WT v Auburn Council

The case of WT v Auburn Council involved a dispute regarding the handling and disclosure of personal information by the Auburn Council. The applicant, WT, alleged that the council had breached the information protection principle by disclosing personal information to a third party without consent. The matter was brought before the Civil and Administrative Tribunal of New South Wales (NCAT). The primary legal issue before the tribunal was whether the council had violated the applicant's privacy by disclosing their personal information to a third party without proper authorisation. This required an examination of the relevant provisions of the Privacy and Personal Information Protection Act 1998 (NSW) and whether the council's actions complied with these provisions.

The tribunal found that the council had indeed breached the applicant's privacy by disclosing their personal information to a third party without adequate justification. The tribunal considered the nature of the information disclosed, the context in which it was shared, and the council's obligations under the Act. It was determined that the council failed to ensure that the information was only used for the purpose for which it was collected, and that it did not take reasonable steps to protect the information from misuse or unauthorised access. The tribunal held that the council's actions constituted a serious breach of the applicant's privacy rights, warranting compensation.

In light of the findings, the tribunal ordered the Auburn Council to pay the applicant damages in the sum of $5,000. This decision underscores the importance of adherence to privacy laws and the potential consequences for organisations that fail to properly manage personal information. The case serves as a reminder of the obligations placed on public bodies to protect the privacy of individuals and the need for rigorous compliance with privacy legislation.