Overview

The Australian Taxation Office (ATO) Data Matching Program, as outlined in the notice C2015G01255, was enacted to ensure compliance with taxation obligations by visa holders, their sponsors, and migration agents. This initiative was introduced to address the potential for non-compliance among this demographic, aiming to enhance the accuracy of data within the Australian Business Register and identify fraudulent activities. The Australian Taxation Office is the enacting body, with the program’s policy objectives including improving the integrity of taxation data, refining compliance models, and fostering voluntary compliance among visa holders and related entities. The data obtained from the Department of Immigration and Border Protection for the 2013-14 to 2016-17 financial years, encompassing visa histories and international travel movements, will be matched against ATO data holdings to identify discrepancies in registration, lodgment, reporting, and payment obligations. The program adheres to the Office of the Australian Information Commissioner’s Guidelines on data matching, ensuring the protection of individual privacy.

Scope and Application

The Australian Taxation Office's (ATO) data matching program, as outlined in the notice, is designed to enhance compliance with taxation obligations by visa holders, sponsors, and migration agents. This initiative targets individuals who hold or have held visas over the specified financial years, as well as their sponsors and the migration agents who facilitated their visa applications. The data obtained from the Department of Immigration and Border Protection includes a comprehensive range of information such as address and contact history, visa grants, travel movements, and educational institutions attended. The program aims to scrutinise approximately one million records to ensure adherence to registration, lodgment, reporting, and payment obligations under taxation laws. The geographic reach of this program is national, applying to all individuals and entities within Australia who meet the specified criteria. The program is subject to strict privacy standards as per the Office of the Australian Information Commissioner’s Guidelines on data matching and the ATO’s privacy policy, which are designed to protect the privacy of individuals while facilitating the necessary data exchange. The ATO ensures compliance with these standards and maintains transparency by making relevant documents publicly accessible and available upon request.

Key Provisions

The main operative sections of this legislation (C2015G01255) specify that the Australian Taxation Office (ATO) will acquire a comprehensive set of data from the Department of Immigration and Border Protection (DIBP) to enhance compliance with taxation laws. Section 1 outlines the acquisition of detailed personal and visa-related information of visa holders, sponsors, and migration agents for the financial years 2013-14 through to 2016-17. This includes address and contact histories, visa grants and statuses, migration agent details, international travel movements, sponsor details, and education provider information. Section 2 details the objective of this data matching program, which is to ensure taxpayers meet their obligations by improving compliance intelligence, testing and enhancing risk detection models, improving the integrity of the Australian Business Register, identifying fraud methodologies, and developing strategies to improve voluntary compliance. The obligations imposed by this Act are primarily on the ATO and DIBP. Section 3 mandates that the ATO electronically match the acquired data with its own holdings to identify non-compliance with tax obligations. Section 4 requires the ATO to use this data to develop strategies for improving voluntary compliance. The DIBP, on the other hand, is obligated to provide the necessary data to the ATO as specified in Section 1. Section 5 stipulates that all data handling must comply with the Office of the Australian Information Commissioner’s Guidelines on data matching, ensuring privacy protections are upheld. Section 6 of the Act outlines the potential consequences for breaches. While the Act itself does not explicitly state penalties, breaches of the Office of the Australian Information Commissioner’s Guidelines, which the ATO must adhere to, could result in significant civil and criminal penalties. Under the Privacy Act 1988, unauthorised data handling could incur civil penalties of up to $2,100,000 for a corporation or $210,000 for an individual. Additionally, criminal penalties may apply, including fines of up to $270,000 for individuals and $1,350,000 for corporations, as well as imprisonment for serious breaches. The ATO’s privacy policy, accessible at www.ato.gov.au/privacy, further elaborates on these protections and obligations.