VET Student Loans (Miscellaneous Measures) Act 2025

Definitions. The Act's operative concepts are defined in section 3. Key definitions are: "deal, with a tax file number", which captures requiring or requesting quoting, collecting, recording, storing, using or disclosing a TFN (s 3(1)); "relevant period", which is the retrospective window from 1 January 2017 up to 30 September 2025 inclusive (the Act says ending immediately before 1 October 2025) (s 3(1)); and "relevant person", a closed list comprising the Secretary, the Commissioner, an approved course provider, a Commonwealth officer and an officer of an approved course provider (s 3(1)). The Act also imports definitions from the VET Student Loans Act 2016 by reference where that Act defines expressions used here (s 3(2)). The breadth of "deal" is functionally wide: it covers passive retention and active uses and disclosures, as well as collection and requests to quote a TFN.

Retrospective authorisation mechanism. Section 4 is the central mechanism. It begins with a conditional structure: if, during the relevant period, a relevant person dealt with a student’s TFN for the purposes of facilitating or administering a student’s application for, or a student’s VET student loan, and that dealing was not authorised by a Commonwealth law (apart from subsection (2) and (3)), subsection (2) then treats that dealing as having always been authorised by the VET Student Loans Act 2016 and as in connection with and reasonably necessary for performance of functions under that Act (s 4(1)-(2). In other words, the Act operates to retroactively supply an authorisation nexus to the VET Student Loans Act 2016 for past TFN dealings within the stated factual scope.

Taxation-law and TFN-rule consequences. Section 4(3) goes further and treats the VET Student Loans Act 2016 as having been a "taxation law" for the purposes of sections 8WA and 8WB of the Taxation Administration Act 1953 and for the Privacy (Tax File Number) Rule 2015, with the explicit exclusion of rule 13 of that TFN Rule (s 4(3)). The statutory language is precise about the scope of that deeming: it is confined to those identified statutory instruments and excludes rule 13. The Act thereby alters the legal character of the VET Student Loans Act 2016 retrospectively for specified statutory purposes.

Validation. Section 4(4) is a general validation clause: it declares that anything done or purported to have been done that would have been wholly or partly invalid or unlawful except for subsections (2) and (3) is, for all purposes, valid and lawful and to have always been valid and lawful, despite any effect on accrued rights. This validation is broad and operates to extinguish or negate arguments that prior TFN dealings were invalid or unlawful to the extent that subsections (2) and (3) apply.

Coverage of proceedings and complaints. Section 4(5) establishes that the Act applies to pending civil and criminal proceedings (whether instituted before or after commencement) and to complaints under the Privacy Act 1988 made to the Information Commissioner both before and after commencement, subject to the conditions stated (s 4(5)). That is, the retrospective authorisation and the deeming consequences are declared to affect ongoing legal processes as well as future ones.

Compensation for acquisition. Section 5 addresses constitutional risks under paragraph 51(xxxi) of the Constitution. If, but for section 5, the operation of section 4 would amount to an acquisition of property other than on just terms, the Commonwealth becomes liable to pay reasonable compensation (s 5(1)). Where there is disagreement on the amount, the Act permits proceedings in the Federal Court for recovery of such reasonable compensation as the Court determines (s 5(2)). The Act therefore recognises and provides a mechanism for constitutional compensation claims that may arise from the retroactive authorisation.

Commencement. The Act commences the day after Royal Assent, recorded in the commencement table as 5 December 2025 (s 2 and table). The Act’s structure is concise: five substantive sections and management material.

Primary affected persons. The Act identifies a narrow list of "relevant person[s]" in section 3(1)(definition of relevant person). Those are the Secretary (presumably of the Department administering the VET Student Loans Act 2016), the Commissioner, an approved course provider, a Commonwealth officer and an officer of an approved course provider. The statutory reach is therefore targeted at Commonwealth actors and private providers approved under the VET Student Loans framework. Students whose TFNs were collected, recorded, stored, used, disclosed or otherwise dealt with are the class of third parties affected by the validation and by any compensation claim.

Students. Students who had their TFNs dealt with between 1 January 2017 and 30 September 2025 are directly affected in two principal ways. First, section 4(2) treats those TFN dealings as authorised by the VET Student Loans Act 2016 and as reasonably necessary for administration of VET student loan applications or loans; that alters the statutory basis on which privacy, TFN-rule and taxation-law claims might be made. Second, section 5 preserves a pathway for compensation where the operation of section 4 would result in an acquisition of property other than on just terms (s 5(1)-(2)). The Act also affects the remedy environment for students because section 4(5) brings pending civil/criminal proceedings and Privacy Act complaints within the application of the Act.

Approved course providers and their officers. Approved course providers and their officers are explicitly within the "relevant person" definition (s 3(1)). For them the Act retroactively reduces legal uncertainty about whether past TFN handling for VET student loan purposes was authorised by statute: the Act says such dealing is taken to have been authorised by the VET Student Loans Act 2016 and reasonably necessary for its functions (s 4(2)). That reduces some potential exposure to statutory invalidity claims, subject to the rule 13 exclusion and potential constitutional compensation claims under s 5 if acquisition on non-just terms arises.

Commonwealth entities and officers. The Secretary and Commissioner and other Commonwealth officers are within the relevant-person class (s 3(1)). The Act treats their past TFN dealings as retrospectively authorised and gives the VET Student Loans Act 2016 retrospective taxation-law status for certain purposes (s 4(2)-(3)). This changes the legal footing for Commonwealth administrative action taken during the relevant period with respect to TFNs in the VET loans context.

Regulators and decision-makers. The Act affects how courts, the Information Commissioner and other decision-makers will treat past TFN dealings. Section 4(5) makes clear that the Act applies to proceedings and complaints both instituted and lodged before commencement and still pending as at commencement (s 4(5)(a)(i), (b)(i)). The Act therefore changes the legal framework that those bodies must apply when resolving disputes about past TFN dealings in the VET student loans context.

Legal advisers and compliance functions. Lawyers advising students, providers or Commonwealth agencies will need to assess the effect of the validation and of the rule 13 carve-out on potential claims. Firms, compliance officers and auditors in the VET sector must treat the retrospective authorisation and the possibility of systemic compensation claims as an altered risk profile for both providers and affected students.

Indirectly affected stakeholders. Entities outside the immediate "relevant person" list may be affected indirectly. For example, third parties that received TFNs from relevant persons during the relevant period, or entities whose contracts or records relied on TFN data obtained from relevant persons, will be affected to the extent the validation changes the legal status of the underlying TFN dealings. However, the Act’s operative language confines the initial authorization to TFN dealings by the listed relevant persons (s 3(1), s 4(1)-(3)).

What the Act requires. The Act does not create new day-to-day operational duties for the future. Its chief operative effect is retrospective: it declares that certain past conduct is taken always to have been authorised and lawful (s 4(2)-(4)). It therefore imposes no ongoing statutory duty to perform new actions, except insofar as common-law or other statutory duties not displaced by this Act continue to apply. The Act does, however, preserve and create procedural pathways: it specifies how pending proceedings and complaints are to be treated and it provides a compensation mechanism in the event of an acquisition on non-just terms (s 4(5); s 5(1)-(2)).

Rights preserved or created. Individuals retain the right to seek compensation under section 5 where the operation of section 4 effects an acquisition of property otherwise than on just terms; if parties cannot agree on compensation, the person may institute proceedings in the Federal Court to recover a reasonable amount as determined by the Court (s 5(1)-(2)). The Act also preserves the ability to bring civil and criminal proceedings and to lodge Privacy Act complaints; however the substance of those claims will be considered in light of the Act’s retrospective authorisation (s 4(5)). The Act does not eliminate other legal rights or remedies unless those rights are inconsistent with the declared authorisation and validation. The validation clause (s 4(4)) specifies that otherwise invalid or unlawful acts are to be treated as valid and lawful despite any effect on accrued rights; that language indicates that accrued rights can be affected, but the Act simultaneously creates a compensation mechanism where constitutional acquisition questions arise (s 5).

Allocation of decision-making power. The Act itself does not transfer decision-making power to a particular official for exercise going forward. Rather, it supplies an ex post statutory character to past acts. Questions about whether a given past dealing falls within the Act’s scope,whether the dealing was during the relevant period, by a relevant person, and for the specified purposes,will be matters for factual and legal determination in courts, tribunals or by the Information Commissioner where complaints are raised (s 3(1), s 4(1), s 4(5)). The Federal Court is expressly given jurisdiction to determine compensation disputes under section 5(2).

Interaction with TFN privacy and taxation law. The Act takes the VET Student Loans Act 2016 to have been a taxation law for sections 8WA and 8WB of the Taxation Administration Act 1953 and for the Privacy (Tax File Number) Rule 2015, excluding rule 13 (s 4(3)). This creates a statutory right/characterisation that can be relied upon in legal processes governed by those instruments. The exclusion of rule 13 leaves intact any rights or obligations that flow from that rule, to the extent it might have been engaged.

Obligations for parties in dispute resolution. The Act brings pending civil and criminal proceedings and Privacy Act complaints within its ambit (s 4(5)). Parties engaged in such proceedings should take the Act into account in pleadings, evidence and submissions since the Act alters the legal framework applicable to the facts being litigated or considered.

Limits on rights. Subsection 4(2) expressly excludes the purposes of rule 13 of the Privacy (Tax File Number) Rule 2015 from the retrospective authorisation. The Act therefore preserves whatever legal consequences rule 13 may have independently of the statutory authorisation created by subsections (2) and (3). The Act also makes clear that compensation for constitutional acquisition (s 5) is the particular remedy if section 4 triggers acquisition questions; the Act does not create other statutory remedies.

No new criminal penalties or administrative fines in this Act. The Act does not create offences, monetary penalties or administrative enforcement powers. Its primary enforcement-relevant measures are validation and compensation. Section 4 validates past conduct and thus reduces grounds for enforcement action that would rest on a conclusion that past TFN dealings were unauthorised under Commonwealth law, with a stated exception relating to rule 13 of the Privacy (Tax File Number) Rule 2015 (s 4(2)-(3)). That has an enforcement effect by changing the legal basis on which regulators and prosecutors might act in relation to historical TFN dealings in the VET loans context.

Civil enforcement: compensation and court jurisdiction. Section 5 imposes a Commonwealth liability where section 4 would otherwise operate as an acquisition of property other than on just terms (s 5(1)). If the Commonwealth and the affected person do not agree on compensation, the person may bring proceedings in the Federal Court to recover a reasonable amount of compensation as the Court determines (s 5(2)). That is the Act’s explicit civil enforcement route for constitutional acquisition claims. The Act gives the Federal Court jurisdiction over compensation disputes; it does not create a new specialist tribunal or alternative dispute mechanism.

Effect on pending civil and criminal proceedings. Section 4(5)(a) states that the Act applies to civil and criminal proceedings instituted before commencement and not concluded before commencement, and to civil and criminal proceedings instituted on or after commencement (s 4(5)(a)(i)-(ii)). For prosecutors and civil litigants, the Act therefore requires assessment of whether the retrospective authorisation alters the legal foundation of a claim or defence. The validation in s 4(4) may lead to dismissal or narrowing of claims that depended on the unlawfulness of past TFN dealings, subject to the rule 13 carve-out. Conversely, claimants may pursue compensation under s 5 where constitutional acquisition issues arise.

Privacy complaints. Section 4(5)(b) extends the Act to Privacy Act complaints made to the Information Commissioner before and after commencement in specified circumstances (s 4(5)(b)(i)-(ii)). The Information Commissioner must therefore consider the Act's retrospective authorisation when assessing complaint outcomes. The Act does not itself provide the Information Commissioner with new enforcement powers, but it changes the statutory and factual substrate upon which privacy investigations and determinations will proceed. The Act’s exclusion of rule 13 means at least some aspects of the Privacy (Tax File Number) Rule 2015 may still ground complaint outcomes.

Limits and residual enforcement avenues. Because the Act validates past conduct, it reduces the pool of enforceable claims that rest solely on lack of statutory authorisation for TFN dealing in the VET student loans context. However, the Act preserves compensation via Federal Court proceedings for constitutional acquisition and leaves rule 13 of the Privacy (Tax File Number) Rule 2015 intact for its specific purposes (s 4(2), s 5). Any criminal liability that hinged on other statutory elements (not simply lack of authorisation) or any matters not captured by the Act’s factual scope could remain enforceable, but whether they survive in each case turns on the particular statutory elements at issue as applied in light of the Act (s 4(1)-(4)).

VET Student Loans Act 2016. The Act expressly operates by reference to the VET Student Loans Act 2016. Section 4(2) declares past TFN dealings made in the relevant period for VET student loan purposes to be authorised by the VET Student Loans Act 2016 and reasonably necessary for performance of functions under that Act (s 4(2)). Section 3(2) imports definitions from the VET Student Loans Act 2016 so that expressions used in this Act have the same meaning as in that Act, where defined (s 3(2)). The retrospective authorisation therefore amends, for past purposes, the legal fabric by making VET Student Loans Act 2016 the authorising law for the specified TFN dealings.

Taxation Administration Act 1953 (s 8WA, s 8WB). Section 4(3)(a) takes the VET Student Loans Act 2016 to have been a "taxation law" for the purposes of sections 8WA and 8WB of the Taxation Administration Act 1953 (s 4(3)(a)). The Act does not itself restate what those sections do; it simply changes the character of the VET Student Loans Act 2016 for the narrow statutory purposes identified. Practically, this may affect the statutory powers or exemptions that apply to TFN information where those rely on "taxation law" status, but the Act's text limits its deeming to those identified provisions.

Privacy (Tax File Number) Rule 2015. Section 4(3)(b) takes the VET Student Loans Act 2016 to have been a taxation law for the purposes of the Privacy (Tax File Number) Rule 2015, with an explicit exclusion: rule 13 is not covered by s 4(2) and (3) (s 4(2) and s 4(3)(b)). The Act therefore alters how the TFN Rule interacts with the VET Student Loans Act 2016 in relation to past TFN dealings, except as to rule 13 which remains outside the retrospective authorisation. Because the Act does not define rule 13 or its consequences, the precise residual interaction depends on the content of rule 13 and its application to particular facts.

Privacy Act 1988 and Information Commissioner. Section 4(5)(b) directs that the Act applies to Privacy Act complaints made to the Information Commissioner before commencement where the Commissioner has not made a determination before commencement, and to complaints made on or after commencement (s 4(5)(b)(i)-(ii)). That makes the Act relevant to the Commonwealth’s privacy enforcement system. The Act does not itself amend the Privacy Act 1988, but it changes the legal assessment that the Information Commissioner must apply to complaints concerning TFN dealings for the specified period.

Constitutional property acquisition (s 51(xxxi)). Section 5 expressly recognises that the operation of section 4 could raise acquisition-on-non-just-terms issues under paragraph 51(xxxi) of the Constitution and provides a compensation obligation and Federal Court recovery route if that occurs (s 5(1)-(2)). The Act therefore anticipates and provides for interaction between statutory validation and constitutional property rights.

Other statutory or common-law claims. The Act’s validation of past conduct (s 4(4)) may limit or extinguish claims that depend on an absence of statutory authorisation, but it does not expressly displace private-law causes of action that arise independently of statutory authorisation unless they are inconsistent with the validation. Whether particular statutory or common-law causes of action remain available will depend on their elements and on whether the validation operates to remove an element (for example, unlawfulness) previously relied upon by plaintiffs. The Act does not attempt a comprehensive override of all legal mechanisms; it is targeted at TFN dealings in the VET loans context and their treatment under the named statutory instruments.

Proceedings and complaints continuity. By applying to pending civil and criminal proceedings and Privacy Act complaints (s 4(5)), the Act authoritatively changes the legal regime that courts and the Information Commissioner must apply. The result is that existing cases must be re-assessed in light of the retrospective authorisation, including consideration of the rule 13 exclusion and potential compensation under s 5.

Limits on retroactivity. The Act contains its own limits and carve-outs: rule 13 of the Privacy (Tax File Number) Rule 2015 is excluded (s 4(2)), and the compensation clause operates only if section 4 would otherwise effect an acquisition other than on just terms (s 5(1)). The Act’s retrospective authorisation therefore coexists with other legal protections, remedial mechanisms and constitutional guarantees, rather than entirely supplanting them.

Original enactment only. The text provided shows this is the original enactment, titled the VET Student Loans (Miscellaneous Measures) Act 2025, No. 77, 2025, assented to on 4 December 2025 and with commencement stated as the day after Royal Assent, recorded in the commencement table as 5 December 2025 (header and s 2 with table). The Act contains a commencement table that specifies the whole Act commenced the day after Royal Assent (s 2 and table). The note under the table states that the table relates only to provisions as originally enacted, and that it will not be amended to deal with later amendments (s 2, note). There is no further amendment history in the text provided.

Second-reading speech references. The bottom of the Act text records that the Minister’s second reading speech was made in the House of Representatives on 29 October 2025 and in the Senate on 26 November 2025 (footer). The Act itself does not reproduce the speech content; the references indicate the parliamentary consideration timeline only.

No amending provisions recorded. The Act contains five substantive provisions and does not show subsequent amendments, schedules or sunset clauses in the text supplied. Any future amendments would be reflected in later legislative instruments; none are present in the current text.

Publication metadata. The commencement table and the note about column 3 not being part of the Act (s 2(2)) are standard parliamentary drafting features; the note signals that ancillary published material in the commencement table (column 3) is not statutory. The Act’s limited length and focused subject-matter reduce the immediate need for subsequent amendment unless stakeholders identify interpretive issues requiring clarification.

Implication for legal research. Because this is the original enactment, researchers should treat this version as the source text for initial interpretation. Any subsequent parliamentary amendments or judicial interpretation would constitute the amendment and litigation history but are not present in the supplied material.

No reported litigation in the text. The Act’s text does not record any judicial decisions, appeals, or determinations interpreting its provisions. It contains provisions specifically about application to pending civil and criminal proceedings and to Privacy Act complaints (s 4(5)), and it establishes a Federal Court recovery route for compensation disputes (s 5(2)), but the supplied material does not include any Federal Court judgments or other proceedings brought under s 5 or otherwise.

Potential for future litigation. The Act creates a statutory basis for litigation in two respects. First, section 5 contemplates Federal Court proceedings if the Commonwealth and an affected person do not agree on a reasonable amount of compensation where an acquisition other than on just terms is alleged (s 5(2)). Second, by validating past conduct and applying that validation to pending proceedings and complaints (s 4(4) and s 4(5)), the Act will, in practice, generate litigation or procedural disputes over whether particular past TFN dealings fall within the Act’s scope (e.g., whether the dealing was for the purposes specified and occurred in the relevant period, and whether any acquisition has occurred), and over the effect of the exclusion of rule 13 (s 4(2), s 4(3)). Those potential causes of action are provided for by the Act but are not yet reflected in any reported judgments in the supplied material.

No cases named or cited in the Act. The Act’s text does not name or cite judicial authorities or prior litigation. Any emerging case law interpreting definitions such as "deal" or the scope of the relevant period, or applying s 5, would be external to this Act and will need to be tracked separately.

Broad definition of "deal". Section 3’s definition of "deal, with a tax file number" intentionally covers a wide range of interactions: requiring or requesting quoting, collecting, recording, storing, using or disclosing a TFN (s 3(1)). That breadth means passive retention of TFNs, operational internal uses and routine communications could all be captured if done during the relevant period and in connection with VET student loan administration. Practitioners should not assume "dealing" is limited to active disclosure.

Narrow list of "relevant persons". The Act’s authorisation applies only to the listed "relevant persons" in s 3(1): the Secretary, the Commissioner, an approved course provider, a Commonwealth officer, and an officer of an approved course provider. Entities not on that list are not covered by the Act’s retrospective authorisation. If a third party outside that list dealt with TFNs during the relevant period, the Act does not purport to authorise that dealing unless it was done by or on behalf of a listed relevant person in a way that the Act’s language captures. The Act does not expressly provide an agency or vicarious-authority clause beyond the listed categories.

Relevant period timing. The "relevant period" runs from the start of 1 January 2017 and ends immediately before 1 October 2025 (s 3(1)). That precise framing means a dealing on 30 September 2025 is included; a dealing on or after 1 October 2025 is not. The Act’s retrospective window therefore has a hard cut-off; conduct after that point is not validated by the Act.

Rule 13 exclusion. Subsection 4(2) expressly excludes the purposes of rule 13 of the Privacy (Tax File Number) Rule 2015 from the retrospective authorisation (s 4(2)). The Act therefore leaves the separate legal consequences of rule 13 intact and available. Because the Act does not state what rule 13 covers, users must check rule 13 directly to assess the residual legal exposures. The exclusion is narrow: the Act validates TFN dealings for many statutory purposes but does not displace whatever legal consequences rule 13 confers.

Effect on accrued rights. Section 4(4) states that anything done, or purported to have been done, that would otherwise have been wholly or partly invalid or unlawful except for subsections (2) and (3) is taken to be valid and lawful, and to have always been so, despite any effect on accrued rights (s 4(4)). The phrase "despite any effect on the accrued rights of any person" signals that vested rights may be altered by the Act; that alters the usual protection that accrual of rights provides against retrospective statutory changes.

Constitutional acquisition and compensation. Section 5 provides that, if the operation of s 4 would result in an acquisition of property other than on just terms, the Commonwealth is liable to pay reasonable compensation, and the person may seek Federal Court recovery if compensation cannot be agreed (s 5(1)-(2)). The need to invoke s 5 depends on whether a particular application of s 4 effects an acquisition under paragraph 51(xxxi). That may require contested factual and legal analysis and hence litigation. Practitioners should note that s 5 does not set out how "reasonable amount of compensation" is to be calculated; that is left to agreement or the Federal Court (s 5(2)).

Scope of "for the purposes of facilitating the administration of or administering". Section 4(1) conditions the retrospective authorisation on the dealing being "for the purposes of facilitating the administration of or administering: (i) the student’s application for a VET student loan; or (ii) the student’s VET student loan" (s 4(1)). The Act does not define "facilitating" or supply an exhaustive list of facilitative activities. That leaves open questions about borderline activities , for example, TFN uses for unrelated marketing or cross-program administration , and those questions will likely be context-dependent and litigated or argued in regulatory processes.

Application to pending proceedings and complaints. Section 4(5) requires courts and the Information Commissioner to apply the Act to pending proceedings and complaints (s 4(5)). Parties who have already filed proceedings should revisit pleadings and evidence because previously available lines of argument based on lack of statutory authorisation may no longer succeed. The Act does not create a transitional remediation fund or set out a time limit for lodging compensation claims under s 5, so tactical timing and procedural strategy may be important in any dispute.

No express ex gratia compensation route or claims process. Section 5 provides for liability and Federal Court recovery but does not set out an administrative claims process, alternative dispute resolution mechanism, or timelines for making compensation claims (s 5). Practitioners should therefore be prepared for litigation as the main structured route if parties cannot agree on compensation.

For relevant persons (Secretary, Commissioner, approved course providers, Commonwealth officers, officers of providers). Even though the Act is primarily retrospective, relevant persons should take several practical steps to manage legal risk and compliance going forward:

• Review historical TFN handling (2017-30 Sep 2025). Maintain detailed records showing when, why and how TFNs were collected, recorded, stored, used or disclosed during the relevant period, and document the link to facilitating or administering VET student loan applications or loans (s 3(1) definition of "deal", s 4(1)). These records are likely to be decisive in any litigation or compensation discussions under s 5.

• Assess current processes for TFN handling post-30 Sep 2025. The Act validates prior conduct only up to that cut-off; current and future TFN dealing must be authorised under existing law. Confirm that present procedures have a clear legal basis to avoid reliance on retrospective authorisation.

• Identify exposures under rule 13. Because the Act excludes rule 13 of the Privacy (Tax File Number) Rule 2015 from its authorisation (s 4(2)), review compliance with rule 13 in historical and current practice and seek specialist advice on any residual obligations or exposure.

• Preserve evidence for potential compensation claims. Where there is a realistic prospect that s 4’s operation could be argued to effect an acquisition on non-just terms, preserve evidence of value, ownership interest, loss and the causal link between the Act’s operation and any alleged acquisition to respond to or pursue s 5 claims (s 5(1)-(2)).

• Engage internal legal and compliance functions early. Counsel should reassess existing or threatened litigation and privacy complaints in light of s 4(5), amending pleadings and positions promptly where necessary to reflect the Act’s operation on the issues in dispute.

For students and affected individuals. If you believe your TFN was dealt with unlawfully during the relevant period:

• Identify whether the dealing falls within the Act’s scope. Determine whether the dealing occurred between 1 January 2017 and 30 September 2025, whether it was by a listed relevant person (s 3(1)), and whether it was "for the purposes of facilitating the administration of or administering" a VET student loan application or loan (s 4(1)). This assessment is factual and legal; preserve any documents or communications concerning the TFN dealing.

• Consider constitutional compensation only where acquisition on non-just terms is arguable. Section 5 provides a compensation route if the operation of section 4 results in an acquisition other than on just terms (s 5(1)). If parties cannot agree on compensation, the Federal Court is the forum for recovery (s 5(2)). Seek legal advice early about whether your circumstances could satisfy the constitutional test because such claims can be complex and fact-specific.

• Lodge or continue Privacy Act complaints with the Information Commissioner where appropriate. Section 4(5)(b) applies this Act to complaints lodged before commencement where no determination had been made and to complaints lodged after commencement (s 4(5)(b)). Complaints will be assessed in light of the statutory authorisation and the rule 13 exclusion.

For regulators and decision-makers. When adjudicating pending matters or new complaints:

• Apply the Act as part of the legal framework. Section 4(5) requires the Act to be applied to pending civil and criminal proceedings and to Privacy Act complaints (s 4(5)). Decision-makers should evaluate whether the relevant TFN dealing falls within the conditions in s 4(1) and account for the rule 13 exclusion.

• Where compensation questions arise, direct parties to s 5. For constitutional acquisition issues resulting from the application of s 4, the Act establishes Commonwealth liability and a Federal Court recovery route (s 5(1)-(2)). Administrative decision-making should avoid pre-empting judicial functions in that domain.

Record-keeping and audit. All affected organisations should adopt or update TFN handling policies, train staff on TFN privacy obligations, and ensure secure storage and use policies are in place for current and future TFN handling. Although the Act validates past conduct for the stated purpose and period, good governance requires lawful and documented processes going forward.

Engage counsel on interpretive issues. The Act leaves several interpretive questions,such as what counts as "facilitating the administration of" a loan and the precise scope of the rule 13 exclusion,unresolved in the text. Legal advisers should be engaged to advise on specific factual scenarios, prepare responses to complaints or proceedings, and, where appropriate, advance or defend compensation claims under s 5.

Monitor for litigation and guidance. Because the Act alters the legal landscape for prior TFN dealings and anticipates compensation proceedings, affected parties should monitor Federal Court filings and any determinations by the Information Commissioner to understand evolving interpretation. Where possible, seek to resolve compensation and privacy disputes by agreement to avoid protracted litigation, recognising that the Act does not provide an administrative compensation scheme and that unresolved disputes may require Federal Court determination (s 5(2)).