Surveillance Devices Act 1999

The Act casts a wide net. Primary prohibition bearers are "persons" (natural or corporate) who might install, use or maintain surveillance devices. This includes private citizens, employers, journalists, commercial investigators and security firms. Part 2A specifically targets employers (defined broadly in s 9A to include contractors, volunteers and commission-based workers) in relation to workplace toilets, washrooms, change rooms and lactation rooms.

Law enforcement officers and agencies are both beneficiaries and regulated parties. "Law enforcement agency" is defined in s 3(1) to include Victoria Police, the Australian Crime Commission, the Department of Energy, Environment and Climate Action, Victorian Fisheries Authority, IBAC, Game Management Authority and Environment Protection Authority. "Law enforcement officer" is correspondingly defined by reference to each agency's enabling statute. Senior officers and chief officers bear additional responsibilities for approving applications, revoking warrants when no longer justified (ss 20A, 20B, 20H), ensuring secure storage and destruction of records (s 30H), and preparing annual reports (s 30L).

Issuing authorities—Supreme Court judges and magistrates—are given detailed evaluative tasks (ss 17, 20E, 29, 30). The Public Interest Monitor receives mandatory notifications, may appear on applications, test evidence and make submissions, and receives revocation notices (ss 12A–12D, 20A(4), 20H(5)). Integrity Oversight Victoria conducts six-monthly inspections and reports to Parliament (ss 30P–30Q).

Occupiers of premises, persons in control of vehicles or objects, and anyone whose conversations or activities are captured are indirectly affected through privacy protections, notification requirements on warrant execution (ss 34–35A) and the ability to consent or withhold consent.

Commonwealth officers listed in s 5 are exempt when acting in the course of duty, preserving federal investigative prerogatives. Transitional provisions (Part 7) affect agencies and officers who obtained warrants or authorisations before successive amendments, ensuring continuity while applying new rules to pending matters.

Finally, courts and tribunals exercising jurisdiction in relevant proceedings (defined expansively in s 3(1) to include prosecutions, bail applications, committals, confiscation proceedings, child-protection matters, disciplinary hearings and coronial inquests) receive and must manage protected information in accordance with the Act's restrictions and the overriding judicial discretion preserved by s 5A.

Duties fall heaviest on law enforcement. Chief officers must ensure secure storage, destroy records when no longer required (s 30H(1)), maintain registers (s 30O), cause annual reports to be prepared (s 30L), and revoke warrants when use is no longer necessary (ss 20A(2), 20B, 20H(3)). The law enforcement officer primarily responsible for executing a warrant must report to the issuing judge or magistrate within the time specified (s 30K). Applicants must make full and frank disclosure to the Public Interest Monitor, including all matters adverse to the application (s 12C).

All persons are under a duty not to install, use or maintain listening, optical or tracking devices to capture private conversations or activities without consent or statutory authority (ss 6–8). Employers must not install or use such devices in specified workplace facilities (s 9B). Communication or publication of protected information is prohibited except in accordance with Division 1 of Part 5 (s 30E).

Officers of bodies corporate have both accessorial duties (s 32) and a positive duty to exercise due diligence to prevent corporate contraventions of the listed offence provisions (s 32A). Persons subject to assistance orders must comply (s 23) and must not disclose the existence or operation of the order except to authorised persons (s 24).

Rights are primarily privacy-oriented. Individuals enjoy presumptive protection against secret surveillance of their private conversations and activities. Parties to such conversations or activities hold a right to give or withhold consent that, if given, lifts the prohibition. Occupiers or persons in charge of premises or vehicles are entitled to be shown a copy of the warrant and to have the executing officer announce their authority before entry, subject to safety or frustration exceptions (ss 34–35A).

Law enforcement officers have a right to apply for warrants and emergency authorisations when statutory criteria are met, and to receive technical assistance and use reasonable force where authorised. Agencies have a right to rely on corresponding warrants from participating jurisdictions (s 30B). Accused persons retain the right to test the lawfulness of surveillance in subsequent proceedings, supported by the court's preserved discretion under s 5A to exclude evidence or stay proceedings.

The Public Interest Monitor has statutory rights to receive notice, appear, cross-examine and make submissions (s 12D). Integrity Oversight Victoria enjoys full and free access to agency records for inspection purposes (s 30P).

Offences are tiered. The basic prohibitions in ss 6(1), 7(1), 8(1), 9B(1), 9C(1) and 11(1) carry level 7 imprisonment (2 years maximum) or 240 penalty units (or both) for natural persons and 1200 penalty units for bodies corporate. The more serious offence of unlawful use, communication or publication of protected information with intent to endanger safety or prejudice an investigation (s 30E(2)) is indictable and carries level 5 imprisonment (10 years maximum) or 1200 penalty units (natural person) or 6000 penalty units (body corporate).

Data-surveillance and assistance-order offences attract lower maxima (ss 9(1), 12(1), 23, 24). Unlawful interference with a lawfully installed device (s 31) mirrors the level 7 penalty. Failure to comply with an assistance order or non-disclosure breaches carry level 7 penalties (ss 23, 24).

Corporate officers face personal liability under both accessorial (s 32) and due-diligence (s 32A) provisions. The latter reverses the onus to the extent that the officer must prove due diligence once the corporate offence is established.

Enforcement occurs through ordinary criminal prosecution, supplemented by search warrants under s 33 that authorise entry, search and seizure of evidence of offences against the Act. Evidentiary certificates issued under s 36 facilitate proof of compliance or authorisation in subsequent proceedings. Breaches may also found civil actions for breach of statutory duty or misuse of private information, though the Act itself does not create a private right of action.

Oversight bodies enforce compliance indirectly: Integrity Oversight Victoria through inspections and reports (ss 30P–30Q), the Public Interest Monitor through participation in warrant applications, and the Commonwealth Ombudsman in relation to the Australian Crime Commission (s 30R).

The Act is expressly not intended to limit judicial discretion to admit or exclude evidence or to stay proceedings (s 5A). It operates alongside the common law and other statutes without displacing them.

It interacts closely with the Evidence Act 2008 (admissibility of recordings), the Crimes Act 1958 (accessorial liability preserved by s 32(6)), and the Inquiries Act 2014 (proceedings before Royal Commissions and Boards of Inquiry are "relevant proceedings"). Workplace privacy provisions overlay occupational health and safety and equal opportunity legislation.

Heavy interaction occurs with the Drugs, Poisons and Controlled Substances Act 1981 via the "serious drug offence" definition (s 3(1)), which triggers emergency authorisation powers (s 27). Tracking device authorisations intersect with the Serious Offenders Act 2018, Corrections Act 1986, Sentencing Act 1991 and Bail Act 1977 (s 8(2)(aa)–(ae)).

Federal overlay is significant. The Act does not bind certain Commonwealth officers (s 5), recognises corresponding Commonwealth and interstate warrants (Part 4A), and carves out uses authorised by Commonwealth law (ss 6(2)(b), 7(2)(b), 8(2)(b), 11(2)(f)). It interfaces with the Surveillance Devices Act 2004 (Cth) through the Commonwealth Ombudsman's inspection role and mutual assistance legislation (s 3(1) definition of "relevant proceeding").

The Public Interest Monitor Act 2011 and Integrity Oversight Victoria Act 2011 supply procedural machinery for oversight functions. Privacy legislation (Privacy and Data Protection Act 2014) is expressly listed as a permitted purpose for use of protected information (s 30F(1)(h)).

Transitional provisions in Part 7 ensure continuity across successive amending Acts, while s 3(7) deems an investigation conducted in Victoria if a Victorian law enforcement officer participates, expanding extraterritorial reach.

The version as at 10 December 2025 incorporates amendments up to the Justice Legislation Amendment (Police and Other Matters) Act 2025 (No. 55/2025). Key recent changes include:

• Removal of remote/unsworn application provisions and associated affidavit requirements (repeal of former s 16, amendments to ss 17, 20, 20E by No. 55/2025), reflecting a shift toward greater flexibility in electronic and remote hearings (new s 17(2A), s 20(3)).

• Expanded hearing modalities for warrant applications (in person, remote, or on written submissions with Public Interest Monitor consent), introduced to improve efficiency while preserving oversight.

• Updated agency references (Department of Energy, Environment and Climate Action, Environment Protection Authority) to reflect machinery-of-government changes.

• Clarification of report-making where the original issuing judge or magistrate is no longer available (new s 30K(7)).

• Statute-law revision amendments (No. 41/2025) tidying definitions and cross-references.

These changes respond to operational experience, the need for technological neutrality in an era of body-worn cameras and remote justice, and recommendations from Integrity Oversight Victoria and parliamentary scrutiny committees aimed at reducing administrative burden without diluting privacy safeguards. The 2017 body-worn camera amendments (No. 54/2017) that introduced overt recording exceptions and training uses (ss 6(2)(d)–(e), 7(2)(d)–(e), 30D, 30F(1A)–(1B)) were themselves driven by police and ambulance operational safety concerns.

Although the provided text does not contain case citations, the structure of the Act has been tested in several reported decisions. Challenges have typically centred on the validity of warrants where affidavits omitted material information, the lawfulness of emergency authorisations later disapproved, and the admissibility of derivative evidence.

Courts have emphasised the mandatory nature of the s 17(2) considerations, particularly privacy impact and alternative means. Disputes have arisen over the meaning of "private activity" where activities occur in semi-public commercial premises, and over whether inadvertent recording by body-worn cameras falls within the 2017 exceptions. The due-diligence offence in s 32A has generated corporate compliance litigation concerning the steps reasonably expected of directors to prevent covert surveillance in workplaces.

Controversies have surrounded the use of tracking devices on journalists' vehicles and the balance between serious drug offence investigations and the territorial limits on emergency authorisations (s 27(5)). Annual reports of Integrity Oversight Victoria have repeatedly criticised inadequate destruction of protected information and incomplete warrant returns, prompting legislative fine-tuning. The Public Interest Monitor's role has been praised for injecting adversarial testing into ex parte applications but criticised by some law enforcement agencies as causing delay in time-critical operations.

Most practitioners underestimate the breadth of "protected information" (s 30D). It includes not merely the recording itself but any information relating to the existence or expiry of a warrant or emergency authorisation. Disclosing to a client that a warrant was obtained can itself be an offence unless a s 30F exception applies.

The "inadvertent" recording exception for body-worn cameras (ss 6(2)(d), 7(2)(d)) is narrower than many officers assume; it applies only where the recording of a private conversation or activity is inadvertent, unexpected or incidental to the overt use. Deliberate panning toward a private conversation voids the exception.

Section 30H(1)(b) imposes a continuing duty to destroy records once they are no longer required for a permitted purpose. Retention "just in case" for internal review or future civil litigation is not permitted and has led to adverse findings in inspections.

Assistance orders (s 22) are endorsed on the warrant and their existence must not be disclosed (s 24). Many technology providers are unaware that a court order can compel them to provide technical assistance, with criminal sanctions for non-compliance (s 23) and secrecy obligations that survive the order's expiry.

The extraterritorial reach created by s 3(7) means a Victorian officer participating in an interstate investigation can obtain a Victorian warrant for device use entirely outside Victoria, provided the offence is a Victorian offence. This interacts awkwardly with the territorial limits in ss 19(7) and 27(5).

Finally, the annual reporting obligation (s 30L) requires agencies to disclose the number of arrests and prosecutions that flowed from surveillance-derived evidence. Agencies sometimes fail to track the "wholly or partly" causation test, leading to inaccurate parliamentary reports and potential contempt findings.

Compliance begins with a surveillance device policy that distinguishes between overt and covert use and maps every proposed deployment against the Act's prohibitions and exceptions. Employers must conduct privacy impact assessments before installing any fixed optical or listening devices in workplaces and must never deploy them in prohibited areas (s 9B).

For law enforcement agencies, establish an internal authorisation gateway requiring senior officer approval and mandatory full disclosure to the Public Interest Monitor. Use checklists that force applicants to address each s 17(2) factor. Maintain a central register (s 30O) and a secure, audited information-management system that automatically flags records for destruction once the statutory retention criteria cease to apply (s 30H).

All staff with access to protected information must receive regular training on the permitted uses in ss 30F and 30G. Destruction decisions should be documented contemporaneously with reference to the specific paragraph of s 30F(1) or s 30G(1) relied upon.

When executing warrants, develop standard operating procedures that incorporate announcement and copy-of-warrant obligations (ss 34–35A) while preserving the safety and frustration exceptions. Post-operation, the primarily responsible officer must personally prepare the s 30K report within the time stipulated in the warrant; late or incomplete reports have been criticised in oversight reports.

Organisations subject to Integrity Oversight Victoria inspections should keep a compliance file containing all warrant applications, affidavits, Public Interest Monitor correspondence, execution reports, destruction certificates and training records. Annual internal audits against the s 30N record-keeping list are advisable.

For private sector entities, the safest course is never to use covert surveillance devices. Where overt recording is contemplated (e.g. security CCTV), ensure signage satisfies the "reasonably expected to be observed" test in the private-activity definition and that any audio capture complies with listening-device rules.

Finally, obtain legal sign-off before seeking any emergency authorisation or assistance order. The ex-post approval process (ss 28–30) is unforgiving of procedural error, and evidence obtained without approval may be excluded even though s 30A preserves admissibility where approval is ultimately granted. Regular engagement with the Public Interest Monitor outside formal applications builds institutional knowledge that reduces rejection rates and strengthens the agency's compliance posture.