Notice of New Data Matching - Commonwealth Seniors Health Card with Income Tax return data

Overview

The Commonwealth Seniors Health Card (CSHC) Data Matching Program, enacted under the Social Security (Administration) Act 1999, was introduced by the Australian Government in July 2014 to address discrepancies in income declaration among CSHC recipients. This initiative, undertaken by the Department of Human Services in collaboration with the Australian Taxation Office, aims to prevent incorrect program outlays by ensuring that all CSHC recipients and their partners accurately report their income. The program's policy objective is to deter non-disclosure of income and promote voluntary compliance through public awareness. The data matching activity, which will continue annually, involves comparing CSHC customer data with the most recent income tax return data submitted to the ATO within the last three financial years. Both the Department of Human Services and the ATO adhere to the Information Commissioner’s Guidelines on Data Matching to safeguard individual privacy during this process.

Scope and Application

The proposed data matching activity, as outlined in the notice issued by the Department of Human Services, pertains to current customers who are recipients of the Commonwealth Seniors Health Card (CSHC) and involves the comparison of their data with income tax return data held by the Australian Taxation Office (ATO) for the last three financial years. The primary purpose of this initiative is to ensure the accuracy of program benefits distribution by identifying any discrepancies in income disclosure, thereby preventing erroneous payments, discouraging non-disclosure of income, and encouraging voluntary compliance. This exercise will be conducted on an annual basis, adhering to the Information Commissioner’s Guidelines on Data Matching in Australian Government Administration to safeguard individual privacy. The scope of this data matching activity is limited to CSHC recipients and their partners, aiming to maintain the integrity of the program by aligning eligibility with accurate income information as reported to the ATO. The jurisdictional reach of this data matching activity is national, as it involves entities operating under the purview of the Commonwealth, specifically the Department of Human Services and the ATO. There are no stated exclusions or exemptions in the notice; however, the specific details of the data matching process and its application are likely to be further defined in subordinate instruments or protocols.

Key Provisions

The key operative sections of the legislation (C2014G01120) pertain to the data matching activity that the Department of Human Services (DHS) intends to undertake, as announced in the gazette. Section 3 of the legislation outlines the DHS's intention to match the data of all current Commonwealth Seniors Health Card (CSHC) recipients with the most recent income tax return data from the Australian Taxation Office (ATO) for the last three financial years. This exercise is aimed at ensuring the ongoing eligibility of CSHC recipients by comparing their data with that of their partners, as reported to the ATO. The primary objectives, as stated in section 4, are to prevent incorrect program outlays, deter non-disclosure of income, and promote voluntary compliance through public awareness. The legislation imposes certain obligations on the DHS and the ATO. Section 5 stipulates that both entities must adhere to the Information Commissioner’s Guidelines on Data Matching in Australian Government Administration. These guidelines include standards designed to protect the privacy of individuals during data matching activities. Section 6 further details that a protocol document has been developed in consultation with the Office of the Australian Information Commissioner to ensure that the data matching activity is conducted in a manner that respects privacy and complies with relevant legislation. In terms of potential breaches and consequences, the legislation does not explicitly state specific offences, penalties, or consequences for non-compliance. However, the adherence to the Information Commissioner’s Guidelines implies that any failure to comply with these standards could lead to scrutiny, penalties, or legal action as per the Privacy Act 1988. This act governs the handling of personal information and includes provisions for significant penalties for breaches, which can include fines up to AU$2.1 million for corporations and AU$210,000 for individuals, depending on the severity and nature of the breach. The legislation’s focus on privacy protection suggests a strong emphasis on compliance to avoid such penalties.