Determination of Requirements - Certificates under subsections 282(3), (4) or (5)

Overview

The Telecommunications Act 1997 was enacted to provide a comprehensive regulatory framework for telecommunications services in Australia, addressing the need for updated legislation to accommodate the rapid technological advancements and changes in the telecommunications industry. The Australian Communications Authority (ACA) was established to administer this Act, and in 1998, the ACA determined the requirements for certificates under subsections 282(3), (4) or (5) of the Act. This legislative instrument aims to regulate the circumstances under which authorised officers of criminal law-enforcement agencies, civil penalty-enforcement agencies, and public revenue agencies may certify that a disclosure of information or a document is reasonably necessary, ensuring that such disclosures are made in a controlled and accountable manner that balances the interests of law enforcement and privacy protection. The determination reflects the policy objective of maintaining the integrity and effectiveness of the telecommunications regulatory system while safeguarding individual privacy rights.

Scope and Application

The Telecommunications Act 1997, as determined by the Australian Communications Authority (ACA) in its 1998 Determination, outlines specific requirements for the issuance of certificates that permit the disclosure of otherwise confidential information and documents under certain conditions. This determination applies to authorised officers of criminal law-enforcement agencies, civil penalty-enforcement agencies, and public revenue agencies who are tasked with certifying that the disclosure of information is reasonably necessary for purposes such as criminal law enforcement, enforcement of laws imposing pecuniary penalties, or the protection of public revenue. The certificate must detail the specific information or documents to be disclosed, state the authorised officer's satisfaction that the disclosure is necessary, and include other specified details such as the name and type of the enforcement agency, the identity of the person from whom the information is sought, and the date the certificate is issued. The requirements extend to ensuring that the certificate is either signed if in written form or verified through a unique code if in electronic form. This determination provides a clear framework for the certification process, ensuring that disclosures are appropriately authorised and justified within the scope of the Act.

Key Provisions

The determination issued by the Australian Communications Authority (ACA) sets out the requirements for a certificate under subsections 282(3), (4) or (5) of the Telecommunications Act 1997. This applies to authorised officers of criminal law-enforcement agencies, civil penalty-enforcement agencies and public revenue agencies who may certify that a disclosure of information or a document is reasonably necessary for enforcement of criminal law, enforcement of a law imposing a pecuniary penalty, or the protection of public revenue (subsection 282(3)-(5)). The certificate must specify the information or documents to be disclosed, state the authorised officer's name and agency, and indicate the subsection of the Act under which the certificate is issued (subsection 282(7)). It must also include a statement that the authorised officer is satisfied that the disclosure is reasonably necessary for one of the specified purposes and must identify the recipient of the information (subsection 282(7)(a)-(i)). Authorised officers have specific obligations under this determination. They must ensure that any certificate they issue is in compliance with the outlined requirements, including the specification of the information or documents to be disclosed and the identification of the relevant subsection of the Act (subsection 282(7)). They must also ensure that the certificate includes a statement that the disclosure of information is reasonably necessary for one of the specified purposes, and that it identifies the recipient of the information (subsection 282(7)(a)-(i)). In the case of a written certificate, the authorised officer must sign it, while an electronic certificate must include a unique code or identification to confirm the officer who issued it (subsection 282(7)(e)-(f)). The ACA must consult with the Privacy Commissioner before making such a determination. Failure to comply with the requirements for a certificate under subsections 282(3), (4) or (5) of the Telecommunications Act 1997 may result in civil or criminal penalties. The specific penalties are not outlined in this determination, but the Act itself provides for various offences and penalties related to the disclosure of information and documents. For example, section 283 of the Act provides for a penalty of up to two years imprisonment or a fine of up to $22,200 or both for unauthorised disclosure of information. Similarly, section 284 of the Act provides for a penalty of up to five years imprisonment or a fine of up to $111,000 or both for unauthorised disclosure of documents. These penalties reflect the seriousness of breaches of the Act and the importance of protecting the privacy and security of telecommunications information.