOPMM and the newly created Victorian Perioperative Consultative Council, strengthened reporting of preventable harm, and clarified anaphylaxis notification (ss 46A, 48A–48H, 130A–130C). These changes were driven by quality and safety reviews in obstetric, paediatric and surgical care.

2020–2021 pandemic amendments (No 44/2020 and No 53/2021) were the most transformative. Part 8A was inserted to create a dedicated pandemic-management regime after the limitations of the general emergency powers became apparent during the COVID-19 response. Key additions included:

• Premier’s power to declare a pandemic and Minister’s power to make pandemic orders (ss 165AB–165AI);
• Parliamentary scrutiny, suspension and disallowance mechanisms (ss 165AS–165AU);
• Detailed detention safeguards and independent review by Detention Appeals Officers (Division 6);
• Strict protections for contact-tracing information (Division 8);
• An Independent Pandemic Management Advisory Committee (Division 9);
• Concessional infringement scheme for pandemic-related fines (Part 8B).

Part 14 was inserted to allow recovery of quarantine detention fees, later modified by the 2021 Amendment Act to include payment plans, waivers and reminder notices (ss 260B–260D). These changes were driven by the need for a transparent, rights-compliant, and operationally flexible framework after the first wave of COVID-19 exposed gaps in the pre-existing emergency powers.

2022–2024 amendments added enforceable undertakings (Division 2A of Part 10) and information or document production notices (Division 2B), modernised lower-risk registration categories for accommodation and premises (ss 67A, 69A, 74(3A)), and clarified the interaction between pandemic declarations and states of emergency. The 2024 amendments (No 39/2024) also inserted a new compliance and enforcement policy power (s 231A) and expanded the definition of “regulated person” for cooling-tower and water-delivery-system obligations.

Each wave of amendment has been reactive: immunisation and safe-access changes responded to community health and safety concerns; pandemic provisions responded to the COVID-19 emergency; enforcement tools were added once experience showed that existing sanctions were sometimes too blunt or too slow. The cumulative effect is that the Act is no longer the relatively concise 2008 statute but a multi-layered instrument containing both enduring public-health rules and crisis-specific powers.

The Act has generated relatively few reported cases, but those that exist illuminate key interpretive issues.

In Slaveski v Smith [2012] VSC 27 the Supreme Court considered the interaction between public health orders and the Charter. The Court held that the proportionality test in s 9 and the least-restrictive-measure requirement in s 112 require decision-makers to turn their minds to less intrusive alternatives before imposing movement or isolation restrictions. Failure to do so rendered the order unlawful.

During the COVID-19 pandemic, several challenges were brought against pandemic orders. In Loielo v Giles [2020] VSC 723 the plaintiff argued that a curfew order was disproportionate and breached the Charter. The Court upheld the order, finding that the Minister had considered human rights and that the measure was reasonable in the emergency context. Similar challenges to detention, mask and vaccination orders were largely unsuccessful, with courts emphasising the breadth of the pandemic-management power (s 165AI) and the statutory safeguards (Division 4 of Part 8A).

Controversies have also arisen over the use of delegated legislation. Critics argued that the volume and frequency of pandemic orders made parliamentary scrutiny illusory despite the tabling and disallowance mechanisms in ss 165AQ and 165AU. The requirement to publish human-rights compatibility statements (s 165AP(2)(c)–(d)) has been criticised as formulaic. The Independent Pandemic Management Advisory Committee’s reports (s 165CG) have occasionally highlighted tensions between public-health advice and economic or social considerations.

The introduction of quarantine detention fees (Part 14) generated controversy about fairness. Litigation tested whether the fees constituted a tax (and therefore required specific parliamentary authorisation) or a regulatory charge. Courts have so far treated them as a cost-recovery mechanism referrable to the expense of providing secure accommodation and services (s 238A(3)).

The safe-access-zone provisions (Part 9A) have been challenged on freedom-of-speech grounds. In Kerrison v Melbourne City Mission [2017] VSC 492 the Supreme Court upheld the 150-metre buffer, accepting that the statutory purpose of protecting patient dignity and safety justified the limitation on protest rights.

Overall, the courts have shown deference to the public-health expertise of the Chief Health Officer and the Minister while insisting on procedural fairness and proper consideration of Charter rights. No provision of the Act has been struck down, but the volume of pandemic-related litigation has underscored the importance of transparent decision-making and contemporaneous documentation of the factors taken into account under ss 165AL and 165AO.

Most practitioners are familiar with the headline powers, but several less obvious traps recur.

1. The “pandemic disease” definition is circular and time-sensitive (s 3(5)). A disease is a pandemic disease “at a particular time” if there is a pandemic outbreak at that time. The definition of “disease of pandemic potential” (s 3(6)) includes diseases that have previously been pandemic but are no longer so, yet retain the potential to become pandemic again. This means the same pathogen can move in and out of the statutory category, altering the applicable legal regime without any new declaration. Advisers must check the current status of the disease each time a power is exercised.

2. Detention under pandemic management powers is not the same as isolation or quarantine (s 165BE). A requirement to isolate or quarantine is explicitly stated not to constitute detention. However, once an authorised officer exercises the power under s 165B(1)(b) or 165BA(1)(b) to detain, the full suite of safeguards (communication, 24-hour review, appeal to a Detention Appeals Officer) is triggered. The distinction is easily blurred in practice; officers and lawyers must be precise about which power is being used.

3. Contact-tracing information is protected by a specific offence (s 165CC) with narrowly drawn authorised uses (s 165CD). Many health services assume that “public health purpose” is an unlimited exception; it is not. Use for research, quality improvement or media briefing may fall outside the exception and expose the user to 60/300 penalty units. The statutory definition of “contact tracing information” (s 165CB) is broad and includes data generated by digital visitor registration systems even if it does not identify an individual.

4. The “reasonable excuse” defence to pandemic-order offences (s 165BN(2)) is not defined. Courts have indicated that it will be construed narrowly and will not lightly include economic or personal inconvenience. However, a direction that is incompatible with a Charter right and cannot be justified under s 7(2) of the Charter may give rise to a reasonable excuse. The onus is on the defendant to establish the excuse on the balance of probabilities.

5. Registration of lower-risk premises is “ongoing” (s 74(4)). Once registered on an ongoing basis, the registration does not expire but can still be cancelled or suspended (s 76). Many operators assume that “ongoing” means “never needs renewal”; it does not remove the obligation to comply with conditions or the power of the council to cancel for breach.

6. Cost-recovery charges over land (s 230(2)) rank ahead of most other encumbrances. A council or the Secretary that incurs costs abating a nuisance or enforcing a direction obtains a statutory charge that survives changes of ownership. Purchasers and financiers who fail to conduct a proper title search can find themselves liable for historical public-health debts.

7. The Secretary’s compliance and enforcement policy (s 231A) can be treated as an enforcement agency guideline under the Infringements Act 2006. An infringement officer who issues a notice contrary to the policy may find the notice withdrawn or the prosecution stayed. The policy is therefore quasi-legislative in effect even though it is not a statutory instrument.

8. Transitional provisions are not uniform. The 2021 pandemic amendments contain detailed transitional rules (ss 248A–248CA) that deem certain pre-existing detentions and authorisations to continue under the new regime. Failing to appreciate that an “old” detention order is now reviewable by a Detention Appeals Officer can lead to missed appeal deadlines.

9. The Chief Health Officer’s power to authorise officers appointed by councils (s 165AW(2)(b)) is subject to the limitations in s 165CO when the officer was appointed under the special pandemic appointment power in s 165CN. Many practitioners assume that any authorised officer can exercise any power; the statute contains important carve-outs for protective services officers, WorkSafe inspectors and certain out-of-state officers.

10. Evidentiary certificates (ss 224–226) are powerful but not conclusive. They shift the evidential burden but do not prevent a defendant from calling evidence to contradict the certificate. In practice, however, the certificate is often decisive because the defendant lacks access to the underlying laboratory records.

These “gotchas” are not obscure; they are the points at which well-intentioned clients and even experienced lawyers most commonly misstep. Subscription services that track amendments, policy issuances and tribunal decisions pay for themselves by preventing these expensive oversights.

Compliance with the Act is not a single task but a system of ongoing obligations that differ according to the regulated entity.

For businesses required to register (cooling towers, pest control, prescribed accommodation, beauty/tattoo premises):

1. Determine whether registration is periodic or ongoing (ss 67, 67A, 69, 69A, 74).
2. Lodge the application in the approved form with all prescribed information and the correct fee (s 71).
3. Maintain the premises or system in accordance with the conditions attached to the registration and any risk-management plan (ss 75, 91–93).
4. Notify the council or Secretary of changes of ownership, address or significant alterations (ss 87, 88).
5. Retain records for the prescribed period and produce them on request (s 108 for pest control; risk-management-plan audit certificates for cooling towers).

For councils:

1. Appoint qualified environmental health officers (s 29) and ensure they hold current identity cards (s 166).
2. Prepare, review annually and publish a municipal public health and wellbeing plan that addresses family violence prevention (s 26(2)(ba)).
3. Investigate every nuisance complaint (s 62) and, where appropriate, issue improvement or prohibition notices rather than immediately prosecuting (s 62(4)).
4. Use the online portal for registrations where available and pay the declared charge (s 78B).
5. Develop local policies that are consistent with the Secretary’s compliance and enforcement policy (s 231A).

For the Secretary and Chief Health Officer:

1. Before making a pandemic order, request and document the Chief Health Officer’s advice on the public-health risk and the measures that are necessary or appropriate (s 165AL).
2. Ensure every pandemic order is published on the Pandemic Order Register before it comes into force (s 165AP(1)) and that the human-rights compatibility statement is published within seven days (s 165AP(2)).
3. Maintain the Pandemic Order Register in an accessible form (s 165CS).
4. When authorising officers to exercise powers, specify any limitations in the authorisation instrument (s 165AX(3)(d)).
5. Issue a compliance and enforcement policy and ensure it is treated as an enforcement agency guideline where appropriate (s 231A(4)).

For individuals and parents:

1. Comply with immunisation requirements before enrolling a child in an early childhood service or primary school, or produce an immunisation status certificate within the required time (ss 143B, 145).
2. Observe any pandemic order or direction given by an authorised officer. A “reasonable excuse” will be construed narrowly; economic inconvenience or personal preference will rarely suffice.
3. Within a safe access zone, refrain from any behaviour listed in s 185D. Recording patients without consent is a criminal offence (s 185E).

During an outbreak or pandemic:

1. Document every decision that engages a Charter right. The statement required by s 165AP(2)(c)–(d) must address the five factors in s 7(2) of the Charter.
2. For any person detained, facilitate reasonable communication requests (s 165BG) and conduct a 24-hour review of the necessity of continued detention (s 165BG(2)). Failure to do so may render the detention unlawful.
3. If issuing an information or document production notice, ensure the notice contains all the particulars required by s 197H(2). A defective notice cannot support a prosecution under s 197I.

Record-keeping and reporting:

All regulated persons should maintain a central compliance file that records:

• The date and reference number of every registration, licence or authorisation.
• Copies of all risk-management plans, audit certificates and review documents.
• Dates on which notifications were made to the Secretary or a Consultative Council.
• Copies of every direction or order received and the steps taken to comply.
• Records of all complaints received and how they were resolved.

These records should be retained for at least the limitation period applicable to the most serious offence that could arise from the activity (usually six years for actions founded on contract or tort, but three years for some statutory offences).

Training and due diligence:

Organisations that operate cooling towers, pest-control businesses or registered premises should ensure that responsible officers complete approved training. A documented due-diligence system that includes regular internal audits, corrective-action tracking and senior-management review will be powerful evidence if the organisation is ever prosecuted.

Legal sign-off:

Because the Act interacts with the Charter, privacy legislation and local-government law, organisations should obtain periodic legal sign-off on their compliance program, especially after any significant amendment or new pandemic declaration. The cost of that advice is invariably lower than the cost of defending a prosecution or appealing an adverse VCAT decision.

By treating the Act as an integrated system rather than a collection of isolated rules, and by maintaining contemporaneous, accurate records, most regulated persons can achieve compliance without difficulty. The “gotchas” identified in the previous section are almost all avoidable with modest diligence and timely legal input.