Concerns Arise Regarding Australian Law Enforcement’s Data Access

There are concerns regarding how Australian law enforcement and integrity agencies access telecommunications data and store information.

These authorities must adhere to stringent safeguards in acquiring data under the Telecommunications Interception and Access Act.

The Commonwealth Ombudsman conducted a review of 21 agencies to examine how they utilize their powers, determining that Victoria Police was the agency with the highest number of authorizations for accessing data beyond the scope of the law.

In the Covert Electronic Surveillance report, it was stated, “We found numerous authorizations lacking evidence that data access was for law enforcement or locating missing persons. Furthermore, many authorizations referenced incorrect legislation, a recurring issue for Victoria Police.”

Related Stories

The report expressed concern that the misapplication of authorization provisions by Victoria Police jeopardizes the legality of accessed data and the accuracy of their ministerial reporting.

Victoria Police acknowledged the need to achieve full compliance with the act’s requirements, admitting occasional lapses. They stated, “We have taken numerous measures in the last two years to ensure our officers are well-versed in their obligations when handling such requests.”

Overall, the report revealed fewer instances of non-compliance in 2022/23 compared to the previous year, yet highlighted issues such as inadequate record-keeping and insufficient staff training.

Ombudsman Iain Anderson emphasized the necessity of a “mature culture of compliance” to responsibly manage covert law enforcement operations. He stated, “While agencies have enhanced their policies, practical application remains a concern.”

The report also raised concerns regarding potential risks in other agencies accessing data within Queensland Police’s system, indicating uncertainty about the type of data disclosed and its compliance under the Act.

Queensland Police promptly rectified any non-compliance issues and confirmed that their record management system, QPRIME, is the appropriate repository for such data, accessible only to law enforcement agencies. A spokesperson highlighted the system’s auditability in tracking access to records.

All agencies were receptive to the report’s findings, emphasizing the need for regular and targeted training to ensure compliance among officers.