Telecommunications (Interception and Access) (Emergency Service Facilities—Victoria) Instrument 2020

The core concept of the instrument is the emergency service facility as defined by reference to the Act. Subsection 6(2D) of the Telecommunications (Interception and Access) Act 1979 empowers the making of a legislative instrument that specifies premises and their geographical regions. The instrument therefore creates a closed list: only premises that appear in the table, within the stated geographical region, qualify as emergency service facilities for the purposes of the Act. This is a mechanism to contain the exception: not every police station, ambulance depot, or fire station qualifies automatically. Each must be formally specified by the instrument, and the specification can be limited to particular premises in particular locations.

The second concept is the geographical region attached to each entry. For example, Ambulance Victoria is specified for Blackburn North, Burwood East, and Essendon Fields. This means only premises physically located within those regions are covered. If Ambulance Victoria opened a new depot in, say, Geelong, that depot would not be an emergency service facility unless the instrument was amended to add it. The geographical region is not a description of the entire organisation’s service area; it is a precise location of the specific premises. This matters because interception and access powers are geographically tethered to where the equipment is installed. The instrument thus constrains the exception to defined bricks-and-mortar sites.

A further concept is the transitional variation for Triple Zero Victoria (item 2). Subsection 4(2) provides that the inclusion of the premises in Williams Landing has effect after 17 May 2020, and the inclusion of the premises in Melbourne ceases to have effect on 1 August 2020. This indicates that at the time the instrument was originally made (May 2020), Triple Zero Victoria (then likely named the Emergency Services Telecommunications Authority) operated facilities in two separate regions, but one was being decommissioned. The transitional provision ensures that the lawfulness of interceptions at the Williams Landing site begins on a specific date, and the Melbourne site loses its exception after a certain date. This prevents a gap where both sites would be covered simultaneously or where no site would be covered. It also illustrates that the instrument is designed to track the physical infrastructure of emergency service operations, not just the organisational name.

The instrument also demonstrates the concept of delegated legislative power. The parent Act delegated the power to specify facilities to the executive, exercised through a legislative instrument. This avoids the need for a full Act of Parliament to update the list as organisations restructure, relocate, or rename. The amendment history shows this flexibility: the instrument has been amended multiple times, including in 2025 to reflect a name change from the Emergency Services Telecommunications Authority to Triple Zero Victoria, and to add or remove premises. The instrument is subject to Parliamentary scrutiny and disallowance under the Legislation Act 2003, but the process is much faster than amending the primary Act.

Finally, the table itself contains a notable gap: there is no item 4. The items in the current version run 1, 2, 3, 5, 6, 7. This suggests that an item 4 was repealed or renumbered at some point. The amendment history in the endnotes does not show any explicit repeal of item 4, but the endnote section does record amendments to section 4 only. This is a gotcha: the numbering is not sequential, and anyone reading the instrument should not assume that all numbers between 1 and 7 are present. The missing item 4 may have been for an organisation that ceased operating or merged. The instrument as compiled reflects only the current list.

This instrument directly affects the organisations whose premises are listed in the table: Ambulance Victoria, Triple Zero Victoria, Telstra 000 Centre (a specific Telstra facility handling emergency calls at Windsor, Victoria), Airservices Australia - Aviation Rescue and Fire Fighting Service, Concentrix Services (a private sector call centre contractor operating in Ballarat), and Emergency Management Victoria. Each of these entities operates premises at the specified geographical regions. For them, being listed means they can lawfully perform functions that would otherwise be prohibited or require a warrant under the Telecommunications (Interception and Access) Act 1979. The exact scope of what they may do depends on the parent Act, but the instrument is a necessary precondition: without being specified, any interception of communications at those premises could be illegal and expose the organisation and its employees to criminal penalties.

The instrument also affects employees and contractors who work at those premises. They may handle intercepted communications, access call data, or monitor emergency calls as part of their duties. The specification in the instrument gives them a lawful basis for such actions, provided they act within the limits of the Act. For example, a call taker at Triple Zero Victoria’s Williams Landing centre can lawfully access the content of emergency calls because the premises are specified. Without the instrument, the same act could be an offence under Division 2 of Part 2-6 of the parent Act. This is particularly significant for private contractors like Concentrix Services, which is listed as a force or service operating premises. Concentrix is a commercial entity that handles emergency call overflow or after-hours calls for Ambulance Victoria or Triple Zero Victoria. Its inclusion means its staff are covered by the exception, which reduces legal risk for both the company and its clients.

The instrument affects telecommunications carriers that provide services to these facilities. For instance, a carrier that routes emergency calls to the Telstra 000 Centre at Windsor must ensure that any interception or access to call data at that facility is lawful. The instrument helps carriers comply by confirming which premises are designated emergency service facilities. Carriers can rely on the legislative instrument as a safe harbour: if they deliver communications to a specified facility, they are not aiding an unlawful interception.

The list does not cover all emergency service organisations in Victoria. Police stations, most fire stations, and rural ambulance depots are not listed unless they fall under one of the named organisations at the specified regions. For example, the instrument does not list the Victoria Police emergency call centre; it may rely on a different instrument (for Commonwealth or other state facilities). This means that other emergency service organisations must check whether they are covered by another instrument or must rely on other exceptions in the Act. The limited geographic scope also means that if an emergency service organisation moves to a new location, it must wait for an amendment to the instrument before it can lawfully handle intercepted communications at the new site. This creates operational risk and compliance burdens, especially for organisations that relocate frequently.

The instrument indirectly affects suppliers of equipment (e.g., recording systems, call logging software) to listed facilities. They need to ensure their products comply with the Act’s security and access requirements, and that the facility’s usage is within scope. However, the instrument itself imposes no duties on suppliers; it merely defines the boundaries of lawful use.

The instrument does not itself create any duties or rights; those arise from the parent Act. However, being listed in the instrument triggers specific legal consequences. For each named force or service, the right that flows from this instrument is the ability to undertake interception and access activities that would otherwise be unlawful under the Telecommunications (Interception and Access) Act 1979. This includes, for example, recording emergency calls, monitoring live communications, and storing intercepted data for operational or evidentiary purposes. The instrument does not spell out these rights; it merely constitutes the facility as an “emergency service facility” for the purpose of subsection 6(2D) of the Act. The precise scope of what the facility may do is found in the parent Act, especially in sections that provide exceptions for emergency services. Those exceptions are conditional: they apply only if the interception is for the purpose of providing an emergency service, and only at the designated premises.

The principal duty that attaches to each specified organisation is to ensure that any interception or access carried out at those premises strictly complies with the Act’s conditions. The instrument does not contain compliance obligations, but the Act does: for example, there may be requirements to limit access to authorised personnel, to destroy records after a certain period, to not use the data for non-emergency purposes, and to keep accurate logs. If a facility exceeds these conditions, the fact that it is listed in the instrument does not provide a defence. The instrument is a necessary but not sufficient condition for legality.

The instrument also imposes a duty of accuracy on the organisations listed. If a premises changes location or a service is renamed, the organisation should notify the relevant minister or department so that the instrument can be amended. Failure to update the instrument could result in a gap where the organisation’s new premises are not specified, placing its operations in legal jeopardy. The amendment history shows that Triple Zero Victoria replaced the Emergency Services Telecommunications Authority, and that new premises (Williams Landing) were added with a delayed commencement. This demonstrates that the instrument is expected to be a living document that reflects actual operational premises.

For Telstra, as the operator of the Telstra 000 Centre, the instrument gives its staff at Windsor the right to intercept and access communications for the purpose of routing emergency calls. But it also imposes a duty to ensure that the specially trained operators do not misuse that access. Telstra likely has its own internal policies and contractual obligations with the Australian government regarding the 000 service.

For Concentrix Services, a private call centre operator, the instrument confers an unusual right: a commercial entity not owned by the state may lawfully intercept communications. This is a significant extension of the exception beyond government agencies. The corresponding duty is that Concentrix must ensure its employees are trained and supervised in accordance with the Act’s requirements, and that the call data is used only for emergency services. The company faces the same criminal liability as a government entity if it intercepts outside the scope of the Act.

The instrument does not confer any rights on third parties, such as the public or journalists, to access communications from these facilities. The exception is for the facility itself. A member of the public who makes a call to Triple Zero is not consenting to the interception in the usual sense; the law deems the interception lawful because the facility is specified.

The instrument itself does not impose any penalties. Penalties for unlawful interception and access arise from the parent Act, the Telecommunications (Interception and Access) Act 1979. Under that Act, intercepting a communication without a warrant or without an applicable exception is a criminal offence, with penalties that can include imprisonment for up to two years for individuals and significant fines for corporations. The instrument functions as a shield: if a premises is listed, interception carried out at that premises may fall within the emergency service exception, and therefore no offence is committed. If a premises is not listed, any interception at that premises cannot rely on the exception, and the persons involved may be liable.

Enforcement is handled by the Australian Federal Police and the Commonwealth Director of Public Prosecutions. The instrument is a public legislative instrument, so any law enforcement agency can check its table to determine whether a particular facility is covered. For example, if an employee of Triple Zero Victoria at Williams Landing intercepts a call after the commencement date, the listing in the instrument provides a complete defence. But if that same employee intercepts a call at a non-listed location, such as a temporary remote site, the instrument offers no protection.

The instrument’s transitional provision (subsection 4(2)) has enforcement implications: for Triple Zero Victoria, the inclusion of Williams Landing takes effect after 17 May 2020, but the inclusion of Melbourne ceased on 1 August 2020. This means that during the period 18 May to 31 July 2020, both premises were covered. After 1 August 2020, only Williams Landing and the other listed regions (Burwood East, Mount Helen) are covered. If Triple Zero Victoria continued to intercept at the Melbourne premises after that date, it would be acting without the instrument’s protection. The transitional provision thus imposes a de facto deadline for the closure or relocation of operations.

The amendment history shows that the instrument has been amended four times. Each amendment must be registered and is subject to disallowance by either house of Parliament under the Legislation Act 2003. If an amendment is disallowed, the instrument reverts to its previous form, potentially removing coverage for some facilities. That outcome could expose the affected organisation to criminal liability. Therefore, the amendment process itself is an enforcement mechanism: Parliament can invalidate an overbroad or improperly made amendment.

There is no provision in the instrument for fines, infringement notices, or civil penalties specific to this instrument. All enforcement flows from the parent Act. However, the practical enforcement risk for a non-compliant organisation is high. Because emergency service communications often involve life-or-death situations, the data is sensitive, and any unlawful interception could be uncovered through routine audits, whistleblower reports, or civil litigation. The instrument is a clear check: a court or tribunal can quickly determine whether the premises was listed on the relevant date. This makes the instrument a binary test: if the premises is listed, the interception is presumptively lawful (subject to other Act conditions); if not listed, it is presumptively unlawful.

The instrument is made under the Telecommunications (Interception and Access) Act 1979 and has no standalone operation outside that Act. It interacts primarily with that Act’s provisions concerning emergency services. Specifically, subsection 6(2D) of the parent Act enables the instrument, and the instrument defines a key factual element of the emergency service exception. If the instrument were repealed, the exception would become inoperative for the Victorian facilities listed, because the Act would have no specified emergency service facilities for Victoria. The instrument therefore acts as a gateway to the exception.

The instrument also interacts with state and territory legislation that governs emergency services. For example, Victoria’s Emergency Management Act 1986 or the State Emergency Service Act might define roles and functions of Triple Zero Victoria or Emergency Management Victoria. However, the instrument does not incorporate or amend those state laws. It merely references the organisational names and geographical regions. If a state law changes the name of an organisation, the instrument must be amended to reflect that change; otherwise, the federal law would not recognise the new name. This is evident from the 2025 amendments, which changed “Emergency Services Telecommunications Authority” to “Triple Zero Victoria”. The interaction is one-way: the federal instrument follows state renames, rather than dictating them.

The instrument may interact with privacy laws, specifically the Privacy Act 1988 (Cth). Although the TIA Act is a separate regime, the interception of communications captured at specified facilities will involve personal information. The instrument does not itself authorise any use or disclosure of that information; it only authorises the interception. The subsequent handling of intercepted communications is subject to the TIA Act’s own secrecy provisions and potentially to the Privacy Act. For example, Ambulance Victoria must comply with the Privacy Act when storing or sharing recorded emergency calls. The instrument does not create a privacy exemption.

The instrument also interacts with the Telecommunications Act 1997 and the Telecommunications (Consumer Protection and Service Standards) Act 1999, which impose obligations on carriers to supply emergency call services. The Telstra 000 Centre at Windsor is a crucial node in the national emergency call system. The instrument confirms that this centre is a specified facility, which may be relevant for carriers’ compliance with their duty to connect emergency calls. If a carrier routes a call to the Telstra 000 Centre, it can be confident that any interception or monitoring at that centre is lawful due to the instrument.

Another interaction is with the National Security Information (Criminal and Civil Proceedings) Act 2004 and other national security legislation. Interceptions at emergency service facilities might involve national security related communications. The instrument does not address national security; those interceptions would still need to comply with the TIA Act’s warrant requirements for national security purposes. The instrument only provides a narrow exception for emergency services operations, not a blanket security exemption.

The instrument’s geographical scope is limited to Victoria. Emergency service facilities in other states and territories are covered by their own instruments, if any. This creates a patchwork: an ambulance paramedic in New South Wales cannot rely on this instrument. Each jurisdiction must have its own instrument under subsection 6(2D). This may lead to inconsistencies in coverage and compliance burdens for national emergency service organisations that operate across multiple states. For instance, Airservices Australia operates across Australia, but this instrument only covers its Aviation Rescue and Fire Fighting Service premises at Avalon and Melbourne. Its other bases in other states would require separate instruments.

The instrument has been amended four times since its original making on 18 May 2020. The original instrument was registered as F2020L00586 and commenced on 19 May 2020. It established the initial list of emergency service facilities and included sections 1 through 4. The original table likely included the Emergency Services Telecommunications Authority (now Triple Zero Victoria) and possibly a different set of premises. The endnote shows that s2 and s3 were later repealed by operation of the Legislation Act 2003 (sections 48D and 48C respectively) because they had no continuing effect. The instrument as originally made probably contained provisions about commencement or definitions that became redundant.

The first amendment was the Telecommunications (Interception and Access) (Emergency Service Facilities,Victoria) Amendment Instrument 2020 (LIN 20/280), registered on 3 December 2020 and commencing on 4 December 2020. This amendment changed section 4, presumably to add or modify entries. The exact changes are not detailed in the endnote beyond “am F2020L01523”. Likely it added the transitional provision for Triple Zero Victoria or adjusted the geographical regions. At that point, the instrument would have reflected the transition from the Melbourne premises to Williams Landing.

The next two amendments occurred in 2025. The Telecommunications (Interception and Access) Legislation Amendment (Emergency Service Facilities) Instrument (No. 1) 2025 (F2025L00611) amended section 4 with effect from 28 May 2025. This amendment changed the name of the organisation in item 2 from the Emergency Services Telecommunications Authority to Triple Zero Victoria, reflecting a rebranding of Victoria’s emergency services call-taking organisation. It may also have updated other entries or added new ones. Then the Telecommunications (Interception and Access) Legislation Amendment (Emergency Service Facilities) Instrument (No. 2) 2025 (F2025L00927) further amended section 4 with effect from 10 July 2025. This is the most recent amendment, and the compiled instrument includes its changes. It likely added Concentrix Services and possibly Emergency Management Victoria, or adjusted regions. The endnote shows only “am F2025L00927” for section 4. Without the amending instruments themselves, the exact before-and-after is unknown, but the current table includes an item for Concentrix Services (item 6) and Emergency Management Victoria (item 7) that were not present in earlier versions. The amendment history also notes that the 2025 No. 2 instrument amended section 4. The overall trend is expansion: from the original instrument, the list has grown to cover additional private contractors and government coordination bodies.

The amending instruments are legislative instruments themselves, subject to registration and disallowance. No disallowance motions are recorded in the endnotes. The amendment history does not show any application, saving, or transitional provisions for the amendments, meaning each amendment took effect on its commencement date without transitional periods (except for the original transitional provision in s4(2) which was likely part of the original instrument). The absence of transitional provisions for later amendments means that if an organisation was removed from the table (e.g., if a premises closed), the removal would be immediate, potentially leaving a gap unless the organisation had already stopped operations at that site.

The endnotes also reveal that sections 2 and 3 were repealed by automatic operation of the Legislation Act 2003. Section 48D allows the automatic repeal of provisions that are spent or unnecessary after a period. This is a common practice for legislative instruments that originally contained commencement or definition provisions. The instrument now consists only of sections 1 and 4. This streamlined form reduces the risk of confusion but also means that readers must look elsewhere for definitions and commencement details. The compilation notes at the beginning provide context but are not part of the legal text.

The source materials (the compiled instrument and its endnotes) do not record any litigation history. No court cases are referenced in the endnotes, and there is no indication that the instrument has been challenged or judicially considered. This is unsurprising given that the instrument is a narrow regulatory list rather than a substantive prohibitory or penal provision. Litigation is more likely to arise under the parent Act, where a defendant charged with unlawful interception might argue that the interception occurred at a specified facility. In such a case, the court would need to interpret this instrument to determine whether the premises was covered at the relevant time. However, no such reported cases are mentioned in the source.

The instrument could also be the subject of a merits review or judicial review action if an organisation applied to be included and was refused. The Minister’s decision to specify (or not specify) a facility is a legislative instrument, not a decision subject to the Administrative Decisions (Judicial Review) Act 1977, but it could be challenged on constitutional or procedural grounds, such as exceeding the delegated power under subsection 6(2D). The endnotes do not mention any such challenges. The instrument’s short life (since 2020) and its technical nature likely limit litigation.

A potential future litigation issue could arise if a listed facility continued to intercept communications after its premises ceased to be covered due to amendment or expiry. For example, if a facility relocated but the instrument was not updated in time, any interceptions at the new location would be illegal. If an employee were prosecuted, they might argue that the instrument should be interpreted broadly to cover the old premises or that the organisation’s name should suffice. But the instrument is geographically specific, so such an argument would likely fail. No such case has been recorded.

Another scenario: a private party could bring civil proceedings for damages under the TIA Act for unlawful interception. The instrument’s table would be critical evidence. If the interception occurred at a listed facility, the defendant would have a defence, and the case would likely be dismissed. If not, the plaintiff could succeed. Again, no such civil cases are noted in the source.

The lack of litigation history does not mean the instrument is uncontroversial. It could be that compliance has been smooth, or that any disputes were resolved administratively without court proceedings. The instrument’s detailed nature reduces ambiguity, making legal challenges less likely. But the gotcha remains: the instrument must be read as at the exact date of the alleged interception, and the transitional provision for Triple Zero Victoria shows that coverage can change. Practitioners advising clients should always check the compilation date and confirm whether any amending instruments have commenced.

Several subtleties in this instrument could catch out the unwary. The first is the missing item 4 in the table. The items are numbered 1, 2, 3, 5, 6, 7, with no item 4. This is not a typographical error; it is the result of a previous amendment that repealed, renumbered, or omitted item 4. Anyone reading the instrument might assume the list is sequential and complete, but it is not. There is no legal significance to the missing number, but it could cause confusion when cross-referencing with other documents or databases that expect sequential numbering.

The second gotcha is the transitional provision for Triple Zero Victoria. Subsection 4(2) specifies that the Williams Landing premises have effect after 17 May 2020, and the Melbourne premises ceased to have effect on 1 August 2020. This is a specific date constraint that is now historical but remains in the compiled instrument. If someone reads the current version without noting this transitional rule, they might mistakenly think that both Williams Landing and Melbourne are currently covered. They are not: only Williams Landing (along with Burwood East and Mount Helen) is covered for Triple Zero Victoria. The Melbourne premises are no longer within the exemption. Any interception at a former Melbourne premises after 1 August 2020 would be unlawful. This is a trap for anyone relying on an outdated version or who assumes all listed regions are current.

Third, the instrument uses geographical region names that may be ambiguous. For example, “Melbourne” could refer to the Melbourne central business district, the broader metropolitan area, or a specific suburb. The instrument does not define these regions. “Melbourne” for Emergency Management Victoria might be a specific building in the CBD; for Airservices Australia, “Melbourne” likely refers to Melbourne Airport. The lack of precise address or lot description means that a premises at 10 Bourke Street, Melbourne might not be the same as one at 50 Lonsdale Street, yet both are in the “Melbourne” region. This could lead to disputes about whether a particular building is covered. The instrument provides no mechanism to resolve such ambiguity; it relies on the organisation and the parent Act’s interpretation.

Fourth, the instrument lists Concentrix Services as a “force or service operating premises”. Concentrix is a private company, not a government emergency service. Its inclusion means that a commercial entity can lawfully intercept communications. However, the instrument does not limit Concentrix’s activities to any particular purpose. The parent Act’s exception must be read with the instrument, but if Concentrix were to use the intercepted data for non-emergency purposes (e.g., call quality monitoring for training), that might exceed the exception. The instrument provides no additional constraints; it simply names the entity. Practitioners should verify the scope of the parent Act’s emergency service exception to ensure that a private contractor is acting within its bounds.

Fifth, the instrument has no expiry date. It continues in force until it is repealed or amended. Unlike some legislative instruments that include a sunset clause, this one does not. That means if the parent Act is repealed or subsection 6(2D) is amended, this instrument could become inconsistent or ineffective. Users should monitor the parent Act for changes.

Sixth, the instrument’s amendment history shows that two 2025 amendments were made within a few months of each other, one effective 28 May 2025 and the other 10 July 2025. This indicates a period of rapid change. Anyone relying on the instrument for compliance purposes must ensure they have the latest version, as the difference between May and July 2025 could affect the legality of interceptions. The compilation date of 10 July 2025 means that any interceptions after that date are covered by the latest amendments. However, interceptions between 28 May and 9 July 2025 would be governed by the version as amended by No. 1 but not yet by No. 2. The instrument does not include transitional provisions for these amendments, so the effective date is the commencement date in the amending instrument. Practitioners must carefully track each commencement date.

Compliance with this instrument is straightforward for the organisations listed: they need to ensure that their operations at the specified premises are within the scope of the emergency service exception under the Telecommunications (Interception and Access) Act 1979. The instrument itself does not impose record-keeping or reporting obligations, but the parent Act likely does. For example, if the parent Act requires that interceptions be logged, authorised, or limited to certain personnel, the facility must have internal policies and training to meet those requirements. The instrument is a prerequisite, not a compliance manual.

The first step for any organisation that believes it should be covered is to check whether its premises appear in the current table. This means obtaining the latest compilation from the Federal Register of Legislation and verifying that the organisation name and geographical region match the premises in use. If the premises is not listed, the organisation cannot rely on the exception. It must either apply for an amendment to the instrument (by contacting the responsible minister or department) or ensure that any interception at that location is covered by a different exception or by a warrant under the Act. This process may take time, so advance planning is crucial.

The second step is to monitor amendments. The amendment history shows that the instrument changes at least annually. Organisations should subscribe to alerts on the Federal Register of Legislation for this instrument. When an amendment is registered, the organisation must determine whether its premises remain covered. If an amendment removes a premises, the organisation must immediately cease any interception activities at that site unless it has another lawful basis. If an amendment renames the organisation, the organisation should update its internal references accordingly.

The third step is to maintain accurate records of the premises and the dates of coverage. For Triple Zero Victoria, the transitional provision means that Williams Landing was not covered before 18 May 2020, and Melbourne was not covered after 1 August 2020. If an organisation has similar transitional provisions in the future, it must keep logs of where and when interceptions occurred to demonstrate that they were within the specified period. This is particularly important for audits or investigations.

The fourth step is training and internal policies. Employees at the specified premises must be trained on the limits of the exception. They should know that they may intercept and access communications only for the purpose of providing emergency services. They must not use the data for other purposes, such as internal performance monitoring (unless that is part of the service) or sharing with third parties without proper authority. A written policy should be in place that references the instrument and the parent Act, and it should be reviewed after each amendment.

For private contractors like Concentrix Services, additional compliance measures are needed. They should have contractual clauses with their government clients that oblige the government to maintain the listing. They should also have independent legal advice to confirm that their specific activities fall within the emergency service exception. Because Concentrix is a private entity, it may face extra scrutiny if it intercepts communications; therefore, external audits are advisable.

For telecommunications carriers routing calls to listed facilities, compliance can be achieved by confirming that the destination premises is in the current instrument. Carriers should maintain a current copy of the instrument and a process to update their routing information when the instrument changes. If a facility is delisted, the carrier must redirect calls to a listed facility or obtain alternative legal authority for interception at the delisted site.

Finally, organisations should document their reliance on the instrument. In the event of a legal challenge or investigation, they should be able to produce a copy of the instrument in force at the relevant time, along with evidence that the interception occurred at the specified premises. This includes location records, floor plans, and computer logs showing the IP address or network segment used. Having such documentation ready can demonstrate good faith compliance and reduce the risk of penalty.