CBL v Southern Cross University [2018] NSWCATAD 97

CBL v Southern Cross University [2018] NSWCATAD 97

There was no breach of the PPIP Act’s Information Protection Principles because the emails were solicited for lawful purposes directly related to the university’s functions, the applicant was notified or aware of the collection and redirection, and the internal redirection to the Legal Unit did not constitute unlawful disclosure under the PPIP Act. The applicant did not provide evidence of impropriety or unlawfulness in the collection or redirection. The obligations under the Act were met.

Parties
Applicant: CBL; Respondent: Southern Cross University
Jurisdiction
Australia
Judgment Date
14 May 2018
Procedural Posture
Administrative Review / Merits Review of Internal Privacy Decision
Outcome
The respondent’s internal review decision of 4 October 2016 is affirmed; no breach found.
Legal Topics
Personal Information, Solicitation and Collection of Information, Lawful Purpose, Disclosure Within Agency, Confidential Information
Administrative Law Privacy Law Personal Information Solicitation and Collection of Information Lawful Purpose Disclosure Within Agency Confidential Information

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 3 Authorities cited 12 Party arguments 2
Sign in to unlock

Parties

CBL

Applicant

Southern Cross University

Respondent

Procedural Posture

Administrative Review / Merits Review of Internal Privacy Decision

Legal Issues

  1. 1 Whether the collection and internal redirection of the applicant’s emails constituted a breach of the Information Protection Principles under the Privacy and Personal Information Protection Act 1998 (NSW)
  2. 2 Whether disclosure occurred within the meaning of the Act by the internal redirection to the Legal Unit
  3. 3 Whether there was a lawful purpose and means for collection of personal information

Ratio Decidendi

There was no breach of the PPIP Act’s Information Protection Principles because the emails were solicited for lawful purposes directly related to the university’s functions, the applicant was notified or aware of the collection and redirection, and the internal redirection to the Legal Unit did not constitute unlawful disclosure under the PPIP Act. The applicant did not provide evidence of impropriety or unlawfulness in the collection or redirection. The obligations under the Act were met.

Court Disposition

The respondent’s internal review decision of 4 October 2016 is affirmed; no breach found.

Orders

  • The respondent's decision of 4 October 2016 is affirmed.