CLT v Department of Education and Communities

The applicant, CLT, filed a complaint against the Department of Education and Communities before the Civil and Administrative Tribunal (CAT), arguing that the Department's loss of the applicant's medical certificate constituted a breach of the Privacy and Personal Information Protection Act 1998 (NSW). The crux of the matter was whether the Department's failure to prevent the unauthorised disclosure of personal information amounted to a contravention of IPP 5, which mandates reasonable safeguards for personal information.

The primary legal issue before the Tribunal was to determine whether the Department's loss of the medical certificate, which contained personal information, constituted a breach of IPP 5. This involved assessing whether the Department had implemented reasonable safeguards to protect the personal information and whether the loss of the certificate led to an unauthorised disclosure of that information. The Tribunal had to consider the nature of the personal information, the circumstances of its loss, and the adequacy of the safeguards in place at the time.

In examining the evidence, the Tribunal concluded that the Department had implemented reasonable safeguards for the protection of personal information, despite the unfortunate loss of the medical certificate. The Tribunal found that there was no evidence of unauthorised disclosure of the personal information as a result of the loss. Therefore, the Tribunal determined that the Department's actions did not breach IPP 5. Consequently, the complaint was dismissed.

The Tribunal ordered that within 14 days of the decision, the applicant would file and serve any evidence and submissions as to what relief should be granted. The respondent was then given a further 14 days to file its responsive evidence and submissions.