Victorian Data Sharing Bill 2017

Monday 23 October 2017 @ 10.32 a.m. | Legal Research

Last week, the Honourable Martin Pakula, Attorney General, introduced the Victorian Data Sharing Bill 2017 (“the Bill”) to the Victorian Legislative Assembly. The purpose of the Bill is to “establish the office of the Chief Data Officer, to promote the sharing and use of public sector data as a public resource that supports government policy making, service planning and design, and to amend the Privacy and Data Protection Act 2014.”

As per section 1 of the Bill:

The purposes of this Act are—

  1. to establish the office of Chief Data Officer; and
  2. to promote the sharing and use of public sector data as a public resource that supports government policy making, service planning and design; and
  3. to remove barriers that impede the sharing of identifiable data with the Chief Data Officer or with data analytics bodies, and to facilitate the sharing of data across the public sector; and
  4. to provide protections in connection with data sharing under this Act, by—
    1. specifying the purposes of data sharing, and the circumstances in which sharing of identifiable data is permitted; and
    2. ensuring that data that is handled under this Act is protected from unauthorised access, use or disclosure; and
  5. to make consequential and other amendments to other Acts.

Background

The Bill is one in a number of initiatives being put into place by the Victorian Government with the aim of improving Victoria’s data and information sharing regime. Other initiatives which are currently being introduced or which have recently been introduced are:

  • Legislation to protect women affected by family violence by better sharing information and prioritising victim survivors over their perpetrators
  • The development of a Central Information Point to facilitate information sharing across agencies involved in protecting women from family violence
  • The creation of an Office of Victorian Information Commissioner, bringing together freedom of information with data protection and privacy, to provide independent oversight across those closely-related fields.

The rationale which has been presented as the driving force behind the Bill is the delivery of better services for Victorians through the improvement of data-sharing across government agencies. In a media release, it was disclosed that the Victorian Government currently holds vast quantities of data, collected from numerous areas of society such as health, education, communities, business, infrastructure, employment and the environment. The Bill proposes to create mechanisms for the sharing of this data, allowing for its utilisation in an effective way for the community. Data is defined in section 3 of the Bill as meaning “any facts, statistics, instructions, concepts or other information in a form that is capable of being communicated, analysed or processed (whether by an individual or by a computer or other automated means)”.

The Bill aims to introduce a new level of openness and accountability in Victorian Governmental operations. Particular ways in which this is proposed to be achieved is through the introduction of a clear legal framework which allows for the sharing of government data. This in turn will provide for the development of “policy making, service planning and design, [and] enabling government agencies to work together to tackle key priorities.”

Additionally, while the aim of this Bill is the sharing of important data collected by Government agencies, the Bill also provides for strong safeguards which will be put into place for the purpose of protecting personal data and information. This includes “independent oversight by Victoria’s privacy regulators, mandatory reporting of any potential breaches, and new offences for unauthorised access, use or disclosure.”

As stated by Ms Kairouz, Minister for Consumer Affairs, Gaming and Liquor Regulation, in the second reading speech:

"Governments everywhere are facing significant challenges — whether this be increased community expectations around the role of government, entrenched complex policy problems like family violence, the 24/7 news and social media cycle, constrained budgets, or rapid social and technological change.

In the face of these challenges, the Victorian public sector needs to find new ways to engage, use technology and build capability. This government is committed to a renewed focus on reform and innovation to improve the lives of Victorians. We have articulated this commitment in our Public Sector Reform Statement: Delivering Exceptional Outcomes for Victorians.

Data is fundamental to delivering better services and outcomes for Victorians. Government collects vast quantities of data in serving the needs of Victorians–about education and health, our communities, business, employment, infrastructure and the environment. The value of this data is in what we do with it, how we use it, and who can use it. By enabling it to be shared and used, we can harness its true value — generating insights that help us make the most informed policy decisions and design the most effective services...

This bill provides the clarity that Victorian agencies need to share data, together with the protections and oversight functions that Victorians expect. It is an important step towards data reform, in line with what many jurisdictions across Australia are undertaking.

The greater data sharing and enhanced data insights that result from this bill will make the Victorian government smarter, more responsive, and better placed to deliver exceptional outcomes to Victorians."

The Bill

The Bill provides for a number of initiatives with the purpose of improving data sharing in Victoria. One important initiative is the creation of a Chief Data Officer under Part 2 of the Bill. The Chief Data Officer is a person appointed by the Secretary to the Department under Part 3 of the Public Administration Act 2004. The functions of the Chief Data Officer are outlined in section 7 of Chapter 2 and include:

  1. to conduct data integration and data analytics work to inform government policy making, service planning and design;
  2. to build capability in data analytics across the public sector;
  3. to lead and coordinate cross-jurisdictional data sharing and data integration work on behalf of the State of Victoria;
  4. to make available to data sharing bodies and designated bodies—
    1. integrated data sets; and
    2. the results of data analytics work;
  5. to collaborate with data sharing bodies and designated bodies;
  6. functions incidental to the functions referred to in paragraphs (a) to (e);
  7. any other functions conferred on the Chief Data Officer under this Act or any other Act.

Part 3 of the Act provides for data requests, which may be made by the Chief Data Officer to the responsible officer of the particular data sharing body. Data requests provide for a mechanism of data sharing upon request by the Chief Data Officer whereby, under section 8 of the Bill, notice must be provided to the data sharing body outlining: "the data requested; the reasons for the request; and how the data will be handled". Importantly under section 8 subsection 3, "the Chief Data Officer must not request restricted data."

Part 4 of the Bill provides for rules on the "use and disclosure of data". This includes provisions on the use of identifiable data, data integration and "restrictions on the disclosure of results of data analytics work" (s 19). Importantly in regards to data to which a secrecy provision applies, Division 2 of Part 4 outlines the protocol where data is protected by some form of privacy or secrecy provision.

Part 5 of the Bill creates offences in regards to illegal data sharing. One offence created by the Bill, as per s 26, is a summary offence for "unauthorised access to, use of or disclosure of data or information". Under this section:

  1. A person must not, without reasonable excuse, access, use or disclose any data or information obtained by the person under this Act other than—
    1. in accordance with this Act; or
    2. in connection with the performance of functions under this Act.

Penalty: 240 penalty units or imprisonment for 2 years or both.

  1. Without limiting what may be a reasonable excuse, it is a reasonable excuse if the person took reasonable steps not to access, use or disclose the data or information.

TimeBase is an independent, privately owned Australian legal publisher specialising in the online delivery of accurate, comprehensive and innovative legislation research tools including LawOne and unique Point-in-Time Products. Nothing on this website should be construed as legal advice and does not substitute for the advice of competent legal counsel.

Sources:

Victorian Data Sharing Bill 2017: full text, second reading speech and explanatory memorandum available from Timebase Lawone.

Media Release: State Government of Victoria. (18 October 2017). Victorian Data Sharing Bill 2017.

Related Articles: