Belatedly getting around to blogging recommendations from the Australian Law Reform Commission's 332 page report [
PDF] on
Serious Invasions of Privacy in the Digital Era (ie the 'privacy tort inquiry').
The ALRC was directed, prior to the latest national election, to make recommendations regarding
1. Innovative ways in which law may reduce serious invasions of privacy in the
digital era.
2. The necessity of balancing the value of privacy with other fundamental values
including freedom of expression and open justice.
3. The detailed legal design of a statutory cause of action for serious invasions of
privacy, including not limited to:
a. legal thresholds
b. the effect of the implied freedom of political communication
c. jurisdiction
d. fault elements
e. proof of damages
f. defences
g. exemptions
h. whether there should be a maximum award of damages
i. whether there should be a limitation period
j. whether the cause of action should be restricted to natural and living
persons
k. whether any common law causes of action should be abolished
l. access to justice
m. the availability of other court ordered remedies.
4. The nature and appropriateness of any other legal remedies for redress for serious
invasions of privacy.
It was to have regard to:
• the extent and application of existing privacy statutes
• the rapid growth in capabilities and use of information, surveillance and
communication technologies
• community perceptions of privacy
• relevant international standards and the desirability of consistency in laws
affecting national and transnational dataflows
and take into account the ALRC 2008
For Your Information Report
(2008), relevant New South Wales and Victorian Law Reform Commission privacy
reports, the
Privacy Amendment (Enhancing Privacy Protection) Act 2012 (Cth) and relevant
Commonwealth, State, Territory legislation, international law and case law.
The recommendations are
R4–1 If a statutory cause of action for serious invasion of
privacy is to be enacted, it should be enacted by the Commonwealth, in a
Commonwealth Act (the Act).
R4–2 The cause of action should be described in the Act as
an action in tort.
Two Types of Invasion
R5–1 The Act should provide that the plaintiff must prove
that his or her privacy was invaded in one of the following ways:
(a) intrusion upon seclusion, such as by physically intruding into the plaintiff’s
private space or by watching, listening to or recording the plaintiff’s private
activities or private affairs; or
(b) misuse of private information, such as by collecting or disclosing private
information about the plaintiff.
R5–2 The Act should provide that ‘private information’
includes untrue information, but only if the information would be private if it were
true.
Reasonable Expectation of Privacy
R6–1 The new tort should be actionable only where a
person in the position of the plaintiff would have had a reasonable expectation of
privacy, in all of the circumstances.
R6–2 The Act should provide that, in determining whether
a person in the position of the plaintiff would have had a reasonable expectation of
privacy in all of the circumstances, the court may consider, among other things:
(a) the nature of the private information, including whether it relates to intimate or
family matters, health or medical matters, or financial matters;
(b) the means used to obtain the private information or to intrude upon seclusion,
including the use of any device or technology;
(c) the place where the intrusion occurred, such as in the plaintiff’s home;
(d) the purpose of the misuse, disclosure or intrusion;
(e) how the private information was held or communicated, such as in private
correspondence or a personal diary;
(f) whether and to what extent the private information was already in the public
domain;
(g) the relevant attributes of the plaintiff, including the plaintiff’s age, occupation
and cultural background; and
(h) the conduct of the plaintiff, including whether the plaintiff invited publicity or
manifested a desire for privacy.
Fault
R7–1 The new tort should be confined to intentional or
reckless invasions of privacy. It should not extend to negligent invasions of privacy,
and should not attract strict liability.
R7–2 The Act should provide that an apology made by the
defendant does not constitute an admission of fault or liability and is not relevant to the
determination of fault or liability.
Seriousness and Proof of Damage
R8–1 The Act should provide that a plaintiff has an action
under the new tort only where the invasion of privacy was ‘serious’, having regard,
among other things, to:
(a) the degree of any offence, distress or harm to dignity that the invasion of privacy
was likely to cause to a person of ordinary sensibilities in the position of the
plaintiff; and
(b) whether the defendant was motivated by malice or knew the invasion of privacy
was likely to offend, distress or harm the dignity of the plaintiff
R8–2 The plaintiff should not be required to prove actual
damage to have an action under the new tort.
Balancing Privacy with Other Interests
R9–1 The Act should provide that, for the plaintiff to have
a cause of action, the court must be satisfied that the public interest in privacy
outweighs any countervailing public interest. A separate public interest defence would
therefore be unnecessary.
R9–2 The Act should include the following list of
countervailing public interest matters which a court may consider, along with any other
relevant public interest matter:
(a) freedom of expression, including political communication and artistic
expression;
(b) freedom of the media, particularly to responsibly investigate and report matters
of public concern and importance;
(c) the proper administration of government;
(d) open justice;
(e) public health and safety;
(f) national security; and
(g) the prevention and detection of crime and fraud.
R9–3 The Act should provide that the defendant has the
burden of adducing evidence that suggests there is a countervailing public interest for
the court to consider. The Act should also provide that the plaintiff has the legal onus
to satisfy the court that the public interest in privacy outweighs any countervailing
public interest that is raised in the proceedings.
Forums, Limitations and Other Matters
R10–1 Federal, state and territory courts should have
jurisdiction to hear an action for serious invasion of privacy under the Act.
Consideration should also be given to giving jurisdiction to appropriate state and
territory tribunals.
R10–2 The new tort should only be actionable by natural
persons.
Recommendation 10–3 A cause of action for serious invasion of privacy
should not survive for the benefit of the plaintiff’s estate or against the defendant’s
estate.
R10–4 A person should not be able to bring an action under
the new tort after the earlier of:
(a) one year from the date on which the plaintiff became aware of the invasion of
privacy; or
(b) three years from the date on which the invasion of privacy occurred.
R10–5 In exceptional circumstances, the court may extend
this limitation period, but the period should expire no later than six years from the date
on which the invasion occurred.
R10–6 Consideration should be given to extending the
limitation period where the plaintiff was under 18 years of age when the invasion of
privacy occurred.
R10–7 Consideration should be given to enacting a ‘first
publication rule’, also known as a ‘single publication rule’. This would limit the
circumstances in which a person may bring an action in relation to the publication of
private information, when that same private information had already been published in
the past.
Defences and Exemptions
R11–1 The Act should provide for a defence that the
defendant’s conduct was required or authorised by law.
R11–2 The Act should provide a defence for conduct
incidental to the exercise of a lawful right of defence of persons or property, where that
conduct was proportionate, necessary and reasonable.
R11–3 The Act should provide for a defence of necessity.
R11–4 The Act should provide for a defence of consent.
R11–5 The Act should provide for a defence of absolute
privilege.
R11–6 The Act should provide for a defence of publication
of public documents.
R11–7 The Act should provide for a defence of fair report of
proceedings of public concern.
R11–8 The Act should provide for an exemption for children
and young persons.
12.
Remedies and Costs
R12–1 The Act should provide that courts may award
damages, including damages for emotional distress.
R12–2 The Act should set out the following non-exhaustive
list of factors that a court may consider when determining the amount of damages:
(a) whether the defendant had made an appropriate apology to the plaintiff;
(b) whether the defendant had published a correction;
(c) whether the plaintiff had already recovered compensation, or has agreed to
receive compensation in relation to the conduct of the defendant;
(d) whether either party took reasonable steps to settle the dispute without litigation;
and
(e) whether the defendant’s unreasonable conduct following the invasion of privacy,
including during the proceedings, had subjected the plaintiff to particular or
additional embarrassment, harm, distress or humiliation.
R12–3 The Act should provide that the court may not award
a separate sum as aggravated damages.
R12–4 The Act should provide that a court may award
exemplary damages in exceptional circumstances.
R12–5 The Act should provide for a cap on damages. The
cap should apply to the sum of both damages for non-economic loss and any
exemplary damages. This cap should not exceed the cap on damages for non-economic
loss in defamation.
R12–6 The Act should provide that a court may award an
account of profits.
R12–7 The Act should provide that the court may at any
stage of proceedings grant an interlocutory or other injunction to restrain the threatened
or apprehended invasion of privacy, where it appears to the court to be just or
convenient and on such terms as the court thinks fit.
R12–8 The Act should provide that, when considering
whether to grant injunctive relief before trial to restrain publication of private
information, a court must have particular regard to freedom of expression and any
other matters of public interest.
R12–9 The Act should provide that courts may order the
delivery up and destruction or removal of material.
R12–10 The Act should provide that courts may, where false
private information has been published, order the publication of a correction.
R12–11 The Act should provide that courts may order the
defendant to apologise.
R12–12 The Act should provide that courts may make a
declaration.
Breach of Confidence Actions for Misuse of Private
Information
R13–1 If a statutory cause of action for serious invasion of
privacy is not enacted, appropriate federal, state, and territory legislation should be
amended to provide that, in an action for breach of confidence that concerns a serious
invasion of privacy by the misuse, publication or disclosure of private information, the
court may award compensation for the plaintiff’s emotional distress.
Surveillance Devices
R14–1 The Commonwealth Government should enact
surveillance legislation to replace existing state and territory surveillance device laws.
R14–2 Surveillance legislation should be technology neutral.
It should regulate surveillance through the use of listening devices, optical devices,
tracking devices, data surveillance devices, and other devices and systems.
R14–3 The Commonwealth Government should consider
consolidating telecommunications surveillance laws with the new Commonwealth
surveillance legislation.
R14–4 Surveillance legislation should not contain a defence
or exception for participant monitoring.
R14–5 Surveillance legislation should provide a defence for
responsible journalism relating to matters of public concern and importance.
R14–6 Workplace surveillance laws should be made uniform
throughout Australia.
R14–7 Surveillance legislation should provide that a court
may order remedial relief, including compensation, for a person subjected to unlawful
surveillance.
R14–8 State and territory governments should give
jurisdiction to appropriate courts and tribunals to hear complaints about the installation
and use of surveillance devices that can monitor neighbours on residential property.
Harassment
R15–1 If a statutory cause of action for serious invasion of
privacy is not enacted, state and territory governments should enact uniform legislation
creating a tort of harassment.
New Regulatory Mechanisms
R16–1 The Commonwealth Government should consider
extending the Privacy Commissioner’s powers so that the Commissioner may
investigate complaints about serious invasions of privacy and make appropriate
declarations. Such declarations would require referral to a court for enforcement.
R16–2 The following functions should be conferred on the
Privacy Commissioner:
(a) to assist a court as amicus curiae, where the Commissioner considers it
appropriate, and with the leave of the court; and
(b) to intervene in court proceedings, where the Commissioner considers it
appropriate, and with the leave of the court.