SF v Shoalhaven City Council

SF commenced proceedings against Shoalhaven City Council, claiming breaches of certain information protection principles and privacy codes. The dispute centred around the collection, retention, and security of personal information by the Council, which was deemed excessive and not relevant to the stated lawful purpose. The matter was heard in the Federal Circuit Court of Australia.

The central legal issues were whether the Council had unlawfully collected personal information beyond what was necessary for the stated lawful purpose, whether it had retained the information for longer than required, and whether it had adequately secured the information against unauthorised access. Additionally, the court considered whether the Council's actions were in compliance with the relevant privacy codes of practice.

The court found that the Council had indeed breached several information protection principles. It had collected personal information that was not relevant to the stated lawful purpose, retained it for longer than necessary, and failed to ensure its adequate security. The Council's actions were also found to be in breach of the applicable privacy codes of practice. The court ordered that the Council must refrain from any future conduct that contravenes an information protection principle or a privacy code of practice. It was also required to provide a written apology to the applicant and to inform him of the steps it would take to prevent similar breaches in the future.