DSO18 v Minister for Home Affairs

DSO18 brought an appeal against a decision of the Immigration Assessment Authority, contending that a data breach concerning his personal information invalidated the decision. The Minister for Home Affairs opposed the appeal, arguing that the data breach was irrelevant to the validity of the decision. The Federal Court of Australia was tasked with deciding whether the alleged data breach rendered the decision invalid.

The primary legal issue was whether the appellant's personal information being accessible on the Federal Court portal constituted a breach of section 91X of the Migration Act 1958 (Cth) and, if so, whether such a breach affected the validity of the decision made by the Immigration Assessment Authority. The court had to determine if the data breach was material and, if so, whether it invalidated the decision or merely required a remedy for the breach itself.

The court held that the data breach, even if established, did not affect the validity of the decision. It was noted that the appellant's name being accessible on the Federal Court portal did not equate to a breach of privacy or confidentiality under section 91X. The court reasoned that the data breach did not influence the decision-making process and was therefore irrelevant to the validity of the decision. Consequently, the appeal was dismissed, and the application for an adjournment was refused.

The court's final order was that the application filed on 26 February 2020 was dismissed, with entry of orders governed by Rule 39.32 of the Federal Court Rules 2011. This decision underscores that a data breach does not automatically invalidate a decision unless it can be shown to have materially affected the decision-making process.