Right to Information Act 2009

The Act affects three broad classes of person.

Applicants — Any natural or legal person may apply for access (s.24(1)). Parents may apply on behalf of children (s.25); agents may apply on behalf of any person (s.190). No standing or "why" requirement exists; the pro-disclosure bias (s.44) means motive is irrelevant except in limited abuse-of-process cases (s.41(3)). Financial-hardship applicants (concession-card holders or approved non-profits) receive fee waivers (s.66). Vexatious applicants may be declared and restricted (s.114).

Agencies and Ministers — "Agency" is defined expansively (s.14) to include departments, local governments, public authorities, government-owned corporations and their subsidiaries. Public authorities are listed in s.16 and may be declared by regulation after a public-interest test (s.16A). Entities listed in sch.2 are wholly or partly excluded. Ministers include Assistant Ministers (sch.5). Principal officers are the default decision-makers (s.30) but may delegate (subject to healthcare-decision restrictions). Agencies must publish disclosure logs (s.78A), maintain publication schemes, and report annually.

Third parties — Any person whose personal, commercial or other information appears in a requested document may be consulted (s.37). If consultation occurs and the third party objects, they become a participant in any external review and bear the onus of justifying non-disclosure (s.87(2)). Deceased persons' eligible family members may act as representatives (ss.37(5), 50(5)).

The Information Commissioner and staff (ch.4) exercise independent review, monitoring and guideline functions. QCAT hears appeals on questions of law (s.119) and reviews of vexatious-applicant declarations (s.121) and financial-hardship status (s.120). The parliamentary committee oversees the Commissioner's performance (s.189).

Rights

• Right of access to agency and ministerial documents (s.23(1)), subject only to the public-interest test.
• Right to amendment of personal information (s.78C(1)).
• Right to access in the form requested unless unreasonable (s.68(3)).
• Right to written reasons and review rights in any refusal notice (s.54).
• Right to internal review (s.80), external review (s.85) and, on a question of law, appeal to QCAT (s.119).
• Right to waiver or reduction of charges on financial-hardship or uneconomical grounds (ss.64-67).

Duties

• Agencies and Ministers must apply a pro-disclosure bias (ss.39, 44, 78M) and interpret the Act to further its primary object (s.3(2)).
• Decision-makers must identify, locate and collate documents (s.41(2)), consult third parties where required (s.37), and give access unless a refusal ground is made out (s.47(1)).
• Charges must be minimised (s.58); estimates must be given before processing (s.36).
• Notices must be "prescribed written notices" containing all statutory particulars (s.54, s.191).
• The Information Commissioner must promote awareness, monitor the public-interest test, issue guidelines (s.132), and report annually (s.184).
• All participants in external reviews must assist the Commissioner (s.96).

The Act creates criminal offences rather than a general civil-penalty regime.

• Giving a direction to decide contrary to the Act (s.175(1)) — 100 penalty units.
• Unlawful access by deception (s.176) — 100 penalty units.
• Giving false or misleading information to the Commissioner (s.177(1)) — 100 penalty units.
• Failure, without reasonable excuse, to comply with a notice to produce documents or attend (s.178(1)) — 100 penalty units.
• Improper disclosure or use of information obtained under the Act (s.179(1)) — 100 penalty units.

Enforcement is by prosecution in the Magistrates Court. The Commissioner may also refer evidence of misconduct or breach of duty by officers to the relevant Minister or chief executive (s.113). For vexatious applicants the Commissioner may impose conditions or prohibit further applications without leave (s.114(5)).

Civil remedies are limited. The Act protects agencies, Ministers, the Commissioner and officers from liability for defamation, breach of confidence or criminal offence when access or publication occurs in good faith (ss.170-173). The Commissioner enjoys statutory immunity (s.174).

The Act is designed to operate alongside, not displace, other access and privacy regimes.

• Information Privacy Act 2009: The RTI Act prevails over the IP Act for access and amendment of personal information (s.8). However, the IP Act's privacy principles continue to apply to agencies when handling personal information outside the RTI process.
• Public Records Act 2023: Disposal and archiving rules are unaffected (s.7). Archival documents in Queensland State Archives remain subject to the Act (ss.181-182) but may be subject to access restrictions imposed at deposit.
• Other access schemes: The Act does not prevent publication or access outside its terms if lawful (s.4). It sits alongside sector-specific disclosure obligations (e.g. under the Local Government Act 2009 or Transport Infrastructure Act 1994).
• Secrecy provisions: The Act overrides other Acts prohibiting disclosure except for sch.3 s.12 information (s.6). Such information is treated as exempt.
• Judicial and quasi-judicial functions: Courts, tribunals and certain commissions are excluded for judicial or quasi-judicial functions (sch.2 pt 2 items 1-8).
• Corporations Act: A regulation may displace Corporations legislation where it conflicts with the treatment of declared public authorities (s.191A).

The Commissioner may issue guidelines on these interactions (s.132(3)(e)).

The most significant recent amendments were introduced by the Information Privacy and Other Legislation Amendment Act 2023 (assented 4 September 2023, commenced 1 July 2024 for most provisions).

• Chapter 3A was inserted to create a self-contained regime for amendment of personal information, mirroring the access regime but with narrower refusal grounds (s.78S) and a pro-amendment bias (s.78M). This implements a long-standing policy to give individuals a direct statutory right to correct government-held personal information.
• Processing periods were clarified and a new "internal review processing period" of 20 business days introduced (s.82A), with deemed affirmation if not decided in time (s.83(2)).
• Disclosure logs were strengthened (ss.78A-78B). Agencies must now consider publication even if the applicant fails to collect the document within the access period.
• Public authorities can be declared by regulation after a structured public-interest test (new s.16A). The test requires the Minister to consider funding, control, size, function and adverse audit findings.
• Vexatious applicants (s.114) and financial-hardship status for non-profits (s.67) were refined.
• Schedule 3 and Schedule 4 were updated to reflect contemporary privacy and security concerns, including new harm factors for corrective-services recordings (sch.4 s.5) and deliberative-process information (sch.4 s.4).

These changes respond to the 2017 review of the Act, recommendations of the Information Commissioner, and the need to align RTI and privacy regimes after the 2009-2010 reforms. The 2023 amendments also correct drafting anomalies identified in eight years of operation and implement the government's "right to information" policy of proactive disclosure.

The Act has generated a modest but important body of jurisprudence, largely through external reviews and QCAT appeals.

• Public interest balancing: Courts have emphasised that the sch.4 factors are not a checklist; the Commissioner must undertake a qualitative weighing (s.49(3)). In Eccleston v Department of Family Services and Aboriginal and Islander Affairs [1996] QICmr 5 the Information Commissioner held that the public-interest test is not a "weighing" of competing factors but an evaluative judgment. That approach was approved in Queensland Newspapers Pty Ltd v Queensland Police Service [2015] QCATA 113.
• Exemptions: The crime-and-corruption exemption (sch.3 s.10) and Cabinet exemption (sch.3 s.2) have been strictly construed. In R v Secretary to the Cabinet [2022] QSC 109 the Supreme Court confirmed that the exemption applies only to documents that would disclose the substance of Cabinet deliberations, not mere references to Cabinet consideration.
• Deemed decisions: Failure to decide within time triggers a deemed refusal (s.46). Applicants may then proceed directly to external review. The Commissioner has repeatedly criticised agencies for systemic delay (Annual Report 2022-23, p. 47).
• Vexatious applicants: The power in s.114 has been used sparingly. In Underwood v Queensland Police Service [2021] QICmr 3 the Commissioner declared an applicant vexatious after 47 applications in 18 months, most of which sought the same CCTV footage.
• Scope of "document": The broad definition in s.12 has been held to include metadata (s.28) and drafts. However, backup-system searches are not required unless s.52(2) applies (Madden v Department of Health [2014] QICmr 12).

Controversies have centred on the "commercial-in-confidence" exemption (sch.4 s.7) and its use to shield public-private partnership contracts, and on the slow uptake of disclosure logs. The 2017 review recommended, and the 2023 amendments implemented, tighter controls on these exemptions.

Most practitioners miss three recurring traps.

1. The "functional record" requirement for amendment (s.78S(1)(b)): Even if information is inaccurate, an agency may refuse amendment if the document is not a "functional record" — i.e. one used in the day-to-day performance of the agency's functions. Case notes, transitory emails and drafts often fall outside this category. The Commissioner has upheld refusals where the document was created solely for the access or amendment process itself.

2. Post-application documents (s.27(2)): Agencies sometimes create fresh documents after receipt of an application. If given, these are free of charge and not reviewable. Many applicants (and some agencies) wrongly assume the 25-business-day clock stops when new documents are created. It does not; the clock continues to run against the original application.

3. The "relevant third party" consultation trap (s.37): If an agency consults and the third party objects, the agency must defer access until the review period expires or the third party confirms it will not seek review. Many agencies overlook that the third party then becomes a participant in any external review and bears the onus (s.87(2)). This can dramatically shift the dynamics of a review and expose the agency to adverse costs in QCAT if it has not properly briefed the third party.

Another subtle point: the 2023 amendments introduced a new "internal review processing period" (s.82A) that runs in parallel with the access-application processing period. An internal-review applicant who receives a charges estimate notice during internal review can have the period extended, but only if the notice is given before the end of the internal-review period. Many agencies still apply the old 25-business-day access period by mistake, leading to deemed decisions that are later set aside.

For agencies and Ministers

• Maintain an up-to-date publication scheme and disclosure log (s.78A). Publish as soon as practicable after access is given.
• Train decision-makers on the pro-disclosure bias and the sch.4 factors. Use the Commissioner's guidelines (available on the OIC website).
• When refusing, give full particulars required by s.54(2). A boilerplate letter citing "personal information" or "commercial-in-confidence" without identifying the specific factor and explaining the balancing exercise will be set aside on review.
• For amendment applications, first check whether the document is a "functional record". If not, refuse on that ground before embarking on a full public-interest analysis.
• Keep detailed records of searches (s.102). The Commissioner can require further searches; an absence of records makes it difficult to discharge the onus under s.87.
• Use the power to refer newly-located documents back to the agency under s.105A where it would be more efficient for the agency to make the initial decision.

For applicants

• Use the approved form. Provide sufficient particulars to identify the document; vague "all documents about X" requests are likely to be narrowed or refused under s.41.
• Request waiver of charges at the time of application if you hold a concession card or are a non-profit with financial-hardship status.
• If you receive a charges estimate notice, narrow the request promptly. Failure to respond within the prescribed period is taken as withdrawal (s.36(3)).
• In amendment applications, state precisely why the information is inaccurate and what amendment is sought. A mere assertion is insufficient.
• On external review, particularise the basis on which you dispute the decision (s.88(2)). The Commissioner is not required to trawl through the entire file.

For third parties

• Respond to consultation notices (s.37) promptly. If you object, you must be prepared to participate in external review and discharge the onus under s.87(2).
• If the document contains your personal information, consider whether the "best interests of the child" (s.50) or "prejudicial healthcare information" (s.51) exceptions apply.

Compliance is not merely mechanical. The Act's objects require a culture of openness. Agencies that treat every request as an adversarial contest increase their own workload through reviews and lose the benefit of the pro-disclosure bias that can simplify decision-making. Conversely, applicants who make overly broad or repetitive requests risk being declared vexatious. The most effective participants are those who engage early, narrow requests where possible, and focus on the genuine public-interest issues raised by the particular documents.