Commissioner’s opening statement — Senate Estimates 22 October 2019
Thank you for the opportunity to make some opening remarks. The Committee would be aware that the purpose of my office is to promote and uphold privacy and information access rights, and of course I’m appearing here today at a time when there is a great focus on the community’s right to access government information and on the individual’s right to have their personal information protected.
No one could miss the national right to know campaign across major media outlets this week. The campaign shares its name with the international movement in support of access to government information, which holds Right to Know Day around the world on the 28th of September each year. That includes Australia, where it’s supported by my Office and my counterparts around Australia.
Just last week the United Nations General Assembly recognised the importance of this global movement and proclaimed the 28th of September as the International Day for Universal Access to Information.
My Office has recently conducted a survey in relation to freedom of information, and community attitudes, and it also highlights the value Australians place on their right to access government information:
- The survey shows that 84 per cent of people said their right to access information held by the government was important, and
- 37 per cent had tried to do so, using a range of methods, including, of course, agency websites and freedom of information requests.
- Most respondents who tried to access information were successful in doing so on at least one occasion.
- But 15 per cent said they did not get all the information they wanted.
The community are exercising their right to access information from Australian Government agencies and ministers – and seeking review of their decisions under the Freedom of Information Act – in increasing numbers.
As our annual report shows, that was tabled yesterday, the number of FOI requests made to Australian Government agencies and ministers grew by 13 per cent last financial year, to 38,879:
- The percentage of FOI requests granted in full was 52%
- Partial access was granted for 35% of requests, and
- 13% of requests were refused
In 2017-18 there was a significant improvement in the proportion of FOI requests processed within the statutory timeframe, from 58% to 85%. However, this slipped slightly to 83% in the last financial year, showing that continued focus is required on the part of agencies and ministers to comply with statutory processing timeframes.
An important object of the FOI Act is to facilitate and promote public access to information promptly and at the lowest reasonable cost. So we continue to work with agencies to improve these processing times.
We’re encouraging agencies to make the system work more efficiently for the community by publishing more information proactively, particularly information that’s frequently requested; and by making personal information available through administrative access schemes. This will also reduce agencies’ administrative load in processing FOI requests.
Turning to applications to my Office, the number of applications to the OAIC for Information Commissioner review of FOI decisions grew last year, by 16 per cent to 928. Over the past four years the number of IC review applications to my Office has risen by more than 80 per cent.
Through our early intervention procedures and other measures, we have improved our finalisation rates in response to these pressures, and in 2018-19 we finalised 659 IC reviews, which was an 8 per cent increase on the previous year. In fact, over the past four years we have increased our finalisation rate by 45%.
Where possible we are dealing with applications covering similar issues as a cohort, to provide additional guidance to agencies in handling FOI requests and of course to influence better practice. Since I’ve been in the role, we’ve extensively reviewed our processing and implemented further workflow management and process efficiency measures.
But the substantial and sustained increase in IC review applications over recent years has widened the gap between incoming work and finalisations, and has resulted in increased delays and backlogs.
In order to meet the timeliness objective of the FOI Act, and provide faster outcomes for the community, additional resources are required, and the OAIC continues to work with the Government in relation to our resourcing needs.
Turning to privacy, we’re also finding efficiencies to manage the increasing volume of work, particularly in helping people resolve complaints about the handling of their personal information. We received 12 per cent more complaints last year.
The majority of complaints were driven by privacy practices in six sectors: finance, government, health, telecommunications, retail, and of course online services. The most common issues raised with us are about use and disclosure, security, access, collection and quality of personal information.
Our early resolution processes are continuing to have a positive impact and we finalised six per cent more privacy complaints than the previous year. We’re in the process of implementing additional changes to the way we handle privacy complaints to further improve our finalisation rates.
We’re supported by the additional funding provided in the last budget for timely responses to privacy complaints, and we’re addressing delays and backlogs in that area. This additional privacy funding will also support a new privacy regime for social media and online platforms that trade in Australians’ personal information. Internally, we are also increasing our proactive enforcement capability.
I welcome the Government’s commitment to strengthen the Privacy Act to protect personal information through measures including increased enforcement mechanisms, and I’ve also made submissions around the need for a broader review of the Privacy Act, to ensure it remains fit for purpose in our current environment.
The past year’s focus on digital platforms both here and overseas has demonstrated the scale of the challenges that we confront in safeguarding personal information and taken alongside the Consumer Data Right – a major change to our regulatory framework, which we are implementing alongside the ACCC early next year – and other recent developments in technology and artificial intelligence, it is timely to consider the scope and settings of the Privacy Act overall.
Of course, there is a global dimension to the OAIC’s work, and so cooperation with other regulatory authorities around the world is critical to mitigating privacy risks. We are actively engaged with our international counterparts on regulatory action, and making progress towards globally interoperable privacy frameworks, so that our citizens’ data is protected wherever it flows, and so that the economic benefits of data innovation can be safely realised.
Thank you. That concludes my opening remarks.