Footnotes

Chapter 1 - Introduction

[1]       Friendster was launched in 2002: www.friendster.com/info/index.php (accessed 13 December 2010);  Myspace in 2003: Asher Moses, 'MySpace founder takes on Rupert', Sydney Morning Herald Online, www.smh.com.au/news/biztech/myspace-founder-takes-on-rupert/2006/11/08/1162661728774.html  (accessed 13 December 2010); and Facebook in February 2004: www.facebook.com/press/info.php?factsheet (accessed 13 December 2010).

[2]       Office of the Privacy Commissioner (OPC), Submission 16, pp 21–34.

[3]       Ian McIlwraith, 'Netting web scammers', The Age, 16 September 2010, p. 8.

[4]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, pp 85–86.

[5]       Department of the Prime Minister and Cabinet, Privacy Reforms, www.alrc.gov.au/publications/report-108 (accessed 9 December 2010); Australian Law Reform Commission (ALRC), For Your Information: Australian Privacy Law and Practice, Report No 108, 2008, available at www.alrc.gov.au/publications/report-108 (accessed 9 December 2010); and Senator the Hon Joe Ludwig, Cabinet Secretary, Enhancing National Privacy Protection: Australian Government First Stage Response to the Australian Law Reform Commission Report 108, October 2009, available at www.dpmc.gov.au/privacy/alrc_docs/stage1_aus_govt_response.pdf (accessed 9 December 2010)

[6]       For information about the Senate Finance and Public Administration Legislation Committee's inquiry see: www.aph.gov.au/Senate/committee/fapa_ctte/priv_exp_drafts/info.htm (accessed 10 December 2010).

[7]       House of Representatives Standing Committee on Communications, Hackers, Fraudsters and Botnets: Tackling the Problem of Cyber Crime, June 2010, www.aph.gov.au/house/committee/coms/cybercrime/report.htm (accessed 7 March 2011); and the government response, 25 November 2010, www.aph.gov.au/house/committee/coms/governmentresponses/cybercrime.pdf (accessed 7 March 2011).

[8]       European Commission, Review of the data protection legal framework, http://ec.europa.eu/justice/policies/privacy/review/index_en.htm (accessed 10 December 2010). The  review has thus far consisted on a stakeholders' conference in May 2009 and further consultations during 2010, and a strategic communication released on 4 November 2010.

[9]       Directive 2006/24/EC of the European Parliament and of the Council on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002/58/EC, 15 March 2006 at http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2006:105:0054:0063:EN:PDF (accessed 10 December  2010).

[10]       United States Federal Trade Commission, Protecting Consumer Privacy in an Era of Rapid Change: a proposed framework for businesses and policymakers, Preliminary FTC Staff Report, December 2010 at www.ftc.gov/os/2010/12/101201privacyreport.pdf (accessed 6 January 2010).

Chapter 2 - Australia's privacy framework

[1]       OPC, Submission 16, p. 10.

[2]       OPC, Submission 16, p. 10.

[3]       The NPPs, IPPs and proposed Australian Privacy Principles (APPs) are set out in Appendix 3.

[4]       Privacy Act 1988, Part IV.

[5]       OPC, Submission 16, p. 8.

[6]       OPC, Submission 16, p. 10.

[7]       OPC, Submission 16, p. 10.

[8]       ALRC, For Your Information: Australian Privacy Law and Practice, Report No 108, 2008, www.alrc.gov.au/publications/report-108 (accessed 18 January 2011).

[9]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 17.

[10]       Mr Duncan McIntyre, Assistant Secretary, Consumer Policy and Post, Department of Broadband, Communications and the Digital Economy (DBCDE), Committee Hansard, 29 October 2010, pp 83–84.

[11]       Mr Duncan McIntyre, Assistant Secretary, Consumer Policy and Post, DBCDE, Committee Hansard, 29 October 2010, pp 83–84.

[12]       Department of the Prime Minister and Cabinet, 'Privacy Reforms', www.dpmc.gov.au/privacy/reforms.cfm (accessed 14 December 2010).

[13]       Senator the Hon Joe Ludwig, Cabinet Secretary, Enhancing National Privacy Protection: Australian Government First Stage Response to the Australian Law Reform Commission Report 108, October 2009.

[14]       Senate Finance and Public Administration Legislation Committee, Inquiry into Exposure Drafts of Australian Privacy Amendment Legislation, www.aph.gov.au/Senate/committee/fapa_ctte/priv_exp_drafts/index.htm, (accessed 22 October 2010).

[15]       OPC, Submission 16, p. 11.

[16]       OPC, Submission 16, p. 9.

[17]       Mr Iarla Flynn, Head of Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 2.

[18]       Ms Georgia King-Siem, Vice-President, Victorian Council for Civil Liberties (Liberty Victoria), Committee Hansard, 1 December 2010, p. 20.

[19]       Victorian Privacy Commissioner, Submission 13, p. 2.

[20]       OPC, Submission 16, p. 9.

[21]       ACCAN, Submission 11, p. 3.

[22]       ACCAN, Submission 11, pp 3–4; Cyberspace Law and Policy Centre, UNSW, Communications privacy complaints: In search of the right path, 2010, p. 6, at www.cyberlawcentre.org/privacy/ACCAN_Complaints_Report/report.pdf (accessed 23 December 2010).

[23]       Cyberspace Law and Policy Centre, UNSW, Communications privacy complaints: In search of the right path, 2010, p. 8.

[24]       ACCAN, Submission 11, pp 4–5.

[25]       Cyberspace Law and Policy Centre, UNSW, Communications privacy complaints: In search of the right path, 2010, p. 10.

[26]       ACCAN, Submission 11, p. 5.

[27]       Ms Teresa Corbin, CEO, Australian Communications Consumer Action Network (ACCAN) Committee Hansard, 29 October 2010, pp 44–45.

[28]       Ms Nerida O'Loughlin, General Manager, Digital Economy Division, Australian Communications and Media Authority, Committee Hansard, 1 December 2010, p. 58.

[29]       ACCAN, Submission 11, p. 6.

[30]       ACCAN, Submission 11, p. 7, emphasis in original.

[31]       ACCAN, Submission 11, p. 6.

[32]       ACCAN, Submission 11, p. 6.

[33]       Ms Teresa Corbin, CEO, ACCAN, Committee Hansard, 29 October 2010, p. 49.

[34]       Cyberspace Law and Policy Centre, UNSW, Communications privacy complaints: In search of the right path, 2010, p. 25.

[35]       Ms Teresa Corbin, CEO, ACCAN, Committee Hansard, 29 October 2010, p. 50.

[36]       Ms Teresa Corbin, CEO, ACCAN, Committee Hansard, 29 October 2010, p. 50.

[37]       M. Hummerston, Assistant Privacy Commissioner, media release, 14 September 2010.

[38]       Predominantly because the organisations are based overseas or because they are Australian businesses subject to the small business exemption under the Privacy Act. The appropriateness of these 'exemptions' is discussed in Chapter 3.

[39]       Privacy Act 1988, s 18BB(2)(c).

[40]       Australian Government, First stage response to ALRC Privacy Report, 2009, recommendation 48-1, p. 89, www.dpmc.gov.au/privacy/reforms.cfm (accessed 13 September 2010).

[41]       Australian Government, First stage response to ALRC Privacy Report, 2009, recommendation 48-1, p. 89.

[42]       OPC, Submission 16, p. 12.

[43]       OPC, Submission 16, p. 12.

[44]       Ms Teresa Corbin, CEO, ACCAN, Committee Hansard, 29 October 2010, p. 49.

[45]       AANA, Submission 3, p. 2.

[46]       AANA, Submission 3, p. 4.

[47]       Mr Scott McClellan, CEO, Australian Association of National Advertisers, Committee Hansard, 29 October 2010, p. 27.

[48]       AANA, Submission 3, pp 2–3.

[49]       AANA media release, 'AANA leads discussion on advertising and marketing ethics', 5 August 2010; Mr Scott McClellan, CEO, AANA, Committee Hansard, 29 October 2010, p. 30; Ms A. Bain, Director of Codes, Policy and Regulatory Affairs, AANA, House of Representatives Standing Committee on Social Policy and Legal Affairs, Proof Committee Hansard, 24 February 2011, p. 2.

[50]       Communications Council, Submission 12, p. 3.

[51]       Communications Council, Submission 12, p. 4.

[52]       Yahoo!7, Submission 2, p. 3.

[53]       Yahoo!7, Submission 2, p. 5.

[54]       Google, Submission 6, p. 1.

[55]       Mr Iarla Flynn, Head of Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 2.

[56]       Mrs Melina Rohan, Director, Corporate and Regulatory Affairs, Australian Direct Marketing Association, Committee Hansard, 29 October 2010, p. 53.

[57]       Mr Daniel Leesong, CEO, Communications Council, Committee Hansard, 29 October 2010, p. 40.

[58]       Mr Scott McClellan, CEO, ADMA, Committee Hansard, 29 October 2010, p. 28.

[59]       Mr Daniel Leesong, CEO, Communications Council, Committee Hansard, 29 October 2010, p. 40.

[60]       Mr Scott McClellan, CEO, AANA, Committee Hansard, 29 October 2010, p. 28.

[61]       Mr Scott McClellan, CEO, AANA, Committee Hansard, 29 October 2010, p. 28.

[62]       OPC, Submission 16, p. 17.

[63]       Victorian Privacy Commissioner, Submission 13, p. 9.

[64]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 22.

[65]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 22.

[66]       Ms Teresa Corbin, CEO, ACCAN, Committee Hansard, 29 October 2010, p. 46; Ms Georgia King-Siem, Vice-President, Victorian Council for Civil Liberties (Liberty Victoria), Committee Hansard, 1 December 2010, p. 16; Ms Kathryn Miller, Member, Executive Committee; Member, Administrative Review and Constitutional Law Committee, Administrative Law and Human Rights Section, Law Institute of Victoria (LIV), Committee Hansard, 1 December 2010, p. 31.

[67]       Mr Iarla Flynn, Head of Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 11.

[68]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 22.

[69]       Privacy Act 1988, para. 27(1)(m).

[70]       ALRC, For Your Information: Australian Privacy Law and Practice, Report No 108, 2008, recommendation 10-3.

[71]       Australian Government, First stage response to ALRC Privacy Report, 2009, p. 31.

[72]       Ms Nerida O'Loughlin, General Manager, Digital Economy Division, Australian Communications and Media Authority, Committee Hansard, 1 December 2010, p. 56.

[73]       Ms Nerida O'Loughlin, General Manager, Digital Economy Division, Australian Communications and Media Authority, Committee Hansard, 1 December 2010, p. 56.

[74]       Mr Arved von Brasch, Submission 2, p. 2.

[75]       Ms Nerida O'Loughlin, General Manager, Digital Economy Division, Australian Communications and Media Authority, Committee Hansard, 1 December 2010, p. 57.

[76]       Dr Roger Clarke, Chair, Australian Privacy Foundation, Committee Hansard, 1 December 2010, p. 12.

[77]       CPSU, Submission 7, p. 8.

[78]       Mrs Melina Rohan, Director, Corporate and Regulatory Affairs, ADMA, Committee Hansard, 29 October 2010, p. 58.

[79]       OPC, Submission 16, p. 18.

[80]       Google, Submission 6, p. 4.

[81]       Yahoo!7, Submission 2, p. 2.

[82]       Dr Roger Clarke, Chair, APF, Committee Hansard, 1 December 2010, p. 9.

[83]       Dr Roger Clarke, Chair, APF, Committee Hansard, 1 December 2010, pp 10–11.

[84]       OPC, Submission 16, p. 18.

[85]       OPC, Submission 16, p. 19.

[86]       OPC, Submission 16, p. 19.

[87]       Available at www.apec.org/apec/news___media/2004_media_releases/201104_apecminsendorseprivacyfrmwk.html (accessed 22 October 2010).

[88]       See Cyberspace Law and Policy Centre, Submission 26; APF, Supplementary Submission 14, p. 10.

[89]       OPC, Submission 16, p. 20.

[90]       OPC, Submission 16, p. 20.

[91]       OPC, Submission 16, p. 20.

[92]       OPC, Submission 16, p. 20.

[93]       OPC, Submission 16, p. 10.

[94]       OPC, Submission 16; Victorian Privacy Commissioner, Submission 13; Australian Association of National Advertisers, Submission 3.

[95]       Mr Iarla Flynn, Head of Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 1.

[96]       Ms Georgia King-Siem, Vice President, Victorian Council for Civil Liberties (Liberty Victoria), Committee Hansard, 1 December 2010, p. 15.

[97]       Mr Iain McDonald, Board Member, Communications Council, Committee Hansard, 29 October 2010, p. 41.

Chapter 3 - Adequacy of Australia's online privacy framework

[1]        Mr Iarla Flynn, Head of Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 1.

[2]        OPC, Submission 16, p. 25.

[3]        OPC, Submission 16, pp 21-34.

[4]        Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, pp 16–17.

[5]        Ms Georgia King-Siem, Vice President, Liberty Victoria, Committee Hansard, 1December 2010, p. 22.

[6]        Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, p. 72.

[7]        See Fran Foo, 'Report shows Google collected Wi-Fi data', The Australian, 10 June 2010, www.theaustralian.com.au/australian-it/report-shows-google-collected-wi-fi-data/story-e6frgakx-1225877786307 (accessed 4 January 2011).

[8]        Mr Iarla Flynn, Head of Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 2; and the Official Google Blog, 'WiFi data collection: an update', 14 May 2010, at http://googleblog.blogspot.com/2010/05/wifi-data-collection-update.html (accessed 4 January 2011).

[9]        Mr Iarla Flynn, Head of Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 2.

[10]       Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, p. 67.

[11]       Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, p. 67.

[12]       AFP, Media Release: Finalisation of Google referral, 3 December 2010, at www.afp.gov.au/media-centre/news/afp/2010/december/finalisation-of-google-referral.aspx (accessed 19 January 2011).

[13]       Emily Steel and Geoffrey Fowler, 'Facebook in privacy breach', The Wall Street Journal, 18 October 2010, at http://online.wsj.com/article/SB10001424052702304772804575558484075236968.html (accessed 4 January 2011).

[14]       Mr Alastair MacGibbon, Internet Safety Institute, Submission 8, p. 5.

[15]       Australian Federation of AIDS Organisations, Submission 23, p. 3.

[16]       Ms Teresa Corbin, CEO, ACCAN, Committee Hansard, 29 October 2010, pp 33–34.

[17]       APF, Submission 14, p. 2.

[18]       Privacy Act 1988, Schedule 3, NPP 2 (use for a secondary purpose), and NPP 9 (transborder data flows).

[19]       See for example draft APP 3 (relating to collection of sensitive information); APP6 (relating to the use of information for a secondary purpose); APP 7 (direct marketing); and APP 8 (relating to transborder data flows).

[20]       APF, Submission 14, p. 2.

[21]       Section 51AB of the Trade Practices Act 1974 relates to corporations acting in a way which is unconscionable in their dealings with consumers. Relevant factors include the relative strengths and bargaining positions of the parties, the consumer's knowledge and understanding, and the exertion of undue pressure or influence.

[22]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 22; Ms Teresa Corbin, CEO, ACCAN, Committee Hansard, 29 October 2010, p. 47; Ms Georgia King-Siem, Vice-President, Liberty Victoria, Committee Hansard, 1 December 2010, p. 16; Ms Kathryn Miller, Member, Executive Committee; Member, Administrative Review and Constitutional Law Committee, Administrative Law and Human Rights Section, LIV, Committee Hansard, 1 December 2010, p. 31.

[23]       Ms Teresa Corbin, CEO, ACCAN, Committee Hansard, 29 October 2010, p. 47.

[24]       Ms Kathryn Miller, Member, Executive Committee; Member, Administrative Review and Constitutional Law Committee, Administrative Law and Human Rights Section, LIV, Committee Hansard, 1 December 2010, p. 32.

[25]       Ms Georgia King-Siem, Vice-President, Liberty Victoria, Committee Hansard, 1 December 2010, p. 16.

[26]       Ms Georgia King-Siem, Vice-President, Liberty Victoria, Committee Hansard, 1 December 2010, p. 19.

[27]       Ms Georgia King-Siem, Vice-President, Liberty Victoria, Committee Hansard, 1 December 2010, p. 16.

[28]       Mrs Melina Rohan, Director, Corporate and Regulatory Affairs, Australian Direct Marketing Association, Committee Hansard, 29 October 2010, p. 57.

[29]       Mrs Melina Rohan, Director, Corporate and Regulatory Affairs, ADMA Committee Hansard, 29 October 2010, p. 54.

[30]       Mrs Melina Rohan, Director, Corporate and Regulatory Affairs, ADMA, Committee Hansard, 29 October 2010, p. 54.

[31]       Liberty Victoria, answer to question on notice, 1 December 2010.

[32]       Liberty Victoria, answer to question on notice, 1 December 2010.

[33]       United States Federal Trade Commission, Protecting Consumer Privacy in an Era of Rapid Change: a proposed framework for businesses and policymakers, Preliminary FTC Staff Report, December 2010.

[34]       United States Federal Trade Commission, Protecting Consumer Privacy in an Era of Rapid Change: a proposed framework for businesses and policymakers, Preliminary FTC Staff Report, December 2010, pp 70–71.

[35]       United States Federal Trade Commission, Protecting Consumer Privacy in an Era of Rapid Change: a proposed framework for businesses and policymakers, Preliminary FTC Staff Report, December 2010, p. 70.

[36]       Privacy Amendment (Private Sector) Act 2000.

[37]       Privacy Act 1988, s. 6C.

[38]       Privacy Act 1988, ss. 6D(1).

[39]       Privacy Act 1988, para. 6D(4)(b).

[40]       Privacy Act 1988, para. 6D(4)(c) and (d); ss. 6D(7) and (8).

[41]       Privacy Act 1988, para. 6D(4)(e).

[42]       Privacy Act 1988, ss. 6D(9).

[43]       Privacy Act 1988, ss. 6E(1A); Anti-Money Laundering and Counter-Terrorism Financing Act 2006, s. 5.

[44]       Privacy Act 1988, ss. 6E(1B) and (1C).

[45]       Privacy Act 1988, ss. 6E(1) and (2); for example, regulation 3AA of the Privacy (Private Sector) Regulations 2001 provides that small businesses that operate residential tenancy databases are organisations for the purposes of the Privacy Act 1988.

[46]       Privacy Act 1988, s. 6EA.

[47]       ALRC, For Your Information: Australian Privacy Law and Practice, Report 108, May 2008, Chapter 39, citing Australian Bureau of Statistics, Counts of Australian Businesses, 8165.0 (2007), p. 20.

[48]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 19.

[49]       Revised Explanatory Memorandum, Privacy Amendment (Private Sector) Bill 2000, pp 37–38.

[50]       Revised Explanatory Memorandum, Privacy Amendment (Private Sector) Bill 2000, pp 37–38.

[51]       Senate Legal and Constitutional Affairs References Committee, The real Big Brother: Inquiry into the Privacy Act 1988, June 2005, p. 157.

[52]       ALRC Report 108, 2008, paragraph 39.143.

[53]       ALRC Report 108, 2008, recommendation 39-1.

[54]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, pp 19–20.

[55]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 20.

[56]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 20.

[57]       Privacy Act 1988, ss. 6E(1).

[58]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 20.

[59]       Internet Safety Institution, Submission 8, p. 4.

[60]       Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, p. 63.

[61]       Ms Ishtar Vij, Manager, Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 4.

[62]       www.webopedia.com (accessed 6 January 2011).

[63]       Mr Iarla Flynn, Head, Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 10.

[64]       Committee Hansard, 29 October 2010, p. 14.

[65]       Attorney-General's Department, answer to question on notice, 29 October 2010.

[66]       Mr Iain McDonald, Board Member, The Communications Council, Committee Hansard, 29 October 2010, p. 42.

[67]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 22.

[68]       See for example Internet Safety Institute, Submission 8, pp 4–5; Pirate Party Australia, Submission 4, p. 4; Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, pp 69–70; and Ms Georgia King-Siem, Vice-President, Liberty Victoria, Committee Hansard, 1 December 2010, p. 21.

[69]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 18.

[70]       Privacy Act 1988, Schedule 3, NPP 2.1.

[71]       Australian Privacy Principles, Exposure Draft, APP 7 available at www.aph.gov.au/Senate/committee/fapa_ctte/priv_exp_drafts/guide/exposure_draft.pdf (accessed 28 September 2010).

[72]       OPC, Submission 16, p. 29.

[73]       See for example Yahoo!7, Submission 2, p. 3.

[74]       OPC, Submission 16, p. 29.

[75]       Ms Georgia King-Siem, Vice-President, Liberty Victoria, Committee Hansard, 1 December 2010, p. 21.

[76]       Mr Iain McDonald, Board Member, Communications Council, Committee Hansard, 29 October 2010, p. 36.

[77]       Mr Iain McDonald, Board Member, Communications Council, Committee Hansard, 29 October 2010, p. 42.

[78]       Mr Iarla Flynn, Head of Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 11

[79]       Mr Daniel Leesong, CEO, Communications Council, Committee Hansard, 29 October 2010, p. 36.

[80]       Mr Iain McDonald, Board Member, Communications Council, Committee Hansard, 29 October 2010, p. 36.

[81]       Mr Iain McDonald, Board Member, Communications Council, Committee Hansard, 29 October 2010, p. 36.

[82]       Mr Iain McDonald, Board Member, Communications Council, Committee Hansard, 29 October 2010, pp 36–37.

[83]       AANA, Submission 3, p. 2.

[84]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 22.

[85]       Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, p. 70.

[86]       Mr Iarla Flynn, Head of Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 11.

[87]       Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 210, p. 71.

[88]       United States Federal Trade Commission, Protecting Consumer Privacy in an Era of Rapid Change: a proposed framework for businesses and policymakers, Preliminary FTC Staff Report, December 2010, p. 63.

[89]       United States Federal Trade Commission, Protecting Consumer Privacy in an Era of Rapid Change: a proposed framework for businesses and policymakers, Preliminary FTC Staff Report, December 2010, p. 64.

[90]       United States Federal Trade Commission, Protecting Consumer Privacy in an Era of Rapid Change: a proposed framework for businesses and policymakers, Preliminary FTC Staff Report, December 2010, p. 64.

[91]       United States Federal Trade Commission, Protecting Consumer Privacy in an Era of Rapid Change: a proposed framework for businesses and policymakers, Preliminary FTC Staff Report, December 2010, p. 64.

[92]       United States Federal Trade Commission, Protecting Consumer Privacy in an Era of Rapid Change: a proposed framework for businesses and policymakers, Preliminary FTC Staff Report, December 2010, p. 65.

[93]       United States Federal Trade Commission, Protecting Consumer Privacy in an Era of Rapid Change: a proposed framework for businesses and policymakers, Preliminary FTC Staff Report, December 2010, p. 66.

[94]       United States Federal Trade Commission, Protecting Consumer Privacy in an Era of Rapid Change: a proposed framework for businesses and policymakers, Preliminary FTC Staff Report, December 2010, p. 66.

[95]       United States Federal Trade Commission, Protecting Consumer Privacy in an Era of Rapid Change: a proposed framework for businesses and policymakers, Preliminary FTC Staff Report, December 2010, p. 66.

[96]       Media Release: Cross Industry Group to establish standards for online behavioural advertising in Australia, 26 November 2010, at www.aana.com.au/documents/01-CrossIndustryGroupformstoestablishstandardsFINAL.pdf (accessed 19 January 2010).

[97]       Media Release: Cross Industry Group to establish standards for online behavioural advertising in Australia, 26 November 2010.

[98]       Australian Association of National Advertisers and others, Australian Best Practice Guide for Online Behavioural Advertising, March 2011.

[99]       Ms Georgia King-Siem, Vice-President, Liberty Victoria, Committee Hansard, 1 December 2010, p. 22.

[100]       Ms Georgia King-Siem, Vice-President, Liberty Victoria, Committee Hansard, 1 December 2010, p. 22.

[101]       Ms Georgia King-Siem, Vice-President, Liberty Victoria, Committee Hansard, 1 December 2010, p. 15.

[102]       Mr Iarla Flynn, Head of Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 6.

[103]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 17.

[104]       Privacy Act 1988, s. 5B.

[105]       OPC, Submission 16, p. 14.

[106]       OPC, Submission to Senate Finance and Public Administration Legislation Committee Inquiry into Exposure Drafts of Australian Privacy Amendment Legislation, June 2010, p. 44.

[107]       Item 19(3)(g).

[108]       OPC, Submission to Senate Finance and Public Administration Legislation Committee Inquiry into Exposure Drafts of Australian Privacy Amendment Legislation, June 2010, p. 44.

[109]       OPC, Submission 16, p. 31.

[110]       Macquarie Telecom, Submission 28, Attachment 1: The Cloud and US-Cross Border Risks, Freshfields Bruckhaus Deringer, pp 6–7.

[111]       OPC, Submission 16, pp 32-33.

[112]       Professor Greenleaf and Mr Waters, Senate Finance and Public Administration Legislation Committee, Inquiry into Exposure Drafts of Australian Privacy Amendment Legislation, Submission 25, pp 13–15, at www.aph.gov.au/Senate/committee/fapa_ctte/priv_exp_drafts/submissions.htm (accessed 23 September 2010).

[113]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 19.

[114]       Professor Greenleaf and Mr Waters, Senate Finance and Public Administration Legislation Committee, Inquiry into Exposure Drafts of Australian Privacy Amendment Legislation, Submission 25, p. 14.

[115]       Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, at http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:31995L0046:en:HTML (accessed 7 January 2011).

[116]       See Dr Roger Clarke, Chair, Australian Privacy Foundation, Committee Hansard, 1 December 2010, p. 10; Ms Georgia King-Siem, Vice President, Victorian Council for Civil Liberties (Liberty Victoria), Committee Hansard, 1 December 2010, p. 20.

[117]       Victorian Privacy Commissioner, Submission 13, pp 8–9.

[118]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 17.

[119]       Roger Clarke, Chair, APF, Committee Hansard, 1 December 2010, p. 10.

[120]       Ms Georgia King-Siem, Vice President, Liberty Victoria, Committee Hansard, 1 December 2010, p. 20.

[121]       Ms Georgia King-Siem, Vice-President, Liberty Victoria, Committee Hansard, 1 December 2010, pp 15–16.

[122]       Ms Georgia King-Siem, Vice-President, Liberty Victoria, Committee Hansard, 1 December 2010, p. 20.

[123]       ALRC, For Your Information: Australian Privacy Law and Practice, Report No 108, 2008, recommendations 74-1–74-5.

[124]       ALRC, For Your Information: Australian Privacy Law and Practice, Report No 108, 2008, paras 74.112–74.118.

[125]       Victorian Privacy Commissioner, Submission 13, pp 3–4; APF, Submission 14, p. 2; LIV, answer to question on notice, 1 December 2010, p. 3. The LIV's support is qualified in a number of respects which are specified in its answer.

[126]       Senator the Hon Joe Ludwig, Cabinet Secretary, Enhancing National Privacy Protection: Australian Government First Stage Response to the Australian Law Reform Commission Report 108, October 2009, p. 14.

Chapter 4 - Law enforcement challenges arising from online technological advancements

[1]       See for example Pirate Party, Submission 4, p. 6; Rule of Law Institute of Australia, Submission 17.

[2]       Ben Grubb, 'Inside Australia's data retention proposal', ZDNet, 16 June 2010 at www.zdnet.com.au/inside-australia-s-data-retention-proposal-339303862.htm (accessed 15 September 2010).

[3]       Ben Grubb, 'Inside Australia's data retention proposal', ZDNet, 16 June 2010.

[4]       Ben Grubb, 'Inside Australia's data retention proposal', ZDNet, 16 June 2010.

[5]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 1 December 2010, p. 53.

[6]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 85.

[7]       Law Institute of Victoria (LIV), Submission 9, p. 1.

[8]       Mr Roger Clarke, Chair, APF, Committee Hansard, 1 December 2010, p. 9.

[9]       Mr Roger Clarke, Chair, APF, Committee Hansard, 1 December 2010, p. 9.

[10]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 88.

[11]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 88.

[12]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 88.

[13]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 89.

[14]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 1 December 2010, p. 48.

[15]       Directive 2006/24/EC of the European Parliament and of the Council, 15 March 2006, Official Journal L105, 13/04/2006, pp 54-63, at http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:32006L0024:EN:HTML, (accessed 18 October 2010).

[16]       Ms Wendy Kelly, Director, Telecommunications and Surveillance Law Branch, Attorney‑General's Department, Committee Hansard, 29 October 2010, p. 96.

[17]       Directive 2006/24/EC of the European Parliament and of the Council, 15 March 2006, Official Journal L105, 13/04/2006, pp 54–63, Article 5.

[18]       EFA, Submission 20, p. 2 (references omitted).

[19]       Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, p. 62.

[20]       Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, p. 62.

[21]       Mr Iarla Flynn, Head of Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 5.

[22]       Mr Iarla Flynn, Head of Public Policy and Government Affairs, Google Australia Pty Ltd, Committee Hansard, 29 October 2010, p. 5.

[23]       ACMA, 'Internet Service Providers and Law Enforcement and National Security Fact Sheet', at www.acma.gov.au/WEB/STANDARD/pc=PC_100072 (accessed 28 September 2010).

[24]       Telecommunications (Interception and Access) Act 1979, ss 178 and 179.

[25]       Telecommunications (Interception and Access) Act 1979, s. 172.

[26]       Telecommunications (Interception and Access) Act 1979, s. 180.

[27]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 86.

[28]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 86.

[29]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 86.

[30]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 85.

[31]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 98.

[32]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 86.

[33]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 86.

[34]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 86.

[35]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 85.

[36]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 98.

[37]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 29 October 2010, p. 85.

[38]       Ms Wendy Kelly, Director, Telecommunications and Surveillance Law Branch, Attorney‑General's Department, Committee Hansard, 29 October 2010, pp 87–88. The Department provided the committee with a copy of the data set on a confidential basis.

[39]       Ms Wendy Kelly, Director, Telecommunications and Surveillance Law Branch, Attorney‑General's Department, Committee Hansard, 1 December 2010, p. 50.

[40]       Assistant Commissioner Neil Gaughan, National Manager, High Tech Crime Operations, AFP, Committee Hansard, 29 October 2010, p. 87.

[41]       Assistant Commissioner Neil Gaughan, National Manager, High Tech Crime Operations, AFP, Committee Hansard, 29 October 2010, p. 89.

[42]       The committee conducted in camera hearing with officers from the Attorney‑General's Department and the Australian Federal Police on 1 December 2010.

[43]       LIV, Submission 9, p. 1.

[44]       Ms Kathryn Miller, Member, Executive Committee; Member, Administrative Review and Constitutional Law Committee, Administrative Law and Human Rights Section, LIV, Committee Hansard, 1 December 2010, p. 24.

[45]       Ms Kathryn Miller, Member, Executive Committee; Member, Administrative Review and Constitutional Law Committee, Administrative Law and Human Rights Section, LIV, Committee Hansard, 1 December 2010, p. 24. The LIV submission made similar points by referring to the risks of data misuse, loss, and unauthorised access associated with requiring ISPs to retain such vast quantities of data; Submission 9, p. 2.

[46]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 18.

[47]       Ms Kathryn Miller, Member, Executive Committee; Member, Administrative Review and Constitutional Law Committee, Administrative Law and Human Rights Section, LIV, Committee Hansard, 1 December 2010, p. 24.

[48]       Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, p. 68.

[49]       Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, p. 69.

[50]       Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, p. 61.

[51]       Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, pp 71–72.

[52]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, pp 17–18.

[53]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 19.

[54]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 19.

[55]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 19.

[56]       Rule of Law Institute of Australia, Submission 17, p. 2; Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, p. 72.

[57]       Ms Kathryn Miller, Member, Executive Committee; Member, Administrative Review and Constitutional Law Committee, Administrative Law and Human Rights Section, LIV, Committee Hansard, 1 December 2010, p. 24.

[58]       Ms Kathryn Miller, Member, Executive Committee; Member, Administrative Review and Constitutional Law Committee, Administrative Law and Human Rights Section, LIV, Committee Hansard, 1 December 2010, p. 25.

[59]       Ms Kathryn Miller, Member, Executive Committee; Member, Administrative Review and Constitutional Law Committee, Administrative Law and Human Rights Section, LIV, Committee Hansard, 1 December 2010, p. 25.

[60]       Ms Kathryn Miller, Member, Executive Committee; Member, Administrative Review and Constitutional Law Committee, Administrative Law and Human Rights Section, LIV, Committee Hansard, 1 December 2010, p. 25.

[61]       Mr Timothy Pilgrim, Australian Privacy Commissioner, Committee Hansard, 29 October 2010, p. 18.

[62]       Assistant Commissioner Neil Gaughan, National Manager, High Tech Crime Operations, AFP, Committee Hansard, 29 October 2010, p. 87.

[63]       Ms Kathryn Miller, Member, Executive Committee; Member, Administrative Review and Constitutional Law Committee, Administrative Law and Human Rights Section, LIV, Committee Hansard, 1 December 2010, p. 26.

[64]       Ms Kathryn Miller, Member, Executive Committee; Member, Administrative Review and Constitutional Law Committee, Administrative Law and Human Rights Section, LIV, Committee Hansard, 1 December 2010, p. 26.

[65]       Australian Law Reform Commission, For Your Information: Australian Privacy Law and Practice, Report 108, 2008.

[66]       LIV, Submission 9, p. 2. Emphasis in original.

[67]       Ms Georgia King-Siem, Vice-President, Liberty Victoria, Committee Hansard, 1 December 2010, p. 16.

[68]       LIV, Submission 9, p. 2.

[69]       Ms Kathryn Miller, Member, Executive Committee; Member, Administrative Review and Constitutional Law Committee, Administrative Law and Human Rights Section, LIV, Committee Hansard, 1 December 2010, p. 24.

[70]       Fraudwatch International, Submission 22, p. 2.

[71]       Mr Trent Youl, CEO, Fraudwatch International Pty Ltd, Committee Hansard, 29 October 2010, p. 74.

[72]       Fraudwatch International, Submission 22, p. 4.

[73]       Mr Colin Jacobs, Chair, EFA, Committee Hansard, 29 October 2010, p. 67.

[74]       www.torproject.org (accessed 12 January 2011).

[75]       www.i2p2.de (accessed 12 January 2011).

[76]       Ms Catherine Smith, Assistant Secretary, Telecommunications and Surveillance Law Branch, Attorney-General's Department, Committee Hansard, 1 December 2010, p. 48.

[77]       House of Representatives Standing Committee on Communications, Hackers, Fraudsters and Botnets: Tackling the Problem of Cyber Crime, June 2010, www.aph.gov.au/house/committee/coms/cybercrime/report.htm (accessed 7 March 2011); and the government response, 25 November 2010, www.aph.gov.au/house/committee/coms/governmentresponses/cybercrime.pdf (accessed 7 March 2011).

[78]       Senate Standing Orders, Procedural Order of Continuing Effect no 42, June 2009, p. 140, www.aph.gov.au/Senate/pubs/standing_orders/standingorders.pdf (accessed 6 April 2011).