Commonwealth: Treasury Laws Amendment (Registries Modernisation and Other Measures) Act 2020 (Cth)

Treasury Laws Amendment (Registries Modernisation and Other Measures) Act 2020 No. 69, 2020 Compilation No. 3 Compilation date: 10 August 2022 Includes amendments up to: Act No. 35, 2022 Registered: 25 August 2022 About this compilation This compilation This is a compilation of the Treasury Laws Amendment (Registries Modernisation and Other Measures) Act 2020 that shows the text of the law as amended and in force on 10 August 2022 (the compilation date). The notes at the end of this compilation (the endnotes) include information about amending laws and the amendment history of provisions of the compiled law. Uncommenced amendments The effect of uncommenced amendments is not shown in the text of the compiled law. Any uncommenced amendments affecting the law are accessible on the Legislation Register (www.legislation.gov.au). The details of amendments made up to, but not commenced at, the compilation date are underlined in the endnotes. For more information on any uncommenced amendments, see the series page on the Legislation Register for the compiled law. Application, saving and transitional provisions for provisions and amendments If the operation of a provision or amendment of the compiled law is affected by an application, saving or transitional provision that is not included in this compilation, details are included in the endnotes. Editorial changes For more information about any editorial changes made in this compilation, see the endnotes. Modifications If the compiled law is modified by another law, the compiled law operates as modified but the modification does not amend the text of the law. Accordingly, this compilation does not show the text of the compiled law as modified. For more information on any modifications, see the series page on the Legislation Register for the compiled law. Self‑repealing provisions If a provision of the compiled law has been repealed in accordance with a provision of the law, details are included in the endnotes. Contents 1 Short title 2 Commencement 3 Schedules Schedule 1—Amendments relating to the Registrar Part 1—Main amendments Business Names Registration Act 2011 Business Names Registration (Transitional and Consequential Provisions) Act 2011 Corporations Act 2001 National Consumer Credit Protection Act 2009 Part 2—Other amendments A New Tax System (Australian Business Number) Act 1999 A New Tax System (Goods and Services Tax) Act 1999 Australian Prudential Regulation Authority Act 1998 Australian Securities and Investments Commission Act 2001 Business Names Registration Act 2011 Business Names Registration (Transitional and Consequential Provisions) Act 2011 Corporations Act 2001 Income Tax Assessment Act 1997 National Consumer Credit Protection Act 2009 Superannuation Industry (Supervision) Act 1993 Taxation Administration Act 1953 Schedule 2—Director identification numbers Corporations (Aboriginal and Torres Strait Islander) Act 2006 Corporations Act 2001 Income Tax Assessment Act 1936 Taxation Administration Act 1953 Endnotes Endnote 1—About the endnotes Endnote 2—Abbreviation key Endnote 3—Legislation history Endnote 4—Amendment history An Act to amend the law relating to corporations, business names registration and consumer credit and to deal with consequential matters relating to the enactment of the Commonwealth Registers Act 2020, and for related purposes 1 Short title This Act is the Treasury Laws Amendment (Registries Modernisation and Other Measures) Act 2020. 2 Commencement (1) Each provision of this Act specified in column 1 of the table commences, or is taken to have commenced, in accordance with column 2 of the table. Any other statement in column 2 has effect according to its terms. Commencement information Column 1 Column 2 Column 3 Provisions Commencement Date/Details 1. Sections 1 to 3 and anything in this Act not elsewhere covered by this table The day this Act receives the Royal Assent. 22 June 2020 2. Schedule 1, items 1 to 1258 A day or days to be fixed by Proclamation. Items 1‑19, 103: 4 April 2021 However, if any of the provisions do not commence before 1 July 2026, they commence on that day. (F2021N00065) 3. Schedule 1, items 1259 and 1260 At the same time as the commencement of the provisions covered by table item 2. Never commenced However, the provisions do not commence at all if Schedule 3 to the Treasury Laws Amendment (Strengthening Financial Regulators No. 1) Act 2019 commences before or on the same day as the provisions covered by table item 2. 4. Schedule 1, item 1261 The day after the Treasury Laws Amendment (2021 Measures No. 5) Act 2021 receives the Royal Assent. 8 December 2021 5. Schedule 1, items 1262 to 1467 A day or days to be fixed by Proclamation. However, if any of the provisions do not commence before 1 July 2026, they commence on that day. 6. Schedule 2 A day or days to be fixed by Proclamation. 4 April 2021 However, if any of the provisions do not commence within the period of 24 months beginning on the day this Act receives the Royal Assent, they commence on the day after the end of that period. (F2021N00065) Note: This table relates only to the provisions of this Act as originally enacted. It will not be amended to deal with any later amendments of this Act. (2) Any information in column 3 of the table is not part of this Act. Information may be inserted in this column, or information in it may be edited, in any published version of this Act. 3 Schedules Legislation that is specified in a Schedule to this Act is amended or repealed as set out in the applicable items in the Schedule concerned, and any other item in a Schedule to this Act has effect according to its terms. Schedule 1—Amendments relating to the Registrar Part 1—Main amendments Business Names Registration Act 2011 1 Section 3 Insert: Australian business law means a law of the Commonwealth, or of a State or Territory, that is a law that regulates, or relates to the regulation of, business or persons engaged in business. Commonwealth body means: (a) an Agency (within the meaning of the Public Service Act 1999); or (b) a body, whether incorporated or not, established for a public purpose by or under a law of the Commonwealth; or (c) a person: (i) holding or performing the duties of an office established by or under a law of the Commonwealth; or (ii) holding an appointment made under a law of the Commonwealth. data standards means standards made by the Registrar under section 62H. designated secrecy provision has the meaning given by subsection 62N(3). disclosure framework means the disclosure framework made by the Registrar under section 62L. government entity has the meaning given by section 41 of the A New Tax System (Australian Business Number) Act 1999. official employment means: (a) appointment or employment by the Commonwealth, or the performance of services for the Commonwealth; or (b) the exercise of powers or performance of functions under a delegation by the Registrar. protected information means information: (a) obtained by a person in the course of the person's official employment; and (b) disclosed to the person or another person, or obtained by the person or another person: (i) under, or in relation to, this Act or the Transitional Act; or (ii) under another law of the Commonwealth; in connection with particular functions or powers of the Registrar. Registrar has the meaning given by section 6A. secrecy provision has the meaning given by subsection 62N(2). taxation law has the same meaning as in the Income Tax Assessment Act 1997. 2 After section 6 Insert: 6A Meaning of Registrar A reference in this Act to the Registrar is a reference to: (a) if only one Commonwealth body is appointed as Registrar under section 62A—that body; or (b) if more than one Commonwealth body is appointed under that section with functions and powers in connection with this Act or the Transitional Act: (i) if the reference relates to one or more particular functions or powers—any Commonwealth body so appointed with any of those particular functions or powers; or (ii) otherwise—any of the Commonwealth bodies appointed under that section. 3 Section 56 Before "A decision", insert "(1)". 4 At the end of section 56 Add: (2) A decision by the Registrar under a provision of the data standards or the disclosure framework is reviewable on the application of an entity whose interests are affected by the decision. 5 Before section 63 Insert: Division 1—Matters relating to handling records and information Subdivision A—The Registrar 62A Appointment of the Registrar (1) The Minister may, by notifiable instrument, appoint a Commonwealth body to be the Registrar. (2) The Minister may, by notifiable instrument, appoint a Commonwealth body to be the Registrar in relation to one or more functions or powers of the Registrar. 62B Functions The Registrar's functions are: (a) such functions as are conferred on the Registrar by or under this Act or the Transitional Act; and (b) such functions as are prescribed by rules made for the purposes of this paragraph under section 62U; and (c) such functions as are incidental to the functions mentioned in paragraph (a) or (b). 62C Powers The Registrar's powers include: (a) such powers as are conferred: (i) on the Registrar in relation to the functions mentioned in section 62B; and (ii) by or under this Act or the Transitional Act; and (b) the power to do all things necessary or convenient to be done for or in connection with the performance of those functions. 62D Directions by Minister (1) The Minister may, by legislative instrument, give written directions to the Registrar about the performance of its functions and the exercise of its powers. Note: Section 42 (disallowance) and Part 4 of Chapter 3 (sunsetting) of the Legislation Act 2003 do not apply to the directions (see regulations made for the purposes of paragraphs 44(2)(b) and 54(2)(b) of that Act). (2) Without limiting subsection (1), a direction under that subsection may relate to any of the following: (a) matters to be dealt with in the data standards or disclosure framework; (b) consultation processes to be followed prior to making data standards or the disclosure framework. (3) A direction under subsection (1) must be of a general nature only. (4) Subsection (3) does not prevent a direction under subsection (1) from relating to a particular matter to be dealt with in the data standards or disclosure framework. However, the direction must not direct the Registrar how to apply the data standards or disclosure framework in a particular case. (5) The Registrar must comply with a direction under subsection (1). 62E Delegation (1) The Registrar may, in writing, delegate all or any of the Registrar's functions or powers under this Act or the Transitional Act (other than the power to make data standards or the disclosure framework) to: (a) any person to whom it may delegate any of its other functions, as a Commonwealth body, under a law of the Commonwealth; or (b) any person of a kind specified in rules made under section 62U. Note: Sections 34AA to 34A of the Acts Interpretation Act 1901 contain provisions relating to delegations. (2) In performing a delegated function or exercising a delegated power, the delegate must comply with any written directions of the Registrar. 62F Assisted decision making (1) The Registrar may arrange for the use, under the Registrar's control, of processes to assist decision making (such as computer applications and systems) for any purposes for which the Registrar may make decisions in the performance or exercise of the Registrar's functions or powers under this Act or the Transitional Act, other than decisions reviewing other decisions. (2) A decision the making of which is assisted by the operation of such a process under an arrangement made under subsection (1) is taken to be a decision made by the Registrar. (3) The Registrar may substitute a decision for a decision (the initial decision) the making of which is assisted by the operation of such a process under an arrangement under subsection (1) if the Registrar is satisfied that the initial decision is incorrect. 62G Liability for damages None of the following: (a) the Registrar; (b) if the Registrar is a Commonwealth body that has members—a member of the Registrar; (c) a member of the staff of the Registrar; (d) a person who is, or is a member of or a member of the staff of, a delegate of the Registrar; (e) a person who is authorised to perform or exercise a function or power of, or on behalf of, the Registrar; (f) an APS employee, or an officer or employee of a Commonwealth body, whose services are made available to the Registrar in connection with the performance or exercise of any of the Registrar's functions or powers; is liable to an action or other proceeding for damages for or in relation to an act done, or omitted to be done, in good faith in performance or purported performance of any function, or in exercise or purported exercise of any power, conferred or expressed to be conferred by or under this Division. Subdivision B—How the Registrar is to perform and exercise functions and powers 62H Data standards (1) The Registrar may, by legislative instrument, make data standards on matters relating to the performance of the Registrar's functions and the exercise of the Registrar's powers under this Act or the Transitional Act. (2) Without limiting subsection (1), the data standards may provide for any of the following: (a) what information may be collected for the purposes of the performance of the Registrar's functions and the exercise of the Registrar's powers under this Act or the Transitional Act; (b) how such information may be collected; (c) the manner and form in which such information is given to the Registrar; (d) when information is to be given to the Registrar; (e) how information held by the Registrar is to be authenticated, verified or validated; (f) how information held by the Registrar is to be stored; (g) correction of information held by the Registrar; (h) the manner and form of communication between the Registrar and persons who give information to the Registrar or seek to access information held by the Registrar; (i) integrating or linking information held by the Registrar. (3) Without limiting subsection (1), the data standards may provide differently in relation to different functions or powers of the Registrar. (4) If: (a) a Commonwealth body (the new Registrar) is appointed as the Registrar with particular functions or powers under this Act or the Transitional Act; and (b) immediately before that appointment, another Commonwealth body was the Registrar with those functions or powers; and (c) the new Registrar does not have data standards that would apply to those functions or powers; any data standards applying to those functions or powers immediately before that appointment continue to apply until the new Registrar makes data standards that apply to those functions or powers, or amends its existing data standards to apply to those functions or powers. 62J Giving information to the Registrar (1) Without limiting section 62H, the data standards may provide that information is to be given to the Registrar in electronic form, or any other specified form. (2) A requirement under this Act or the Transitional Act that information is to be provided to the Registrar in a particular form or manner (however described), including a requirement: (a) that the information is to be "lodged" or "furnished"; and (b) that the information is to be "written" or "in writing"; and (c) that a "copy" of a document containing the information is to be provided; is not taken to restrict by implication what the data standards may provide under subsection (1) in relation to that information. 62K How the Registrar is to perform and exercise functions and powers (1) The Registrar must perform its functions and exercise its powers under this Act or the Transitional Act in accordance with: (a) the data standards; or (b) if there are no data standards that apply to particular functions or powers—any requirement relating to those functions or powers as in force immediately before those functions or powers became functions or powers of the Registrar. (2) This section does not affect the application to the Registrar of any other law of the Commonwealth. Subdivision C—Disclosure of information 62L Disclosure framework (1) The Registrar may, by legislative instrument, make a disclosure framework relating to disclosing protected information. (2) Without limiting subsection (1), the disclosure framework may provide for any of the following: (a) circumstances in which information must not be disclosed without the consent of the person to whom it relates; (b) circumstances in which de‑identified information may be disclosed; (c) circumstances in which information may be disclosed to the general public; (d) circumstances in which confidentiality agreements are required for the disclosure of information; (e) imposing conditions on disclosure of information. (3) Without limiting subsection (1), the disclosure framework may provide differently in relation to different functions or powers of the Registrar under this Act or the Transitional Act. (4) A person commits an offence if: (a) the person is a party to a confidentiality agreement of a kind mentioned in paragraph (2)(d); and (b) the person fails to comply with the confidentiality agreement. Penalty: 100 penalty units or imprisonment for 2 years, or both. (5) The disclosure framework must not provide for disclosure of protected information unless the Registrar is satisfied that the benefits of the disclosure would outweigh the risks of the disclosure (taking into account any mitigation of those risks in accordance with the disclosure framework). (6) However, subsection (5) does not apply to the extent that the disclosure framework deals with a matter in accordance with a direction under section 62D. (7) If: (a) a Commonwealth body (the new Registrar) is appointed as the Registrar with particular functions or powers under this Act or the Transitional Act; and (b) immediately before that appointment, another Commonwealth body was the Registrar with those functions or powers; and (c) the new Registrar does not have a disclosure framework that would apply to those functions or powers; the disclosure framework applying to those functions or powers immediately before that appointment continues to apply until the new Registrar makes a disclosure framework that applies to those functions or powers, or amends its existing disclosure framework to apply to those functions or powers. 62M Protection of confidentiality of protected information (1) A person (the first person) commits an offence if: (a) the first person is, or has been, in official employment; and (b) the first person makes a record of information, or discloses information to another person; and (c) the information is protected information that was obtained by the first person in the course of the first person's official employment. (2) However, subsection (1) does not apply if the recording or disclosure is authorised by subsection (3). (3) The recording or disclosure is authorised by this subsection if: (a) the recording or disclosure is for the purposes of this Division; or (b) the recording or disclosure happens in the course of the performance of the duties of the first person's official employment; or (c) in the case of a disclosure—the disclosure is to another person for use, in the course of the performance of the duties of the other person's official employment, in relation to the performance or exercise of the functions or powers of a government entity; or (d) in the case of a disclosure to another person who is an employee of a State, a Territory or an authority of a State or Territory—the disclosure: (i) is to the other person for use, in the course of the performance of the duties of that employment, in relation to the performance or exercise of the functions or powers of a government entity; and (ii) is in accordance with an agreement, about registration of business names, between the Commonwealth, the States, the Australian Capital Territory and the Northern Territory; or (e) in the case of a disclosure—each person to whom the information relates consents to the disclosure; or (f) in the case of a disclosure—the disclosure is in accordance with the disclosure framework. Note: A defendant bears an evidential burden in relation to the matters in subsection (3): see subsection 13.3(3) of the Criminal Code. 62N Authorisation of recording or disclosure (1) A person is not liable to any proceedings for contravening a secrecy provision in respect of a recording or disclosure authorised under subsection 62M(3), unless the secrecy provision is a designated secrecy provision. (2) A secrecy provision is a provision that: (a) is a provision of a law of the Commonwealth (other than this Act); and (b) prohibits or regulates the use or disclosure of information. (3) A designated secrecy provision is any of the following: (a) sections 18 to 18B and 92 of the Australian Security Intelligence Organisation Act 1979; (b) section 34 of the Inspector‑General of Intelligence and Security Act 1986; (c) sections 39 to 41 of the Intelligence Services Act 2001; (d) section 8WB of the Taxation Administration Act 1953; (e) a provision of a law of the Commonwealth prescribed by rules made for the purposes of this paragraph under section 62U; (f) a provision of a law of the Commonwealth of a kind prescribed by rules made for the purposes of this paragraph under section 62U. 62P Preventing disclosure of particular protected information (1) If: (a) a person applies to the Registrar for particular protected information relating to the person not to be disclosed; and (b) the Registrar is satisfied that it is not appropriate to disclose that information; a disclosure of that information is taken, for the purposes of this Act, not to be in accordance with the disclosure framework. (2) Without limiting section 62L, the disclosure framework may provide for: (a) how applications referred to in paragraph (1)(a) are to be made; and (b) how those applications are to be decided. 62Q Authorisation for purposes of Privacy Act A disclosure of personal information (within the meaning of the Privacy Act 1988) is taken to be authorised by law for the purposes of paragraph 6.2(b) of Schedule 1 to that Act if: (a) the information is protected information; and (b) the disclosure is authorised by subsection 62M(3) of this Act. 62R Disclosure to a court A person is not to be required: (a) to produce to a court any document that: (i) contains protected information; and (ii) was made or given under, or for the purposes of, this Act or the Transitional Act; and (iii) was obtained by the person in the course of the person's official employment; or (b) to disclose to a court any protected information that the person obtained in the course of the person's official employment; unless the production or disclosure is necessary for the purpose of giving effect to a taxation law or an Australian business law. Subdivision D—Miscellaneous 62S Extracts of information to be admissible in evidence (1) In any proceedings, a document, or a copy of a document, that purports (irrespective of the form of wording used) to be an extract of information held by the Registrar under, or for the purposes of, this Act or the Transitional Act: (a) is proof, in the absence of evidence to the contrary, of information that is stated in it and that purports to be held by the Registrar; and (b) is admissible without any further proof of, or the production of, the original; if it does not appear to the Court to have been revised or tampered with in a way that affects, or is likely to affect, the information. (2) The Registrar may give a person a certified copy of, or extract from, the information held by the Registrar under, or for the purposes of, this Act or the Transitional Act on payment of the fee (if any) prescribed by rules made under section 62U. (3) In any proceedings, the certified copy: (a) is prima facie evidence of information that is stated in it and that purports to be held by the Registrar under, or for the purposes of, this Act or the Transitional Act; and (b) is admissible without any further proof of, or the production of, the original. (4) This section does not limit the manner in which evidence may be adduced, or the admissibility of evidence, under the Evidence Act 1995. 62T Annual report Each annual report by the Registrar for a period must include information about the performance of the Registrar's functions and exercise of the Registrar's powers under, or for the purposes of, this Act or the Transitional Act during that period. 62U Rules (1) The Minister may, by legislative instrument, make rules prescribing matters: (a) required or permitted by this Division to be prescribed by rules made under this section; or (b) necessary or convenient to be prescribed for carrying out or giving effect to this Division. (2) To avoid doubt, rules made under this section may not do the following: (a) create an offence or civil penalty; (b) provide powers of: (i) arrest or detention; or (ii) entry, search or seizure; (c) impose a tax; (d) set an amount to be appropriated from the Consolidated Revenue Fund under an appropriation in this Act; (e) directly amend the text of this Act. Division 2—Miscellaneous Business Names Registration (Transitional and Consequential Provisions) Act 2011 6 Item 27 of Schedule 1 Before "A decision", insert "(1)". 7 At the end of item 27 of Schedule 1 Add: (2) A decision by the Registrar under a provision of the data standards or the disclosure framework is reviewable on the application of an entity whose interests are affected by the decision. Corporations Act 2001 8 Section 9 Insert: Australian business law means a law of the Commonwealth, or of a State or Territory, that is a law that regulates, or relates to the regulation of, business or persons engaged in business. Commonwealth body means: (a) an Agency (within the meaning of the Public Service Act 1999); or (b) a body, whether incorporated or not, established for a public purpose by or under a law of the Commonwealth; or (c) a person: (i) holding or performing the duties of an office established by or under a law of the Commonwealth; or (ii) holding an appointment made under a law of the Commonwealth. data standards means standards made by the Registrar under section 1270G. designated secrecy provision has the meaning given by subsection 1270M(3). disclosure framework means the disclosure framework made by the Registrar under section 1270K. government entity has the meaning given by section 41 of the A New Tax System (Australian Business Number) Act 1999. official employment means: (a) appointment or employment by the Commonwealth, or the performance of services for the Commonwealth; or (b) the exercise of powers or performance of functions under a delegation by the Registrar. protected information means information: (a) obtained by a person in the course of the person's official employment; and (b) disclosed to the person or another person, or obtained by the person or another person: (i) under, or in relation to, this Act; or (ii) under another law of the Commonwealth; in connection with particular functions or powers of the Registrar. Registrar has the meaning given by section 9C. secrecy provision has the meaning given by subsection 1270M(2). taxation law has the same meaning as in the Income Tax Assessment Act 1997. 9 At the end of Division 1 of Part 1.2 Add: 9C Meaning of Registrar A reference in this Act to the Registrar is a reference to: (a) if only one Commonwealth body is appointed as Registrar under section 1270—that body; or (b) if more than one Commonwealth body is appointed under that section: (i) if the reference relates to one or more particular functions or powers—any Commonwealth body so appointed with any of those particular functions or powers; or (ii) otherwise—any of the Commonwealth bodies appointed under that section. 10 Part 9.1 (heading) Repeal the heading, substitute: Part 9.1—Matters relating to handling records and information Division 1—The Registrar Subdivision A—Appointment etc. of the Registrar 1270 Appointment of the Registrar (1) The Minister may, by notifiable instrument, appoint a Commonwealth body to be the Registrar. (2) The Minister may, by notifiable instrument, appoint a Commonwealth body to be the Registrar in relation to one or more functions or powers of the Registrar. 1270A Functions The Registrar's functions are: (a) such functions as are conferred on the Registrar by or under this Act; and (b) such functions as are prescribed by rules made for the purposes of this paragraph under section 1270T; and (c) such functions as are incidental to the functions mentioned in paragraph (a) or (b). 1270B Powers The Registrar's powers include: (a) such powers as are conferred: (i) on the Registrar in relation to the functions mentioned in section 1270A; and (ii) by or under this Act; and (b) the power to do all things necessary or convenient to be done for or in connection with the performance of those functions. 1270C Directions by Minister (1) The Minister may, by legislative instrument, give written directions to the Registrar about the performance of its functions and the exercise of its powers. Note: Section 42 (disallowance) and Part 4 of Chapter 3 (sunsetting) of the Legislation Act 2003 do not apply to the directions (see regulations made for the purposes of paragraphs 44(2)(b) and 54(2)(b) of that Act). (2) Without limiting subsection (1), a direction under that subsection may relate to any of the following: (a) matters to be dealt with in the data standards or disclosure framework; (b) consultation processes to be followed prior to making data standards or the disclosure framework. (3) A direction under subsection (1) must be of a general nature only. (4) Subsection (3) does not prevent a direction under subsection (1) from relating to a particular matter to be dealt with in the data standards or disclosure framework. However, the direction must not direct the Registrar how to apply the data standards or disclosure framework in a particular case. (5) The Registrar must comply with a direction under subsection (1). 1270D Delegation (1) The Registrar may, in writing, delegate all or any of the Registrar's functions or powers under this Act (other than the power to make data standards or the disclosure framework) to: (a) any person to whom it may delegate any of its other functions, as a Commonwealth body, under a law of the Commonwealth; or (b) any person of a kind specified in rules made under section 1270T. Note: Sections 34AA to 34A of the Acts Interpretation Act 1901 contain provisions relating to delegations. (2) In performing a delegated function or exercising a delegated power, the delegate must comply with any written directions of the Registrar. 1270E Assisted decision making (1) The Registrar may arrange for the use, under the Registrar's control, of processes to assist decision making (such as computer applications and systems) for any purposes for which the Registrar may make decisions in the performance or exercise of the Registrar's functions or powers under this Act, other than decisions reviewing other decisions. (2) A decision the making of which is assisted by the operation of such a process under an arrangement made under subsection (1) is taken to be a decision made by the Registrar. (3) The Registrar may substitute a decision for a decision (the initial decision) the making of which is assisted by the operation of such a process under an arrangement under subsection (1) if the Registrar is satisfied that the initial decision is incorrect. 1270F Liability for damages None of the following: (a) the Minister; (b) the Registrar; (c) if the Registrar is a Commonwealth body that has members—a member of the Registrar; (d) a member of the staff of the Registrar; (e) a person who is, or is a member of or a member of the staff of, a delegate of the Registrar; (f) a person who is authorised to perform or exercise a function or power of, or on behalf of, the Registrar; (g) an APS employee, or an officer or employee of a Commonwealth body, whose services are made available to the Registrar in connection with the performance or exercise of any of the Registrar's functions or powers; is liable to an action or other proceeding for damages for or in relation to an act done, or omitted to be done, in good faith in performance or purported performance of any function, or in exercise or purported exercise of any power, conferred or expressed to be conferred by or under this Division. Subdivision B—How the Registrar is to perform and exercise functions and powers 1270G Data standards (1) The Registrar may, by legislative instrument, make data standards on matters relating to the performance of the Registrar's functions and the exercise of the Registrar's powers under this Act. (2) Without limiting subsection (1), the data standards may provide for any of the following: (a) what information may be collected for the purposes of the performance of the Registrar's functions and the exercise of the Registrar's powers under this Act; (b) how such information may be collected; (c) the manner and form in which such information is given to the Registrar; (d) when information is to be given to the Registrar; (e) how information held by the Registrar is to be authenticated, verified or validated; (f) how information held by the Registrar is to be stored; (g) correction of information held by the Registrar; (h) the manner and form of communication between the Registrar and persons who give information to the Registrar or seek to access information held by the Registrar; (i) integrating or linking information held by the Registrar. (3) Without limiting subsection (1), the data standards may provide differently in relation to different functions or powers of the Registrar. (4) If: (a) a Commonwealth body (the new Registrar) is appointed as the Registrar with particular functions or powers under this Act; and (b) immediately before that appointment, another Commonwealth body was the Registrar with those functions or powers; and (c) the new Registrar does not have data standards that would apply to those functions or powers; any data standards applying to those functions or powers immediately before that appointment continue to apply until the new Registrar makes data standards that apply to those functions or powers, or amends its existing data standards to apply to those functions or powers. 1270H Giving information to the Registrar (1) Without limiting section 1270G, the data standards may provide that information is to be given to the Registrar in electronic form, or any other specified form. (2) A requirement under this Act that information is to be provided to the Registrar in a particular form or manner (however described), including a requirement: (a) that the information is to be "lodged" or "furnished"; and (b) that the information is to be "written" or "in writing"; and (c) that a "copy" of a document containing the information is to be provided; is not taken to restrict by implication what the data standards may provide under subsection (1) in relation to that information. 1270J How the Registrar is to perform and exercise functions and powers (1) The Registrar must perform its functions and exercise its powers under this Act in accordance with: (a) the data standards; or (b) if there are no data standards that apply to particular functions or powers—any requirement relating to those functions or powers as in force immediately before those functions or powers became functions or powers of the Registrar. (2) This section does not affect the application to the Registrar of any other law of the Commonwealth. Subdivision C—Disclosure of information 1270K Disclosure framework (1) The Registrar may, by legislative instrument, make a disclosure framework relating to disclosing protected information. (2) Without limiting subsection (1), the disclosure framework may provide for any of the following: (a) circumstances in which information must not be disclosed without the consent of the person to whom it relates; (b) circumstances in which de‑identified information may be disclosed; (c) circumstances in which information may be disclosed to the general public; (d) circumstances in which confidentiality agreements are required for the disclosure of information; (e) imposing conditions on disclosure of information. (3) Without limiting subsection (1), the disclosure framework may provide differently in relation to different functions or powers of the Registrar under this Act. (4) A person commits an offence if: (a) the person is a party to a confidentiality agreement of a kind mentioned in paragraph (2)(d); and (b) the person fails to comply with the confidentiality agreement. Penalty: 100 penalty units or imprisonment for 2 years, or both. (5) The disclosure framework must not provide for disclosure of protected information unless the Registrar is satisfied that the benefits of the disclosure would outweigh the risks of the disclosure (taking into account any mitigation of those risks in accordance with the disclosure framework). (6) However, subsection (5) does not apply to the extent that the disclosure framework deals with a matter in accordance with a direction under section 1270C. (7) If: (a) a Commonwealth body (the new Registrar) is appointed as the Registrar with particular functions or powers under this Act; and (b) immediately before that appointment, another Commonwealth body was the Registrar with those functions or powers; and (c) the new Registrar does not have a disclosure framework that would apply to those functions or powers; the disclosure framework applying to those functions or powers immediately before that appointment continues to apply until the new Registrar makes a disclosure framework that applies to those functions or powers, or amends its existing disclosure framework to apply to those functions or powers. 1270L Protection of confidentiality of protected information (1) A person (the first person) commits an offence if: (a) the first person is, or has been, in official employment; and (b) the first person makes a record of information, or discloses information to another person; and (c) the information is protected information that was obtained by the first person in the course of the first person's official employment. Penalty: Imprisonment for 2 years. (2) However, subsection (1) does not apply if the recording or disclosure is authorised by subsection (3). (3) The recording or disclosure is authorised by this subsection if: (a) the recording or disclosure is for the purposes of this Division; or (b) the recording or disclosure happens in the course of the performance of the duties of the first person's official employment; or (c) in the case of a disclosure—the disclosure is to another person for use, in the course of the performance of the duties of the other person's official employment, in relation to the performance or exercise of the functions or powers of a government entity; or (d) in the case of a disclosure to another person who is an employee of a State, a Territory or an authority of a State or Territory—the disclosure: (i) is to the other person for use, in the course of the performance of the duties of that employment, in relation to the performance or exercise of the functions or powers of a government entity; and (ii) is in accordance with an agreement, about corporate regulation, between the Commonwealth, the States, the Northern Territory and the Australian Capital Territory; or (e) in the case of a disclosure—each person to whom the information relates consents to the disclosure; or (f) in the case of a disclosure—the disclosure is in accordance with the disclosure framework. Note: A defendant bears an evidential burden in relation to the matters in subsection (3): see subsection 13.3(3) of the Criminal Code. 1270M Authorisation of recording or disclosure (1) A person is not liable to any proceedings for contravening a secrecy provision in respect of a recording or disclosure authorised under subsection 1270L(3), unless the secrecy provision is a designated secrecy provision. (2) A secrecy provision is a provision that: (a) is a provision of a law of the Commonwealth (other than this Act); and (b) prohibits or regulates the use or disclosure of information. (3) A designated secrecy provision is any of the following: (a) sections 18 to 18B and 92 of the Australian Security Intelligence Organisation Act 1979; (b) section 34 of the Inspector‑General of Intelligence and Security Act 1986; (c) sections 39 to 41 of the Intelligence Services Act 2001; (d) section 8WB of the Taxation Administration Act 1953; (e) a provision of a law of the Commonwealth prescribed by rules made for the purposes of this paragraph under section 1270T; (f) a provision of a law of the Commonwealth of a kind prescribed by rules made for the purposes of this paragraph under section 1270T. 1270N Preventing disclosure of particular protected information (1) If: (a) a person applies to the Registrar for particular protected information relating to the person not to be disclosed; and (b) the Registrar is satisfied that it is not appropriate to disclose that information; a disclosure of that information is taken, for the purposes of this Act, not to be in accordance with the disclosure framework. (2) Without limiting section 1270K, the disclosure framework may provide for: (a) how applications referred to in paragraph (1)(a) are to be made; and (b) how those applications are to be decided. 1270P Authorisation for purposes of Privacy Act A disclosure of personal information (within the meaning of the Privacy Act 1988) is taken to be authorised by law for the purposes of paragraph 6.2(b) of Schedule 1 to that Act if: (a) the information is protected information; and (b) the disclosure is authorised by subsection 1270L(3) of this Act. 1270Q Disclosure to a court A person is not to be required: (a) to produce to a court any document that: (i) contains protected information; and (ii) was made or given under, or for the purposes of, this Act; and (iii) was obtained by the person in the course of the person's official employment; or (b) to disclose to a court any protected information that the person obtained in the course of the person's official employment; unless the production or disclosure is necessary for the purpose of giving effect to a taxation law or an Australian business law. Subdivision D—Miscellaneous 1270R Extracts of information to be admissible in evidence (1) In any proceedings, a document, or a copy of a document, that purports (irrespective of the form of wording used) to be an extract of information held by the Registrar under, or for the purposes of, this Act: (a) is proof, in the absence of evidence to the contrary, of information that is stated in it and that purports to be held by the Registrar; and (b) is admissible without any further proof of, or the production of, the original; if it does not appear to the Court to have been revised or tampered with in a way that affects, or is likely to affect, the information. (2) The Registrar may give a person a certified copy of, or extract from, the information held by the Registrar under, or for the purposes of, this Act on payment of the fee (if any) prescribed by rules made under section 1270T. (3) In any proceedings, the certified copy: (a) is prima facie evidence of information that is stated in it and that purports to be held by the Registrar under, or for the purposes of, this Act; and (b) is admissible without any further proof of, or the production of, the original. (4) This section does not limit the manner in which evidence may be adduced, or the admissibility of evidence, under the Evidence Act 1995. 1270S Annual report Each annual report by the Registrar for a period must include information about the performance of the Registrar's functions and exercise of the Registrar's powers under, or for the purposes of, this Act during that period. 1270T Rules (1) The Minister may, by legislative instrument, make rules under this section prescribing matters: (a) required or permitted by this Division to be prescribed by rules made under this section; or (b) necessary or convenient to be prescribed for carrying out or giving effect to this Division. (2) To avoid doubt, rules made under this section may not do the following: (a) create an offence or civil penalty; (b) provide powers of: (i) arrest or detention; or (ii) entry, search or seizure; (c) impose a tax; (d) set an amount to be appropriated from the Consolidated Revenue Fund under an appropriation in this Act; (e) directly amend the text of this Act. Division 2—Registers kept by ASIC 11 After section 1274 Insert: Division 3—Miscellaneous 12 After subsection 1317B(1) Insert: (1A) Subject to this Part, applications may also be made to the Tribunal for review of a decision made by the Registrar under the data standards or disclosure framework. 13 After paragraph 1317C(gf) Insert: (gg) a decision by the Registrar to make, amend or repeal data standards under section 1270G; or (gh) a decision by the Registrar to make, amend or repeal the disclosure framework under section 1270K; or National Consumer Credit Protection Act 2009 14 Subsection 5(1) Insert: Australian business law means a law of the Commonwealth, or of a State or Territory, that is a law that regulates, or relates to the regulation of, business or persons engaged in business. Commonwealth body means: (a) an Agency (within the meaning of the Public Service Act 1999); or (b) a body, whether incorporated or not, established for a public purpose by or under a law of the Commonwealth; or (c) a person: (i) holding or performing the duties of an office established by or under a law of the Commonwealth; or (ii) holding an appointment made under a law of the Commonwealth. data standards means standards made by the Registrar under section 212H. designated secrecy provision has the meaning given by subsection 212N(3). disclosure framework means the disclosure framework made by the Registrar under section 212L. government entity has the meaning given by section 41 of the A New Tax System (Australian Business Number) Act 1999. official employment means: (a) appointment or employment by the Commonwealth, or the performance of services for the Commonwealth; or (b) the exercise of powers or performance of functions under a delegation by the Registrar. protected information means information: (a) obtained by a person in the course of the person's official employment; and (b) disclosed to the person or another person, or obtained by the person or another person: (i) under, or in relation to, this Act; or (ii) under another law of the Commonwealth; in connection with particular functions or powers of the Registrar. Registrar has the meaning given by section 16B. secrecy provision has the meaning given by subsection 212N(2). taxation law has the same meaning as in the Income Tax Assessment Act 1997. 15 At the end of Division 4 of Part 1‑2 Add: 16B Meaning of Registrar A reference in this Act to the Registrar is a reference to: (a) if only one Commonwealth body is appointed as Registrar under section 212A—that body; or (b) if more than one Commonwealth body is appointed under that section: (i) if the reference relates to one or more particular functions or powers—any Commonwealth body so appointed with any of those particular functions or powers; or (ii) otherwise—any of the Commonwealth bodies appointed under that section. 16 Part 5‑1 (heading) Repeal the heading, substitute: Part 5‑1—Matters relating to handling records and information 17 Section 212 Repeal the section, substitute: 212 Guide to this Part This Part provides for the Registrar's role under this Act. The Minister appoints an existing Commonwealth body to be the Registrar. The Minister can give directions to the Registrar. The Registrar performs functions and exercises powers in accordance with the data standards (and other Commonwealth laws). The data standards are disallowable instruments made by the Registrar. They may deal with such matters as how information is given to the Registrar (including electronically). Information that the Registrar has can be disclosed to government agencies for the performance of their functions. Other disclosures (such as by public access to information) are dealt with by the disclosure framework, which is a disallowable instrument made by the Registrar. Certain decisions made by the Registrar are reviewable by the Administrative Appeals Tribunal. This Part also set out the Registrar's obligation to record information relating to credit activities. 18 After Division 1 of Part 5‑1 Insert: Division 1A—The Registrar Subdivision A—The Registrar 212A Appointment of the Registrar (1) The Minister may, by notifiable instrument, appoint a Commonwealth body to be the Registrar. (2) The Minister may, by notifiable instrument, appoint a Commonwealth body to be the Registrar in relation to one or more functions or powers of the Registrar. 212B Functions The Registrar's functions are: (a) such functions as are conferred on the Registrar by or under this Act; and (b) such functions as are prescribed by rules made for the purposes of this paragraph under section 212U; and (c) such functions as are incidental to the functions mentioned in paragraph (a) or (b). 212C Powers The Registrar's powers include: (a) such powers as are conferred: (i) on the Registrar in relation to the functions mentioned in section 212B; and (ii) by or under this Act; and (b) the power to do all things necessary or convenient to be done for or in connection with the performance of those functions. 212D Directions by Minister (1) The Minister may, by legislative instrument, give written directions to the Registrar about the performance of its functions and the exercise of its powers. Note: Section 42 (disallowance) and Part 4 of Chapter 3 (sunsetting) of the Legislation Act 2003 do not apply to the directions (see regulations made for the purposes of paragraphs 44(2)(b) and 54(2)(b) of that Act). (2) Without limiting subsection (1), a direction under that subsection may relate to any of the following: (a) matters to be dealt with in the data standards or disclosure framework; (b) consultation processes to be followed prior to making data standards or the disclosure framework. (3) A direction under subsection (1) must be of a general nature only. (4) Subsection (3) does not prevent a direction under subsection (1) from relating to a particular matter to be dealt with in the data standards or disclosure framework. However, the direction must not direct the Registrar how to apply the data standards or disclosure framework in a particular case. (5) The Registrar must comply with a direction under subsection (1). 212E Delegation (1) The Registrar may, in writing, delegate all or any of the Registrar's functions or powers under this Act (other than the power to make data standards or the disclosure framework) to: (a) any person to whom it may delegate any of its other functions, as a Commonwealth body, under a law of the Commonwealth; or (b) any person of a kind specified in rules made under section 212U. Note: Sections 34AA to 34A of the Acts Interpretation Act 1901 contain provisions relating to delegations. (2) In performing a delegated function or exercising a delegated power, the delegate must comply with any written directions of the Registrar. 212F Assisted decision making (1) The Registrar may arrange for the use, under the Registrar's control, of processes to assist decision making (such as computer applications and systems) for any purposes for which the Registrar may make decisions in the performance or exercise of the Registrar's functions or powers under this Act, other than decisions reviewing other decisions. (2) A decision the making of which is assisted by the operation of such a process under an arrangement made under subsection (1) is taken to be a decision made by the Registrar. (3) The Registrar may substitute a decision for a decision (the initial decision) the making of which is assisted by the operation of such a process under an arrangement under subsection (1) if the Registrar is satisfied that the initial decision is incorrect. 212G Liability for damages None of the following: (a) the Minister; (b) the Registrar; (c) if the Registrar is a Commonwealth body that has members—a member of the Registrar; (d) a member of the staff of the Registrar; (e) a person who is, or is a member of or a member of the staff of, a delegate of the Registrar; (f) a person who is authorised to perform or exercise a function or power of, or on behalf of, the Registrar; (g) an APS employee, or an officer or employee of a Commonwealth body, whose services are made available to the Registrar in connection with the performance or exercise of any of the Registrar's functions or powers; is liable to an action or other proceeding for damages for or in relation to an act done, or omitted to be done, in good faith in performance or purported performance of any function, or in exercise or purported exercise of any power, conferred or expressed to be conferred by or under this Part. Subdivision B—How the Registrar is to perform and exercise functions and powers 212H Data standards (1) The Registrar may, by legislative instrument, make data standards on matters relating to the performance of the Registrar's functions and the exercise of the Registrar's powers under this Act. (2) Without limiting subsection (1), the data standards may provide for any of the following: (a) what information may be collected for the purposes of the performance of the Registrar's functions and the exercise of the Registrar's powers under this Act; (b) how such information may be collected; (c) the manner and form in which such information is given to the Registrar; (d) when information is to be given to the Registrar; (e) how information held by the Registrar is to be authenticated, verified or validated; (f) how information held by the Registrar is to be stored; (g) correction of information held by the Registrar; (h) the manner and form of communication between the Registrar and persons who give information to the Registrar or seek to access information held by the Registrar; (i) integrating or linking information held by the Registrar. (3) Without limiting subsection (1), the data standards may provide differently in relation to different functions or powers of the Registrar. (4) If: (a) a Commonwealth body (the new Registrar) is appointed as the Registrar with particular functions or powers under this Act; and (b) immediately before that appointment, another Commonwealth body was the Registrar with those functions or powers; and (c) the new Registrar does not have data standards that would apply to those functions or powers; any data standards applying to those functions or powers immediately before that appointment continue to apply until the new Registrar makes data standards that apply to those functions or powers, or amends its existing data standards to apply to those functions or powers. 212J Giving information to the Registrar (1) Without limiting section 212H, the data standards may provide that information is to be given to the Registrar in electronic form, or any other specified form. (2) A requirement under this Act that information is to be provided to the Registrar in a particular form or manner (however described), including a requirement: (a) that the information is to be "lodged" or "furnished"; and (b) that the information is to be "written" or "in writing"; and (c) that a "copy" of a document containing the information is to be provided; is not taken to restrict by implication what the data standards may provide under subsection (1) in relation to that information. 212K How the Registrar is to perform and exercise functions and powers (1) The Registrar must perform its functions and exercise its powers under this Act in accordance with: (a) the data standards; or (b) if there are no data standards that apply to particular functions or powers—any requirement relating to those functions or powers as in force immediately before those functions or powers became functions or powers of the Registrar. (2) This section does not affect the application to the Registrar of any other law of the Commonwealth. Subdivision C—Disclosure of information 212L Disclosure framework (1) The Registrar may, by legislative instrument, make a disclosure framework relating to disclosing protected information. (2) Without limiting subsection (1), the disclosure framework may provide for any of the following: (a) circumstances in which information must not be disclosed without the consent of the person to whom it relates; (b) circumstances in which de‑identified information may be disclosed; (c) circumstances in which information may be disclosed to the general public; (d) circumstances in which confidentiality agreements are required for the disclosure of information; (e) imposing conditions on disclosure of information. (3) Without limiting subsection (1), the disclosure framework may provide differently in relation to different functions or powers of the Registrar under this Act. (4) A person commits an offence if: (a) the person is a party to a confidentiality agreement of a kind mentioned in paragraph (2)(d); and (b) the person fails to comply with the confidentiality agreement. Penalty: 100 penalty units or imprisonment for 2 years, or both. (5) The disclosure framework must not provide for disclosure of protected information unless the Registrar is satisfied that the benefits of the disclosure would outweigh the risks of the disclosure (taking into account any mitigation of those risks in accordance with the disclosure framework). (6) However, subsection (5) does not apply to the extent that the disclosure framework deals with a matter in accordance with a direction under section 212D. (7) If: (a) a Commonwealth body (the new Registrar) is appointed as the Registrar with particular functions or powers under this Act; and (b) immediately before that appointment, another Commonwealth body was the Registrar with those functions or powers; and (c) the new Registrar does not have a disclosure framework that would apply to those functions or powers; the disclosure framework applying to those functions or powers immediately before that appointment continues to apply until the new Registrar makes a disclosure framework that applies to those functions or powers, or amends its existing disclosure framework to apply to those functions or powers. 212M Protection of confidentiality of protected information (1) A person (the first person) commits an offence if: (a) the first person is, or has been, in official employment; and (b) the first person makes a record of information, or discloses information to another person; and (c) the information is protected information that was obtained by the first person in the course of the first person's official employment. Penalty: Imprisonment for 2 years. (2) However, subsection (1) does not apply if the recording or disclosure is authorised by subsection (3). (3) The recording or disclosure is authorised by this subsection if: (a) the recording or disclosure is for the purposes of this Part; or (b) the recording or disclosure happens in the course of the performance of the duties of the first person's official employment; or (c) in the case of a disclosure—the disclosure is to another person for use, in the course of the performance of the duties of the other person's official employment, in relation to the performance or exercise of the functions or powers of a government entity; or (d) in the case of a disclosure to another person who is an employee of a State, a Territory or an authority of a State or Territory—the disclosure: (i) is to the other person for use, in the course of the performance of the duties of that employment, in relation to the performance or exercise of the functions or powers of a government entity; and (ii) is in accordance with an agreement, about regulating the provision of credit, between the Commonwealth, the States, the Australian Capital Territory and the Northern Territory; or (e) in the case of a disclosure—each person to whom the information relates consents to the disclosure; or (f) in the case of a disclosure—the disclosure is in accordance with the disclosure framework. Note: A defendant bears an evidential burden in relation to the matters in subsection (3): see subsection 13.3(3) of the Criminal Code. 212N Authorisation of recording or disclosure (1) A person is not liable to any proceedings for contravening a secrecy provision in respect of a recording or disclosure authorised under subsection 212M(3), unless the secrecy provision is a designated secrecy provision. (2) A secrecy provision is a provision that: (a) is a provision of a law of the Commonwealth (other than this Act); and (b) prohibits or regulates the use or disclosure of information. (3) A designated secrecy provision is any of the following: (a) sections 18 to 18B and 92 of the Australian Security Intelligence Organisation Act 1979; (b) section 34 of the Inspector‑General of Intelligence and Security Act 1986; (c) sections 39 to 41 of the Intelligence Services Act 2001; (d) section 8WB of the Taxation Administration Act 1953; (e) a provision of a law of the Commonwealth prescribed by rules made for the purposes of this paragraph under section 212U; (f) a provision of a law of the Commonwealth of a kind prescribed by rules made for the purposes of this paragraph under section 2