Privacy (Private Sector) Amendment Regulations 2011 (No. 1)

Administered by Department of the Prime Minister and Cabinet

Legislation au F2011L00587 Regulations Not in force Legislative Instrument

Legislation content

EXPLANATORY STATEMENT

 

Select Legislative Instrument 2011 No. 47

 

Issued by the Authority of the Minister for Privacy and Freedom of Information

 

Privacy Act 1988

 

Privacy (Private Sector) Amendment Regulations 2011 (No. 1)

Subsection 100(1) of the Privacy Act 1988 (the Act) provides that the GovernorGeneral may make regulations, not inconsistent with the Act, prescribing matters required or permitted by the Act to be prescribed, or necessary or convenient to be prescribed for carrying out or giving effect to the Act.

Privacy Advisory Committee

Section 82 of the Act provides for the establishment of the Privacy Advisory Committee (the Committee).

Section 88 of the Act provides for a member appointed to the Committee to be paid a travelling allowance in accordance with the regulations.

The purpose of item 1 of Schedule 1 of the Regulations is to provide for a travelling allowance for members of the Committee.

Centrelink eServices

The Act establishes, among other things, the National Privacy Principles (NPPs) which regulate the collection, use, disclosure and storage of personal information by private sector organisations.

The purpose of items 2 and 3 of Schedule 1 of the Regulations is to allow greater access to Centrelink records, in order to determine whether a person is entitled to receive a service or assistance.

NPP 7.2 provides that a private sector organisation must not use or disclose an identifier assigned to an individual by a Commonwealth agency, or by an agent or contracted service provider to that agency, except in specified circumstances.  These include where the use or disclosure is by a prescribed organisation of a prescribed identifier in prescribed circumstances (paragraph (c) of NPP 7.2).

The Centrelink Customer Reference Number is an identifier for the purposes of NPP 7.  The Privacy (Private Sector) Regulations 2001 prescribe as an exception to the prohibition in NPP 7.2, organisations permitted to use the Centrelink Customer Reference Number for the purpose of accessing the Centrelink Confirmation eServices.

Centrelink’s Confirmation eServices comprises three distinct services:  Customer Confirmation; Income Confirmation; and Superannuation Confirmation.  These amendment Regulations insert 20 additional organisations into the lists of prescribed organisations allowed to use and disclose the Centrelink Customer Reference Number for the purpose of making a Customer Confirmation or Income Confirmation enquiry, and removing or amending others as required.

The release of Centrelink customers’ information through the Centrelink Confirmation eServices will only occur with the customers consent.  In addition, the use and disclosure of the Customer Reference Number by these private sector organisations is in each case for the benefit of the individual concerned.  It removes the need for customers to go into a Centrelink office to obtain written proof of their eligibility and verification will occur on-line in real time, providing up to date eligibility information.

The Office of the Australian Information Commissioner has been consulted on the regulations.

Details of the Regulations are set out in the Attachment.  

The Act specifies no other conditions that need to be satisfied before the power to make the Regulations may be exercised.

The Regulations are legislative instruments for the purposes of the Legislative Instruments Act 2003.

The Regulations commence on the day after they are registered.


ATTACHMENT

PRIVACY (PRIVATE SECTOR) AMENDMENT REGULATIONS 2011
(NO. 1)

Regulation 1 – Name of Regulations

This regulation provides that the title of the Regulations is the Privacy (Private Sector) Amendment Regulations 2011 (No. 1).

Regulation 2 – Commencement

This regulation provides that the Regulations commence on the day after they are registered.

Regulation 3 – Amendment of Privacy (Private Sector) Regulations 2001

This regulation provides that the Privacy (Private Sector) Regulations 2001 (the Principal Regulations) are amended as set out in Schedule 1.

Schedule 1 – Amendments

Item [1] – Part 4

This item inserts a new Part into the Act after Part 3. This Part provides for a travelling allowance to be paid to members of the Privacy Advisory Committee. This allowance is payable to the member at the rate determined by Remuneration Tribunal Determination 2004/03.

Item [2] – Schedule 3, Part 1

This item substitutes the list of organisations in Part 1 of Schedule 3 to the Principal Regulations.

The substitute Part 1 of Schedule 3 renumbers the currently listed organisations and includes the following 11 additional organisations that are allowed to use and disclose the Customer Reference Number for the purpose of making a Customer Confirmation in Schedule 3, Part 1:

  • item 1 – Actew Corporation Limited
  • item 19 – Energy Australia
  • item 23 – Hearing Retail Group Pty Limited
  • item 30 – Lady Gowrie Child Care Centre
  • item 36 – Option One Pty Ltd.
  • item 42 – Powerdirect Pty Ltd.
  • item 48 – Sonic Innovations Pty Ltd
  • item 50 – Southern Cross Care (WA) Inc
  • item 56 – Tasmanian Water and Sewerage Corporation (Northern Region) Pty Limited
  • item 57 – Tasmanian Water and Sewerage Corporation (North-Western Region) Pty Limited
  • item 58 – Tasmanian Water and Sewerage Corporation (Southern Region) Pty Limited

In addition, the following amendments are made to Part 1 of Schedule 3 to reflect changes of business name on behalf of organisations previously prescribed:

  • item 31 – Lumo Energy Australia (previously Victoria Electricity Pty Ltd)
  • item 45 – Ruah Community Services (previously Daughters of Charity Services (WA))

Finally, the following items would be removed:

  • current item 19 – Energy One Limited
  • current item 27 – Jackgreen (International) Pty Limited
  • current item 39 – Queensland Electricity Pty. Ltd

Item [3] – Schedule 4

This item substitutes the lists of organisations in Schedule 4 to the Principal Regulations.

The substitute Schedule 4 renumbers the currently listed organisations and includes the following nine additional organisations that are allowed to use and disclose the Customer Reference Number for the purpose of making an Income Confirmation enquiry in Schedule 4:

  • item 21 – Baptist Care (SA) Incorporated
  • item 39 – Central Queensland University
  • item 51 – Community Rent Scheme Assoc Townsville Inc
  • item 76 – Health Support Services (NSW)
  • item 103 – Marrickville Community Training Centre Inc
  • item 117 – Multilink Community Services Inc
  • item 154 – Southern Cross Care (WA) Inc
  • item 172 – The Flinders University of South Australia
  • item 202 – Victorian Association for the Care and Resettlement of Offenders

In addition, the following amendments are made to Schedule 4 to reflect changes of business name on behalf of organisations previously prescribed:

  • item 55 – Djerriwarrh Employment & Education Services Inc. (previously Djerriwarrh Employment & Education Services Inc)
  • item 86 – Kildonan Uniting Care (previously Kildonan Child & Family Services)
  • item 93 – Link Housing Ltd (previously North Shore Community Housing Limited)
  • item 140 - Ruah Community Services (previously Daughters of Charity Services (WA))
  • item 199 – Upper Murray Family Care Inc. (previously Upper Murray Family Care Inc)
  • item 204 – Wentworth Community Housing Limited (previously Wentworth Community Housing Ltd)
  • item 211 – WHK Financial Planning Pty Ltd (previously Investor Financial Planning Pty Ltd)

Finally, the following items are removed:

  • current item 51 – Cumberland Housing Co-op Ltd
  • current item 75 – Hills Vales and Coast Housing Co Op
  • current item 113 – Murdoch University
  • current item 205 – Western Suburbs Housing Cooperative Ltd

 

Overview

The Privacy (Private Sector) Amendment Regulations 2011 (No. 1) were introduced to amend the Privacy (Private Sector) Regulations 2001 under the authority of the Privacy Act 1988. These regulations were enacted by the Parliament of Australia to address the need for updating the list of organisations permitted to use Centrelink Customer Reference Numbers for accessing Centrelink records, specifically to facilitate eligibility verification for Centrelink services. The policy objective behind these amendments is to streamline the verification process for Centrelink services, enabling real-time online confirmations and thereby reducing the necessity for customers to visit Centrelink offices for written proof of eligibility. Additionally, the regulations introduce a travelling allowance for members of the Privacy Advisory Committee, as mandated by section 88 of the Act. The explanatory statement indicates that the Privacy (Private Sector) Amendment Regulations 2011 (No. 1) aim to provide greater flexibility and efficiency in the use of Centrelink Customer Reference Numbers for authorised organisations, ensuring that the updated list reflects current business entities and their roles in accessing Centrelink records. The regulations also establish a framework for compensating members of the Privacy Advisory Committee for their travel expenses related to committee duties. These amendments are designed to maintain compliance with the National Privacy Principles while facilitating more efficient service delivery and record-keeping practices within the private sector in relation to Centrelink services.

Scope and Application

The Privacy (Private Sector) Amendment Regulations 2011 (No. 1) extends the application of the Privacy Act 1988 by amending the Privacy (Private Sector) Regulations 2001 to allow more private sector organisations to use and disclose the Centrelink Customer Reference Number for accessing Centrelink records. These regulations apply to private sector organisations listed in Schedules 3 and 4 of the amended regulations, which are now permitted to use and disclose the Centrelink Customer Reference Number for making Customer Confirmation and Income Confirmation enquiries, respectively. This amendment facilitates greater access to Centrelink records for determining eligibility for services and assistance, with the release of Centrelink customers' information occurring only with the customer's consent. Additionally, the regulations provide for a travelling allowance for members of the Privacy Advisory Committee as established under the Privacy Act 1988. The amendment does not introduce any new exclusions, exemptions, or thresholds beyond what is specified in the Privacy Act 1988 and the National Privacy Principles. The regulations are applicable nationally and are legislative instruments under the Legislative Instruments Act 2003.

Key Provisions

The Privacy (Private Sector) Amendment Regulations 2011 (No. 1) (the Regulations) amend the Privacy (Private Sector) Regulations 2001 under the Privacy Act 1988 (the Act). The Regulations are structured to provide for a travelling allowance for members of the Privacy Advisory Committee (section 88 of the Act) and to allow additional organisations to access Centrelink records using the Centrelink Customer Reference Number for the purpose of making a Customer Confirmation or Income Confirmation enquiry. Specifically, item 1 of Schedule 1 introduces a travelling allowance for members of the Committee, while items 2 and 3 modify the lists of organisations permitted to use the Centrelink Customer Reference Number under the National Privacy Principles (NPPs). The Regulations impose several obligations on the parties they govern. Firstly, they mandate that members of the Privacy Advisory Committee be paid a travelling allowance as per the Remuneration Tribunal Determination 2004/03. Secondly, the Regulations specify which organisations are permitted to use the Centrelink Customer Reference Number for Customer Confirmation or Income Confirmation enquiries, adding new entities and updating names to reflect business changes. These organisations must ensure that they use the Customer Reference Number solely for the benefit of the individual concerned and obtain the customer's consent before releasing their information through the Centrelink Confirmation eServices. Failure to comply with the Regulations can lead to several consequences. Firstly, any organisation using the Centrelink Customer Reference Number without the proper authorisation as set out in the Regulations can be subject to penalties under the Privacy Act. This includes potential fines for non-compliance, which may vary based on the severity and intent of the breach. Additionally, organisations that misuse personal information by not adhering to the consent requirements may face civil action from affected individuals. Furthermore, any breaches of the travelling allowance provisions may result in disciplinary action against committee members, as the allowance is subject to the Remuneration Tribunal Determination. These penalties serve to enforce compliance and protect the privacy of individuals’ information.

Legal classification tags

Area of Law
Privacy Law
Instrument
Regulation
Concepts
Definitions & Interpretation
Compliance Obligations
Regulatory Standards
Exemptions & Exclusions

Interactions

Authorises

All Versions

Sourced from the Federal Register of Legislation at 26 August 2026. For the latest information on Australian Government law please go to https://www.legislation.gov.au.