JD v Director General, NSW Department of Health (No 2)

In the case of JD v Director General, NSW Department of Health (No 2), the applicant, JD, sought relief under the Privacy and Personal Information Protection Act 1998 (NSW). The dispute centred around the alleged improper handling of personal information by the respondent, the Director General of the NSW Department of Health. JD claimed that the respondent had contravened certain privacy principles, including the accuracy and disclosure to third parties of personal information.

The legal issues before the court were whether the respondent had indeed breached the privacy principles and, if so, what remedy should be granted. The court had to examine the specific provisions of the Privacy and Personal Information Protection Act 1998 (NSW) that pertain to the accuracy and disclosure of personal information, and determine if the respondent's actions fell outside these legal parameters. The court also had to consider the appropriate remedy, including the requirement for an apology and the correction or deletion of personal information.

In its reasoning, the court found that the respondent had contravened the privacy principles as alleged by JD. The court held that the respondent had failed to ensure the accuracy of personal information and had improperly disclosed it to third parties without JD's consent. Consequently, the court ordered the respondent to provide a written apology to JD and to correct or delete the personal information in accordance with the tribunal's decision. The court also mandated that the respondent notify relevant authorities of the tribunal's decision and the actions taken to rectify the privacy breaches. The orders required the respondent to comply with these directives by a specified date.

The final orders included a written apology to JD, the correction or deletion of the personal information, and the notification of relevant authorities. The respondent was required to make these actions within a specified timeframe, demonstrating the tribunal's commitment to enforcing privacy rights and ensuring compliance with the relevant statutory provisions.