Surveillance Devices Regulations 2016

The Regulations work through a chain of definitional and purposive linkages to the Act. Several core concepts recur and are the operational levers of the instrument.

• Prescribed person / prescribed circumstances: Regulation 10 lists persons or classes of persons and the circumstances in which they are "prescribed" for the purposes of specific Act provisions (see Reg 10(1)). The list is expressed as roles under particular Acts (for example prison officer, escort officer, specified officers under serious offenders legislation) plus a cross‑cutting caveat that the regulation only applies in the enumerated circumstances (for example where "the safety of any person may be compromised" or "there is a threat to the management, security or good order" of a facility or location). The Regulations therefore tie surveillance permissibility to discrete operational risk conditions, not to roles alone (Reg 10(1)(a)-(t)).

• Protected information and local protected information: The Regulations refer to the Act’s definitions of protected information and local protected information (Reg 10(2)-(3)). They prescribe that the persons and circumstances in Reg 10(1) are to be treated as the prescribed persons for the relevant paragraphs in the Act’s definitions (Reg 10(2)-(3)). In plain terms, the Regulations identify who may be the subject or author of information that the Act will treat as protected or local protected information.

• Prescribed IBAC Officers and senior officers: Regulation 7 prescribes particular IBAC positions and classes of employees, including Commissioner, Deputy Commissioner, Chief Executive Officer, executive officers and certain graded non‑executive employees, and from 2025 authorised officers (Reg 7(a)-(f)). Regulation 9 similarly prescribes which IBAC positions count as senior officers for particular Act definitions (Reg 9(a)-(c)).

• Corresponding laws: Regulation 6, with Schedule 1, names the interstate and territory statutes that "correspond" to the Surveillance Devices Act 1999 for the purposes of that Act’s cross‑jurisdictional provisions. That list is finite and enumerated (Schedule 1).

• Relevant offences: Regulation 8, via Schedule 2, lists specific offence provisions in named Acts that are "relevant offences" for the Act’s purposes. The Schedule concentrates on environmental, heritage, forestry, fisheries and wildlife offences, and includes a listed provision in the Victoria Police Act 2013 (Schedule 2).

• Prescribed purposes for local protected information from body‑worn cameras/tablets: Regulation 11 prescribes, for section 30F(1A)(b) and 30F(1B)(b) of the Act, the limited categories of legal uses for local protected information obtained from body‑worn cameras or tablet computers by police and protective services officers, and more broadly for the classes in Reg 10(1). The permitted categories include family violence proceedings, coronial investigations, locating missing persons, personal safety intervention orders, certain civil proceedings, VCAT and the Victims of Crime Assistance Tribunal, IBAC functions, child protection disclosure to the DFFH Secretary, mandatory reporting under the Children, Youth and Families Act 2005, and a "transport power report" under section 85 of the Youth Justice Act 2024 (Reg 11(1)-(2)).

Mechanically, these concepts operate as predicates to the Act’s authorisation and admissibility rules. The Regulations do not set out the Act’s authorisation thresholds or warranting processes. Instead they determine whether a person, an offence, a jurisdiction, or a use falls within categories that the Act treats differently , for example by allowing communication or publication of otherwise protected local information in the specified circumstances (Reg 11).

The Regulations allocate legal categories to particular professional roles and situations; that allocation changes who may lawfully use, communicate or publish surveillance‑derived material under the Act. Primary affected actors are:

• IBAC and IBAC staff: Reg 7 prescribes specific IBAC positions and employee classes as "prescribed IBAC Officers" and Reg 9 prescribes senior officer positions. IBAC therefore must apply these rules when relying on the Act’s provisions that turn on those definitions (Reg 7-9). The inclusion of "authorised officers" (Reg 7(f)) and the Chief Executive Officer (Reg 7(c)) brings particular operational roles within the Act’s definitional scope.

• Victoria Police: The Regulations directly affect police officers by prescribing uses of local protected information obtained from body‑worn cameras or tablet computers where the person using the device is a police officer (Reg 11(1)). They also treat protective services officers and police employee witnesses in civil proceedings as falling within permitted disclosure uses (Reg 11(2)(a)(v)-(vii)). Victoria Police is also a beneficiary of cross‑jurisdictional recognition through Schedule 1 corresponding laws when operating across borders (Reg 6, Sch 1).

• Corrections and youth justice personnel: The Regulations prescribe persons authorised under the Corrections Act 1986 (prison officers, escort officers, specified officers, security officers) in circumstances tied to safety, security and good order of prisons or locations where prisoners are held. It also prescribes prison officers assigned to Corrections Victoria’s Security and Emergency Services Group in youth justice facilities and officers under the Children, Youth and Families Act 2005 where there are security or safety threats (Reg 10(1)(a)-(g)). These classifications matter for surveillance device uses and the protected information rules in the Act.

• Specified officers under serious offenders laws: The Regulations reach specified officers under the Serious Sex Offenders (Detention and Supervision) Act 2009 and the Serious Offenders Act 2018, both when working at residential facilities and when supervising offenders off‑site, in circumstances threatening safety or the good order of the facility or location (Reg 10(1)(i)-(jc)).

• Authorised officers in resource and animal protection regimes: The Regulations prescribe authorised officers under the Conservation, Forests and Lands Act 1987, Game Management Authority Act 2014 and Victorian Fisheries Authority Act 2016, and RSPCA inspectors and specialist inspectors under the Prevention of Cruelty to Animals Act 1986, when carrying out their functions under those Acts or any other (Reg 10(1)(l)-(p)).

• Sheriffs and sheriff's officers: The sheriff and deputy sheriff and sheriff’s officers under the Sheriff Act 2009 are prescribed when carrying out their functions (Reg 10(1)(q)-(s)). That classification affects how the Act applies to their use of surveillance devices and handling of captured information.

• Protective services officers: Protective services officers within the Victoria Police Act 2013 have distinct permitted uses for local protected information derived from body‑worn cameras or tablets (Reg 10(1)(k); Reg 11(2)(a)).

• Courts, tribunals and investigative bodies: The Regulations identify permitted disclosure to VCAT, the Victims of Crime Assistance Tribunal, the Coroners Court, and IBAC. Recipients and processes in those forums will be affected when local protected information is offered under the narrow prescribed purposes (Reg 11(1)(b), (e)-(g), (ga)).

• Departments responsible for child protection and youth justice: Reg 11(1)(h)-(j) prescribes disclosure to the Secretary to the Department of Families, Fairness and Housing (for child protection investigations under s162 of the Children, Youth and Families Act 2005), mandatory reporting under s184 CYFA, and preparing a transport power report under s85 of the Youth Justice Act 2024. Those departments become lawful recipients for certain local protected information under this instrument.

• Members of the public captured by devices and civil litigants: The Regulations constrain when footage may be communicated or published in litigation contexts. For example, Reg 11 permits communication in civil proceedings where Victoria Police or the State is a party, or where a police/protective services officer is called as a witness, and it permits use in VCAT or the Victims of Crime Assistance Tribunal.

Indirectly affected groups include defence counsel, legal practitioners handling evidence from body‑worn cameras or tablets, compliance managers in agencies that operate surveillance devices, records and information managers who will implement retention and disclosure steps, and insurers or private sector service providers who support custody, storage or retrieval of footage. The Regulations do not create new criminal liabilities but they alter who is in scope for exceptions or permitted disclosures under the Act; operational managers in each named agency must therefore map staff, devices and processes to the Reg 10 lists and to the permitted uses in Reg 11.

The Regulations themselves are largely prescriptive rather than prescriptive of duties, but they create legal conditions that trigger duties and confer rights under the Act.

Duties that arise from the Regulations (as enacted under the Act)

• Duty to identify whether an individual or class is "prescribed": Agencies must determine whether staff performing functions fall into the Reg 10 categories when contemplating use of surveillance devices or sharing captured material. The Act’s thresholds for authorisation and for treatment of protected information depend on that determination (Reg 10(1) and Regs 10(2)-(3)).

• Duty to limit use, communication and publication to prescribed purposes: Where local protected information is obtained from a body‑worn camera or tablet computer, the Regulations specify the permitted purposes for use, communication or publication (Reg 11). Agencies that hold such footage will have an operational duty to justify any communication or publication by reference to one of the statutory purposes listed (for example family violence proceedings, coronial investigations, certain civil proceedings, VCAT, IBAC functions, child protection reporting). If footage is to be used or disclosed for a purpose not listed, the Act’s general restrictions continue to apply.

• Duty to apply role‑ and circumstance‑limited permissions: For many classes in Reg 10 the permission is contingent on particular circumstances , typically risks to safety, management, security or good order. This requires an operational assessment and recording of the factual basis for the use or disclosure, not mere role‑based entitlement (Reg 10(1)(a)-(t)).

• Duty to account for cross‑jurisdictional recognition: Where an agency seeks to rely on corresponding laws in other jurisdictions (for example to execute or admit surveillance authorised interstate), the Regulations limit that recognition to the statutes listed in Schedule 1 (Reg 6 and Sch 1). Agencies must check Schedule 1 before asserting cross‑jurisdictional equivalence.

Rights created or clarified by the Regulations

• Right to use or disclose local protected information for specified legal purposes: The Regulations create a statutory permission for communication or publication in the enumerated categories in Reg 11(1)-(2). That permission is not an absolute right to publish widely but is a lawful basis under the Act for disclosure to particular forums or agencies.

• Rights of certain officers to be treated as "prescribed IBAC Officers" or "senior officers": For IBAC staff these designations affect which internal officers can exercise functions or be subject to particular Act provisions; the Regulations clarify the class of employees who have those status rights (Reg 7-9).

What the Regulations do not do (important negative duties)

• They do not themselves authorise surveillance device use: authorisation procedures, warrants, thresholds and evidentiary provisions remain in the Act. These Regulations only prescribe aspects necessary for the Act’s definitions and exceptions to operate as intended.

• They do not set retention periods, disclosure processes, redaction standards, or procedural steps for evidence management: the Act and agency policies would govern those operational details. The Regulations restrict permissible purposes but do not itself prescribe records management protocols.

Practical compliance implications

• Agencies must document the legal basis for any communication or publication of footage, citing the specific Regulation paragraph used (for example Reg 11(1)(b) for coronial investigations). That documentation will be necessary to meet evidentiary and administrative review expectations.

• Where circumstances are fact‑based (for example "safety of any person may be compromised"), agencies must retain contemporaneous assessments supporting that factual conclusion, because the Regulations tie permissibility to fact patterns rather than to mere job titles (Reg 10(1)).

• The Regulations alter the distribution of decision‑making authority by designating particular positions as "prescribed IBAC Officers" and "senior officers," so administrative delegations and authorisation charts must be updated to reflect the Reg 7-9 lists.

The Regulations do not create standalone criminal penalties or new enforcement mechanisms; enforcement of the legal boundaries they set is carried out under the Surveillance Devices Act 1999 and the statutory regimes to which the Regulations refer. Key enforcement features and consequences that arise from the Regulations are:

• Enforcement sits with the Act’s existing architecture: The Act contains the prohibitions and penalties relating to unlawful use of surveillance devices, and the Regulations operate by prescribing who and what falls within stated exceptions and definitions of the Act. Any contravention of the Act remains enforceable under its provisions; the Regulations themselves are subordinate instruments that clarify how the Act applies (Reg 2 refers to s37A authorisation).

• Relevant offences list for evidentiary or enforcement purposes: Schedule 2 lists specific offence provisions in substantive Acts (for example various provisions in the Fisheries Act 1995, Wildlife Act 1975, Catchment and Land Protection Act 1994 and others). Those listed offences are declared "relevant offences" for the Act’s purposes by Reg 8 and Schedule 2. The practical enforcement effect is that surveillance device authorisations or admissibility rules under the Act can apply where an investigation concerns one of these listed offences.

• Administrative compliance and internal accountability: Agencies designated in Reg 10 and Reg 11 (Victoria Police, Corrections, IBAC, specified authorised officers, sheriffs, RSPCA inspectors, etc.) will be expected to implement internal controls. Failure to limit disclosure to the Reg 11 purposes could expose an agency to administrative review, FOI disputes, tribunal complaints, civil litigation concerning privacy or misuse of information, or possible evidence exclusion in litigation. The Regulations themselves do not specify those sanctions; they create the legal basis for contesting unauthorised disclosures under the Act.

• Cross‑jurisdictional enforcement: Regulation 6 and Schedule 1 define which interstate statutes correspond to the Act, which affects the enforcement/recognition of surveillance authorisations or devices across jurisdictions. If an interstate operation relies on a statute not listed in Schedule 1, the Act’s cross‑recognition mechanisms would not be triggered by these Regulations.

• No new investigatory enforcement body is created: The Regulations designate IBAC positions and clarify who counts as prescribed IBAC Officers (Reg 7-9), but any IBAC enforcement action proceeds under the IBAC Act and the Surveillance Devices Act. Similarly, disclosures to the Secretary of DFFH under Reg 11(1)(h) are authorised by the Regulations for specified child protection purposes, but statutory child protection enforcement remains under the Children, Youth and Families Act 2005.

In short, the Regulations function as configurational instruments that alter how the existing enforcement rules in the Act and in the listed substantive Acts apply by naming the people, offences and purposes to which the Act’s exceptions and definitions attach. Enforcement consequences for non‑compliance therefore derive from the Act and from other statutory or common law remedies available where disclosures exceed the Regulation‑authorised purposes.

The Regulations explicitly interlock with numerous primary statutes and with interstate/territory laws. The instrument is a connective tissue; it does not displace primary laws but determines when the Surveillance Devices Act 1999 treats actors, offences, uses or interstate statutes as within its scope.

Direct interactions named in the instrument

• Surveillance Devices Act 1999: The Regulations are made under s37A of that Act (Reg 2) and repeatedly reference sections of the Act (for example sections 6(2)(e), 7(2)(e), 30D, 30F(1A)(b), 30F(1B)(b)). They therefore operate exclusively as subordinate rules to the Act and must be read with it.

• Independent Broad‑based Anti‑corruption Commission Act 2011: The Regulations import definitions from and prescribe positions under the IBAC Act (Reg 5 definitions, Reg 7 and Reg 9). Reg 11(1)(ga) specifically authorises use of local protected information for IBAC functions under the IBAC Act.

• Corrections Act 1986, Children, Youth and Families Act 2005, Serious Sex Offenders (Detention and Supervision) Act 2009, Serious Offenders Act 2018, Victoria Police Act 2013 and others: Reg 10 ties the Regulations’ prescriptions to roles defined in those Acts and to particular duties under those Acts. For example, Reg 10 prescribes prison officers and escort officers within the meaning of the Corrections Act 1986 in circumstances involving threats to safety or management and security of prisons. That means the Act’s special treatment of information will apply to those people only when they are acting in those statutorily defined capacities and circumstances.

• Family Violence Protection Act 2008, Personal Safety Intervention Orders Act 2010, Coroners Act 2008, Youth Justice Act 2024: Reg 11 prescribes permitted uses of local protected information captured by body‑worn cameras/tablets for proceedings or reports under those Acts (Reg 11(1)(a)-(d),(j)). Where footage is disclosed in those proceedings, the Regulations provide the legal basis for such communication or publication under the Surveillance Devices Act.

• Children, Youth and Families Act 2005: Reg 11(1)(h) and (i) authorises disclosure for child protection investigation purposes and mandatory reporting under specified sections of the CYFA. That creates a direct interaction: footage from police devices may be transmitted to DFFH for s162 investigations or mandatory reporting obligations under s184.

• Conservation, Game and Fisheries Acts and the Prevention of Cruelty to Animals Act: Reg 10 extends the Regulations’ scope to authorised officers under these Acts, enabling surveillance device rules to apply to their investigative functions.

Interstate and territory correspondence

• Schedule 1 identifies specific surveillance statutes in six other Australian jurisdictions that "correspond" to the Act (Schedule 1). That list includes the Crimes (Surveillance Devices) Act 2010 (ACT), Surveillance Devices Act 2007 (NSW, NT), Chapter 13 of the Police Powers and Responsibilities Act 2000 (Queensland), Surveillance Devices Act 2016 (SA), and Police Powers (Surveillance Devices) Act 2006 (Tasmania). This limits cross‑jurisdictional recognition to the statutes listed.

Interaction with evidentiary, tribunal and administrative law

• The Regulations facilitate certain evidentiary uses by prescribing permitted purposes for disclosure to courts, VCAT, the Victims of Crime Assistance Tribunal and IBAC (Reg 11(1)(e)-(g), (ga)). However the Regulations do not alter rules of evidence, which remain under court practices and the Evidence Act where applicable. The Regulations provide the statutory permission to disclose local protected information in the specified legal forums, but admissibility, confidentiality orders, redaction and privilege issues will be resolved under tribunal/court practice and other statutory regimes.

Limits and required co‑ordination

• The Regulations bind agencies only insofar as their employees and devices fall within the prescribed classes and circumstances. They do not relieve agencies from complying with other statutory duties (for example privacy law, data protection obligations, or information management rules). For instance, disclosure to DFFH under Reg 11(1)(h) may also engage CYFA obligations; an agency must manage both the permissive basis in these Regulations and any separate statutory reporting or confidentiality constraints.

• The Regulations do not create standalone rights to public publication. They permit communication or publication "for the purposes" listed; how that maps to public release, FOI requests or media applications will intersect with other statutes and administrative processes.

The net effect is an index of legal intersections: the Surveillance Devices Act governs surveillance device authorisations; these Regulations specify which persons, offences, interstate laws and purposes are within the Act’s definitional and exception contours and therefore when the Act’s authorisation and disclosure rules can apply in the contexts and statutory regimes named.

The Regulations were made on 21 June 2016 and commenced on 22 June 2016 (Reg 3 and Endnotes 1). The instrument also revokes the prior Surveillance Devices Regulations 2006 and identified 2013 amendment instruments (Reg 4). The printed version here incorporates subsequent amendments up to 14 October 2025. The Endnotes provide a table of amendments that is the authoritative list of subordinate instrument changes.

Chronology of named amendments (as recorded in the instrument’s Table of Amendments and regulation footnotes)

• Surveillance Devices Amendment (Body‑worn Cameras) Regulations 2018, S.R. No. 96/2018. Made 10 July 2018; commencement 11 July 2018. This amendment inserted Reg 10 and Reg 11 (Reg 10 and 11 footnotes indicate insertion by S.R. No. 96/2018 reg. 4).

• Surveillance Devices Further Amendment Regulations 2018, S.R. No. 174/2018. Made and commenced 23 October 2018. These regulations inserted references to the Serious Offenders Act 2018 (Reg 10(1)(ja), (jb), (jc)) among other changes (see reg notes).

• Surveillance Devices Amendment (Corresponding Laws) Regulations 2021, S.R. No. 42/2021. Made 11 May 2021; commencement 11 May 2021. Schedule 1 was amended by S.R. No. 42/2021 reg. 3.

• Surveillance Devices Amendment (Body‑worn Cameras) Regulations 2021, S.R. No. 169/2021. Made 21 December 2021; commencement 21 December 2021. This instrument made multiple insertions and substitutions in Reg 11 (Reg 11(1)(c) substituted; Reg 11(1)(d), (e), (f), (g), (h)-(j) inserted at various subparagraphs).

• Surveillance Devices Amendment (Body‑worn Cameras) Regulations 2022, S.R. No. 117/2022. Made 18 October 2022; commenced 18 October 2022. This order added protective services officers as prescribed persons and other insertions (Reg 10(1)(k) and Reg 11 changes noted).

• Surveillance Devices Amendment Regulations 2025, S.R. No. 79/2025. Made 26 August 2025; commencement 30 September 2025 (Reg 3). This instrument amended Reg 11(1)(i) and inserted Reg 11(1)(j) to add the Youth Justice Act transport power report as a permitted purpose.

• Surveillance Devices Amendment (Body‑worn Cameras and Other Matters) Regulations 2025, S.R. No. 105/2025. Made 14 October 2025; commenced 14 October 2025. This instrument adjusted Reg 7, Reg 10 and Reg 11, including adding authorised officers as prescribed IBAC Officers (Reg 7(f)) and new prescribed persons for Reg 10(1)(t), and making other amendments to the list of circumstances and permitted uses.

Other editorial and interpretative material

• The Endnotes explain that the Regulations will sunset 10 years after the making date, i.e. on 21 June 2026 (Endnotes 1). That statutory sunset is imposed by the Subordinate Legislation Act 1994 as explained in the Endnotes.

• The Explanatory details in the Endnotes itemise the earlier instruments revoked or amended, and they explain style changes and interpretative aids applied to the instrument.

Observed patterns in amendment history

• The main substantive focus of amendments has been to accommodate body‑worn camera operations and to extend the categories of persons and purposes that can lawfully use or disclose footage in specified operational circumstances. The 2018, 2021, 2022 and 2025 amendments repeatedly expand or clarify Reg 10 and Reg 11 to add agency roles and permitted purposes, and to align the Regulations with newer Acts (for example the Youth Justice Act 2024 and the Serious Offenders Act 2018).

• Amendments have both broadened the classes of authorised officers and further limited permissions by tying them to specified circumstances and purposes. The 2025 instruments added authorised officers under IBAC and refined location/circumstance language in Reg 10.

For legal advisers and compliance professionals the practical consequence is the necessity of tracking these multiple statutory instruments. The instrument’s footnotes and Endnotes list each amending statutory rule by SR number and commencement date; those are the primary references for reconstructing the Regulations’ evolution and for confirming which paragraph texts apply at any given time.

The Regulations, as printed, contain no case citations and the instrument does not list any litigation that interprets or challenges the Regulations themselves. The text provides no judicial construction history or named decisions. Where dispute or litigation arises about the proper application of the Act in light of these Regulations, the Act and those court or tribunal decisions would provide the relevant jurisprudence; the Regulations themselves do not include or summarise such authority.

Implications for practitioners

• Because there is no litigation history included in the instrument, lawyers must search external case law databases, tribunal decisions and administrative review determinations to discover any judicial treatment of the Act as read with these Regulations. Cases that interpret statutory definitions, such as "protected information" and "local protected information" in section 30D and 30F of the Act, will be especially relevant, but the Regulations do not catalogue any such decisions.

• The absence of litigation history in the instrument means the Regulations’ wording may be the primary guide to application until appellate or tribunal authorities develop interpretive lines on (for example) what constitutes sufficient factual basis for "a threat to the management, security or good order" or for "the safety of any person may be compromised" (Reg 10).

• Agencies and counsel should therefore take a cautious approach: document factual bases for operational assessments, preserve contemporaneous records, and consider seeking declaratory guidance or administrative review in high‑risk cases where the line between permitted and prohibited disclosure is uncertain.

• For matters involving cross‑jurisdictional operation under Schedule 1, practitioners will need to review enforcement and judicial decisions in the listed jurisdictions should disputes about the scope of "corresponding laws" arise.

In sum, the Regulations themselves contain no litigation record; practitioners must look to primary legislation, tribunal practice and external judicial rulings when advising on contested or ambiguous fact patterns that invoke the Regulations’ prescriptions.

The Regulations create detailed, circumstance‑dependent permissions; practical traps for agencies and advisers arise from that specificity. The key "gotchas" to watch are:

1. Role alone is insufficient: many permissions apply only in specified circumstances. Reg 10 repeatedly ties the prescribed status to facts such as "the safety of any person may be compromised" or "there is a threat to the management, security or good order" of a facility or location. That language means a person’s job title alone does not unlock the Act’s exceptions. Agencies must document the contemporaneous assessment that a specified circumstance existed when the device was used or footage communicated (Reg 10(1)).

2. Distinct rules for police versus other prescribed persons: Reg 11(1) prescribes permitted uses for local protected information obtained from body‑worn cameras or tablets by "a police officer." Reg 11(2) creates a similar but not identical list for protective services officers and "in any other case" for prescribed persons in Reg 10(1). Practitioners should not assume that the same set of permitted purposes applies across all prescribed persons; check whether the person using the device was a police officer, a protective services officer or another prescribed person, and then consult the correct paragraph in Reg 11.

3. Narrow list of permissible purposes for publication/communication: Reg 11 lists finite categories (family violence proceedings, coronial investigations, VCAT, civil proceedings where the State or police are a party or an officer is a witness, Victims of Crime Assistance Tribunal, IBAC functions, child protection disclosure, mandatory reporting, and a Youth Justice Act transport power report). Uses outside these categories will require separate legal basis under the Act; do not assume an implied general public interest exception.

4. Cross‑jurisdictional assumptions: Schedule 1 names the jurisdictions and statutes that "correspond." If an operation or admissibility argument depends on interstate recognition, confirm the interstate statute is actually in Schedule 1. Omission from Schedule 1 means no corresponding law is declared by these Regulations (Reg 6, Sch 1).

5. Narrow scope of "relevant offences": Schedule 2 sets out specific offence provisions across a limited range of Acts (environmental, fisheries, forest, heritage, wildlife, and a provision in the Victoria Police Act). Investigations into unlisted offences will not be captured as "relevant offences" by these Regulations; do not assume Schedule 2 is a general catalogue of all offences where surveillance devices may be used (Reg 8, Sch 2).

6. No procedural or records‑management rules: The Regulations authorise certain purposes but do not provide procedural steps for disclosure, redaction or retention. Agencies must not rely on the Regulations to substitute for record‑keeping and privacy obligations; those remain with the agencies and other law (Reg 11 is purposive, not procedural).

7. Sunset risk: The Endnotes record that the Regulations were due to sunset 10 years after making (on 21 June 2026). Practitioners need to monitor whether the instrument is renewed, replaced, or allowed to lapse; timetable risk matters for long‑running projects or retention policies that reference the Regulations as a legal basis for disclosure (Endnotes 1).

8. Delegation and classification gaps: The Regulations reference IBAC employee classifications (executive officers, non‑executive employees Grade 4-6, Senior Technical Specialists) and "authorised officers" under the IBAC Act. Internal classification changes, restructures, or regrading may alter who counts as a prescribed officer; agencies must reconcile HR classifications with Reg 7/9 lists when roles change (Reg 7-9).

9. Overlapping statutory duties: Where a disclosure is authorised under Reg 11 for child protection or mandatory reporting, separate statutory duties under the Children, Youth and Families Act and associated confidentiality or procedural safeguards still apply. Do not assume the Regulation’s permissive wording discharges other statutory obligations (Reg 11(1)(h)-(i)).

10. Limited public publication clarity: The term "publication" appears in Reg 11’s heading (prescribed purposes for use, communication or publication), but the instrument does not define publication scope or whether public broadcast is permitted. Agencies should treat public release as high‑risk and seek legal clearance, because other statutes and common law privacy principles may constrain publication.

These are practical traps rather than legal surprises: the Regulations are precise and circumscribed, so operational staff and advisers must align factual circumstances, role definitions and the exact prescribed purpose before taking a disclosure decision.

Compliance under these Regulations is primarily an exercise in mapping people, devices and factual circumstances to the precise paragraphs of Reg 10 and Reg 11 and documenting the legal basis for any use, communication or publication. A practical compliance pathway for agencies and legal advisers is below.

1. Legal mapping exercise (immediate step)

   • Prepare an inventory of all roles that may operate surveillance devices (police officers, protective services officers, prison officers, escort officers, specified officers under serious offenders laws, authorised officers in conservation/fisheries/game management, RSPCA inspectors, sheriffs, IBAC authorised officers). Cross‑reference those roles to the textual descriptions in Reg 10(1)(a)-(t).
   • For each role, record the specific statutory definition that the Reg 10 text references (for example "prison officer within the meaning of the Corrections Act 1986").
   • Note circumstances when the role becomes a "prescribed person" under Reg 10 (for example when "the safety of any person may be compromised" or "there is a threat to the management, security or good order" of a relevant place).

2. Operational criteria and decision checklist (procedural)

   • Implement a short form operational checklist for device activation and disclosure that requires the user to tick the factual circumstance that justifies use or disclosure (for example: safety risk; threat to security/good order; proceedings listed in Reg 11). The checklist should capture: date/time, device used, officer name/classification, location, specific factual justification, and intended recipient/purpose with citation to Reg 11 paragraph.
   • Ensure the checklist is preserved as part of the evidentiary chain of custody and as an administrative record in case of scrutiny.

3. Update policies, SOPs and delegations

   • Revise surveillance device operating procedures to incorporate the Reg 10 and Reg 11 constraints. Where device use or disclosure is permitted only in particular circumstances, SOPs should contain examples and the required sign‑off levels.
   • Update delegation instruments and authorisation matrices to reflect Reg 7 and Reg 9 designations where IBAC involvement or senior officer status is relevant.

4. Training and internal communications

   • Train frontline officers and supervisory staff on the precise permitted purposes in Reg 11 and on the circumstance‑dependent nature of Reg 10 permissions. Emphasise that role‑title alone does not permit disclosure.
   • Provide legal triage support to handling staff, with a quick method to escalate uncertain cases to legal or records teams before release.

5. Evidence and records management

   • Although the Regulations do not set retention periods, preserve original footage and documentation supporting the factual basis for use/disclosure (the activation checklist, risk assessment, authorisation). If footage is disclosed under Reg 11, record to whom it was disclosed, when, why (Reg 11 paragraph), and any conditions on further dissemination.
   • Ensure secure storage and logged access. If footage is provided to other agencies (for example DFFH or IBAC), document data transfer agreements or memoranda that record legal basis and constraints on onward disclosure.

6. Interagency coordination and data‑sharing agreements

   • Where Reg 11 authorises disclosure to another agency (for example IBAC or the Secretary to DFFH), execute data‑sharing arrangements or protocols that set out permitted uses, confidentiality obligations, retention and destruction rules, and FOI handling.
   • For cross‑jurisdictional operations, confirm the interstate statute is in Schedule 1 before relying on corresponding law recognition (Reg 6, Sch 1).

7. Legal clearance for public release or unusual requests

   • For any proposed publication beyond the narrow lists (for example media release, public broadcast, or inclusion in training materials), obtain legal clearance that cites a specific Reg 11 paragraph and checks other statutory constraints (privacy law, tribunal confidentiality orders, the Evidence Act, CYFA protections).
   • Where there is doubt about whether a purpose fits Reg 11 wording (for example "public interest" claims), prefer a conservative approach: seek legal authorisation or a court/tribunal order rather than relying on an untested discretionary basis.

8. Monitoring, audit and reporting

   • Implement periodic audits of surveillance device activations, requests for footage, and disclosures under Reg 11. The audit should test whether factual justifications were correctly recorded and whether disclosures adhered to the authorised purposes.
   • Provide regular reports to governance bodies (for example information governance, privacy officers, or IBAC oversight functions) to identify recurring ambiguities or training gaps.

9. Keep an eye on statutory change and sunset

   • The Regulations have undergone several amendments and are recorded as having a sunset date (Endnotes 1). Maintain legal monitoring for further amendments, renewal or replacement and adjust SOPs accordingly.

10. Engage counsel for borderline cases

    • When factual circumstances are finely balanced (for example whether a specific incident constitutes "a threat to the management, security or good order" of a place), obtain legal advice before permitting disclosure or wide circulation to reduce risk of administrative or judicial challenge.

Checklist (quick reference)

• Does the person match a Reg 10 prescribed class? (Yes/No)
• If yes, was the device used in one of the Reg 10 specified circumstances? (Yes/No , record facts)
• Is the intended use/communication/publication one of the Reg 11 permitted purposes? (Yes/No , cite paragraph)
• Have records of the factual assessment, authorisation and recipient been retained? (Yes/No)
• Has legal or records clearance been obtained for public release or unusual sharing? (Yes/No)

Following this structured approach aligns operational practice with the Regulations’ precise prescriptions and ensures the legal basis for any use or disclosure is contemporaneously documented, which is essential given the Regulations’ circumscribed and circumstance‑dependent permissions.