Senate

Revised Explanatory Memorandum

(Circulated by authority of the Minister for Home Affairs, the Hon Karen Andrews MP)

Notes on Clauses

Preliminary

Section 1 - Short title

1. This clause provides for the short title of the Act to be the Telecommunications Legislation Amendment (International Production Orders) Act 2020 (the Act).

Section 2 - Commencement

2. Subsection 2(1) provides for the commencement of each provision in the Act, as set out in the table contained in this subclause.

3. Item 1 of the table provides that sections 1 to 3, and anything in the Act not elsewhere covered by the table, commence on the day this Act receives Royal Assent.

4. Item 2 of the table provides Parts 1 and 2 of Schedule 1 commence on the day after this Act received Royal Assent.

5. Item 3 of the table provides Part 3 of Schedule 1 commences on the later of:

a)

immediately after the commencement of the provisions covered by table item 2; and

b)

the commencement of the Federal Circuit and Family Court of Australia Act 2020.

6. However, Part 3 of Schedule 1 does not commence at all if the event mentioned at paragraph (b) does not occur.

7. Item 4 provides Part 4 of Schedule 1 commences on the day after this Act receives Royal Assent.

8. A note on the table establishes that this table relates only to the provisions of this Act as originally enacted. This table will not be amended to deal with any later amendments of this Act.

9. Subclause 2(2) clarifies that any information in column 3 of the table is not part of this Act. This subclause sets out that information may be inserted in this column, or information in it may be edited, in any published version of this Act.

Section 3 - Schedules

10. This clause provides each Act that is specified in a Schedule is amended or repealed as set out in that Schedule and that any other item in the Schedule has effect according to its terms.

Schedule 1 - Amendments

Part 1 - General Amendments

Australian Crime Commission Act 2002

Item 1 Paragraph 19A(5)(d)

11. This item adds the prohibition on use, recording, communication, or publication of protected information obtained in the provisions of item 43 of this Bill to the powers of an Examiner under the Australian Crime Commission Act 2002 to request information from agencies.

Item 2 Schedule 1

12. This item adds the prohibition on use, recording, communication, or publication of protected information obtained in the provisions of item 43 of this Bill to the meaning of prescribed provision in the Australian Crime Commission Act 2002.

Australian Security Intelligence Organisation Act 1979

Item 3 At the end of section 18

13. This item adds provisions to permit the communication of intelligence for the purpose of provisions in item 43 of the Bill.

Item 4 After subsection 94(2BB)

14. This item inserts reporting requirements into the existing annual reporting provision in the Australian Security Intelligence Organisation Act 1979. These reporting requirements relate to the Organisation's use of relevant provisions in item 43 of the Bill.

15. This item clarifies for the purpose of the reporting requirements, the meaning of terms used have the same meaning as they do in item 43 of the Bill.

Freedom of Information Act 1982

Item 5 Schedule 3

16. This item adds the prohibition on use, recording, communication, or publication of protected information obtained in provisions of item 43 of this Bill to Schedule 3 of the Freedom of Information Act 1982. This has the effect that if item 43 of this Bill prohibits the disclosure of information contained in a document, that document is an exempt document under section 38 of the Freedom of Information Act 1982.

Inspector-General of Intelligence and Security Act 1986

Item 5A After section 34

17. This item inserts section 34AA to the Inspector-General of Intelligence and Security Act 1986 (the IGIS Act) to ensure that the secrecy offence at section 34 of the IGIS Act does not prevent the IGIS or a member of the staff of the IGIS from being able to lawfully share IPO information with either an Office of the Commonwealth Ombudsman (OCO) official or an Australian Designated Authority official. This amendment refers to the IGIS and a 'member of staff' of the IGIS for consistency with the IGIS Act. This covers the same range of officials as the term IGIS official, which is defined in the TIA Act and used throughout proposed Schedule 1 to the TIA Act.

18. The definition of IPO information has been drafted to include both protected information within the meaning of schedule 1 to the TIA Act, as well as other information related to the operation of that schedule. It was intended that this would ensure IGIS is not prevented from sharing a broader range of information relating to the operation of schedule 1 to the TIA Act where that information is relevant to the functions of either the Ombudsman or the Australian Designated Authority.

19. Proposed subsection 34AA(1) allows for either the IGIS, or a member of the staff of the IGIS, to divulge or communicate protected IPO information to an OCO official if that information is relevant to the Commonwealth Ombudsman's functions and powers, and the Inspector-General is satisfied on reasonable grounds that the OCO has satisfactory arrangements in place for protecting the information. The requirement for there to be satisfactory arrangements to protect information ensures information is only shared with OCO with arrangements in place to protect information that may be highly classified due to the nature of the investigations undertaken by the Organisation.

20. Proposed subsection 34AA(2) similarly allows the IGIS, or a member of the staff of the IGIS, to share protected IPO information with an Australian Designated Authority official, where the information is relevant to the Australian Designated Authority's functions or powers under Schedule 1 to the TIA Act and the Australian Designated Authority has satisfactory arrangements in place for protecting that information. These provisions have been developed to ensure the IGIS's information sharing function is subject to the appropriate safeguards to protect against the disclosure of sensitive information.

21. Proposed subsection 34AA(3) inserts definitions into the IGIS Act for the purposes of section 34AA. Subsection 34AA(3) provides that the term Australian Designated Authority has the same meaning as in proposed Schedule 1 to the TIA Act. Ombudsman official is defined to have the same meaning as in the TIA Act. Proposed subsection 34AA(3) defines Australian Designated Authority official, to mean the Australian Designated Authority or an APS employee in the Department administered by the Attorney-General who has duties relating to the functions or powers of the Australian Designated Authority under proposed Schedule 1 to the TIA Act. This ensures that IGIS officials may share IPO information with officials in the performance or function of the Australian Designated Authority.

22. This definition has been written to capture all staff within the Attorney-General's Department who are either performing functions of the Australian Designated Authority, or are support staff assisting the performance of those functions. Only Executive Level 1 level staff or higher may be delegated the ability to perform functions of the Australian Designated Authority. However, it was intended that APS level employees will support the performance of these functions. In this way, the definition of Australian Designated Authority official ensures the IGIS can share information with relevant staff below the Executive Level 1 level where appropriate.

Intelligence Services Act 2001

Item 5B After paragraph 29(1)(be)

23. This item inserts paragraph 29(1)(bf) into the Intelligence Services Act 2001 to require the Parliamentary Joint Committee on Intelligence and Security (PJCIS) to commence a review of the operation, effectiveness, and implications of Schedule 1 to the TIA Act.

24. Subparagraphs 29(1)(bf)(i) and (ii) require this review to commence on the earlier of either the fifth anniversary of the day on which Schedule 1 to the TIA Act commences, or the third anniversary of the day on which the first designated international agreement (within the meaning of proposed Schedule 1 of the TIA Act) enters into force for Australia. This timeframe is intended to provide an opportunity for a designated international agreement to commence and have time to operate before a statutory review commences.

25. Paragraph 29(1)(bf) is intentionally silent on when this review must be completed, in order to grant the PJCIS the necessary flexibility to complete this review in an appropriate timeframe.

International Criminal Court Act 2002

Item 6 After subsection 69A(1)

26. This item inserts provisions to permit the Attorney-General to authorise the provision of material to the International Criminal Court that includes protected information obtained in accordance with an IPO issued under Part 2 or Part 3 of this Schedule. If the protected information was obtained in accordance an IPO relating to interception issued under clause 30 or 60, then it can only be provided if the Prosecutor's investigation or International Criminal Court proceeding relates to an offence punishable by a maximum term of imprisonment of 7 years or more, or life.

Item 7 Subsection 69A(2)

27. This item clarifies the conditions extend to amendments made in item 6 of the Bill.

Law Enforcement Integrity Commissioner Act 2006

Item 8 Subsection 5(1) (paragraph (c) of the definition of law enforcement secrecy provision )

28. This item adds the prohibition on use, recording, communication, or publication of protected information obtained in provisions of item 43 of the Bill to the definition of law enforcement secrecy provision.

Mutual Assistance in Criminal Matters Act 1987

Item 9 Subsection 3(1)

29. This item inserts the definition of international production order in the Mutual Assistance in Criminal Matters Act 1987.

Item 10 Subsection 3(1)

30. This item repeals the definition of protected information.

Item 11 Subsection 3(1)

31. This item inserts definitions for 'protected information' that distinguish between the existing definition of 'protected information' in particular parts of the Surveillance Devices Act 2004, and 'protected information' within the meaning of provisions in item 43 of the Bill. The definitions are broken down by protected IPO intercept information, protected IPO stored communications information, protected IPO telecommunications data information, protected SD information, and telecommunications data.

Item 12 Subsection 13A(2) (table item 1, column 1)

32. This item omits reference to protected information in Column 1 of the table and substitutes protected SD information.

Item 13 Subsection 13A(2) (at the end of the table)

33. This item amends the table to include items 4 and 5. Item 4 permits the Attorney-General to authorise the provision of protected IPO intercept information relevant to a serious offence punishable by a maximum penalty of imprisonment for 7 years or life or the death penalty. Item 5 permits the Attorney-General to authorise the provision of protected IPO stored communications information or protected IPO telecommunications data information relevant to a serious offence punishable by a maximum penalty of imprisonment for 3 years or life or the death penalty.

34. This amendment broadens the material which the Attorney-General may authorise to be provided to a requesting foreign country under the Mutual Assistance in Criminal Matters Act 1987 framework to include material obtained under provisions in item 43 of the Bill.

Ombudsman Act 1976

Item 13A After subsection 35(3)

35. This item inserts subsections 35(3A) and (3B), and 35(9) into the Ombudsman Act 1976. These subsections have been inserted to ensure that an OCO officer is not prevented from being able to lawfully share IPO information with either an IGIS or an Australian Designated Authority official. This item refers to an 'officer' of the Ombudsman for consistency with the rest of section 35 of the Ombudsman Act. This term includes all persons included in the term Ombudsman official, which is defined in the TIA Act and used throughout proposed Schedule 1 to the TIA Act. The definition of IPO information has been drafted to include both protected information within the meaning of Schedule 1 to the TIA Act, as well as other information related to the operation of that schedule.

36. Paragraphs 35(3A)(a) and (b) ensure that OCO officers may divulge or communicate IPO information to an IGIS official when that information is relevant to the functions or powers of the IGIS, and the Ombudsman is satisfied on reasonable grounds that the IGIS has satisfactory arrangements in place for protecting the information. Paragraphs 35(3B)(a) and (b) similarly permit OCO officers to share IPO information with an Australian Designated Authority official, where the information is relevant to the Australian Designated Authority's functions or powers under Schedule 1 to the TIA Act, and the Ombudsman is satisfied on reasonable grounds that the Australian Designated Authority has satisfactory arrangements in place for protecting the information.

Item 13B At the end of section 35

37. Subsection 35(9) inserts definitions into the Ombudsman Act for the purposes of new subsections 35(3A) and (3B). Subsection 35(9) provides that the term Australian Designated Authority has the same meaning as in Schedule 1 to the TIA Act, which uses the definition of IGIS official from the ASIO Act. IGIS official is defined to have the same meaning as in the TIA Act. The term IGIS official is defined in the TIA Act to include a member of the staff referred to in subsection 32(1) of the IGIS Act. Subsection 35(9) defines Australian Designated Authority official, to mean the Australian Designated Authority or an APS employee in the Department administered by the Attorney-General who has duties relating to the functions or powers of the Australian Designated Authority under Schedule 1 to the TIA Act. This ensures that OCO officers may share IPO information with officials in the Australian Designated Authority where it is relevant to the Australian Designated Authority's functions or powers.

38. This definition has been written to capture all staff within the Attorney-General's Department who are either performing functions of the Australian Designated Authority, or are support staff assisting the performance of those functions. Only Executive Level 1 level staff or higher may be delegated the ability to perform functions of the Australian Designated Authority. However, it was intended that APS level employees will support the performance of these functions. In this way, the definition of Australian Designated Authority official ensures the IGIS can share information with relevant staff below the Executive Level 1 level where appropriate.

Telecommunications (Interception and Access) Act 1979

Item 14 Title

39. This item amends the long title of the Telecommunications (Interception and Access) Act 1979 (the TIA Act) by replacing the phrase "and for related purposes" with "and for other purposes".

40. This amendment is consequential to the main amendments introduced by the Bill, which introduce a Schedule 1 to the TIA Act relating to IPOs. These amendments will form part of the TIA legislative framework, but are not specifically related to the original purpose of the TIA Act, as set out in the long title of the TIA Act.

Item 15 Subsection 5(1) (at the end of the definition of access )

41. The Bill inserts a number of definitions of terms in Schedule 1 (see item 43) which are also defined in the TIA Act as it currently stands. The purpose of this and other similar items is to highlight that certain terms in the TIA Act will have different definitions, depending on their location in either the main part of the TIA Act or in Schedule 1 (as added by the Bill).

42. This item provides the definition of access to be added by the Bill applies only in relation to Schedule 1 and not to the main part of the TIA Act, which has its own definition of that term (see subsection 5(1) of the TIA Act).

Item 19 Subsection 5(1) (definition of equipment )

43. This item provides the existing definition of equipment in the TIA Act does not apply in relation to Schedule 1, as added by the Bill. This is to ensure that the definition of equipment in this Schedule reflects the context in which IPOs are issued. Specifically, this definition intends to link itself more closely with the functions of an individual transmission service, rather than a telecommunications network.

Item 20 Subsection 5(1) (definition of intended recipient )

44. This item provides the definition of intended recipient to be added by the Bill applies only in relation to the Schedule 1, and not to the existing TIA Act, which has its own definition of that term (see subsection 5(1) of the TIA Act). The definition of intended recipient in Schedule 1 is intended to apply in relation to individual transmission services, rather than a telecommunications service. The Schedule intends to capture intended recipients that are using a transmission service, rather than limit the application of the definition to circumstances where the intended recipient is only using a telecommunications service. Circumstances that only involve the use of a telecommunications service are limited to the collection of interception material, whereas this Schedule of the Bill intends to apply the definition of intended recipient to interception material, stored communications and telecommunications data that is requested under an IPO.

Item 21 Subsection 5(1) (definition of issuing authority )

45. This item provides the definition of issuing authority to be added by Schedule 1 in item 43 of the Bill applies only in relation to the Schedule and not to any other part of the TIA Act.

Item 22 Subsection 5(1) (at the end of the definition of lawfully accessed information )

46. This item amends the definition of lawfully accessed information in subsection 5(1) of the TIA Act, to provide that it does not include information obtained in accordance with an IPO (within the meaning of Schedule 1). This is to ensure that none of the functions created under the Bill are unnecessarily affected by portions of the TIA Act that relate to stored communications information, which separates the current domestic regime from the IPO regime.

Item 23 Subsection 5(1) (definition of nominated AAT member )

47. This item provides that the definition of nominated AAT member does not apply to proposed new Schedule 1 of the TIA Act to be inserted by item 43. Item 43 includes a definition of nominated AAT member which is for the purposes of that Schedule.

Item 24 Subsection 5(1) (definition of record )

48. This item seeks to quarantine the existing definition of record so that it does not apply to provisions in item 43 of the Bill. The meaning of record in the TIA Act relates to interception within the context of the Australian telecommunications systems. Interception in item 43 of the Bill will be dealt with in isolation of the TIA Act to preserve this notion.

Item 25 Subsection 5(1) (definition of relevant statistics )

49. This item provides the existing definition of relevant statistics in the TIA Act does not apply in relation to Schedule 1, as added by the Bill. This is to enable annual reporting on the use and effectiveness of IPOs issued under Parts 2, 3, and 4 of Schedule 1, to be appropriately suited to the framework established in Schedule 1 of the Bill.

Item 26 Subsection 5(1) (definition of stored communication )

50. This item provides the existing definition of stored communication in the TIA Act does not apply in relation to Schedule 1, as added by the Bill. This serves to de-conflict the operation of the Schedule contained in the Bill from the existing functions of the TIA Act, as they relate to accessing stored communications information.

Item 27 Subsection 5(1) (definition of telecommunications network )

51. This item provides the existing definition of telecommunications network in the TIA Act does not apply in relation to Schedule 1, as added by the Bill. The definition of telecommunications network contained within the Bill is intended to be technology neutral and can apply to future iterations of technology that become capable of carrying communications by means of guided and/or unguided electromagnetic energy.

Item 28 Subsection 5(1) (definition of telephone application )

52. This item provides the existing definition of telephone application in the TIA Act does not apply in relation to Schedule 1, as added by the Bill. The definition of telephone application contained within the Bill is intended to apply in relation to IPOs, which is not covered by the TIA Act definition of telephone application.

Item 29 Section 5A

53. This item provides existing section 5A of the TIA Act, which relates to communicating etc. information obtained by interception does not apply in relation to Schedule 1 of item 43 of the Bill. Section 5A of the TIA Act relates to interception within the context of the Australian telecommunications systems. Interception in item 43 of the Bill will be dealt with in isolation of the TIA Act to preserve this notion.

Item 30 Section 5F

54. This item provides existing section 5F of the TIA Act, which relates to when a communication is passing over a telecommunications system, does not apply in relation to Schedule 1, as added by the Bill. The application of section 5F of the TIA Act relies on the definition of telecommunications system linking back to a telecommunications network, both concepts that this Bill does not rely on. As such, the key features of the types of information that can be requested are contained within each section respectively.

Item 31 Section 5G

55. This item provides existing section 5G of the TIA Act, which relates to the intended recipient of a communication, does not apply in relation to Schedule 1, as added by the Bill. The application of section 5F of the TIA Act relies on the definition of telecommunications system linking back to a telecommunications network, both concepts that this Bill does not rely on. As such, the key features of the types of information that can be requested are contained within each section respectively. The definition of intended recipient in Schedule 1 is intended to apply in relation to individual transmission services, rather than a telecommunications service. The Schedule intends to capture intended recipients that are using a transmission service, rather than limit the application of the definition to circumstances where the intended recipient is only using a telecommunications service. Circumstances that only involve the use of a telecommunications service are limited to the collection of interception material, whereas this Schedule of the Bill intends to apply the definition of intended recipient to interception material, stored communications and telecommunications data that is requested under an IPO.

Item 32 Subsection 6(1)

56. This item provides existing subsection 6(1) of the TIA Act, which relates to interception of a communication, does not apply in relation to Schedule 1, as added by the Bill. The Schedule intends to capture interception of a communication in the related section that details the requirements for an IPO for stored communications, rather than rely on a broad overarching definition that leans on the depiction of telecommunications system.

Item 33 Subsection 6D(1) (definition of eligible judge )

57. This item provides subsection 6D(1) of the TIA Act, which relates to the definition of an eligible judge, does not apply in relation to Schedule 1, as added by the Bill. Eligible judge for the purposes of proposed new Schedule 1 to the TIA Act is defined at proposed new clause 14 of Schedule 1 to the TIA Act.

Item 34 Subsection 6D(3) and (4)

58. This item provides existing subsections 6D(3) and (4) of the TIA Act, which relate to the Attorney-General declaring certain Judges to be eligible Judges for the purposes of the TIA Act, do not apply in relation to Schedule 1, as added by the Bill. Clause 14 of Schedule 1 (as added by the Bill) provides for the Attorney-General to declare certain Judges to be eligible Judges for the purposes of Schedule 1.

Item 35 After subsection 6DB(3)

59. This item inserts subsection 6DB(3A). Subsection 6DB(1) contains provisions with respect to the Attorney-General appointing, by writing, an issuing authority. Subsection 6DB(3A) provides an appointment made under subsection 6DB(1) has no effect for the purposes of Schedule 1, as added by the Bill. Instead, clause 16 of Schedule 1, as added by the Bill, provides for the Attorney-General to appoint an issuing authority for the purposes of Schedule 1.

Item 36 Subsection 6DB(4)

60. This item provides the existing subsection 6DB(4) of the TIA Act does not apply in relation to Schedule 1, as added by the Bill. Instead, clause 16(5) of Schedule 1, as added by the Bill, similarly provides an issuing authority has, in relation to the performance or exercise of a function or power conferred on an issuing authority by Schedule 1, the same protection and immunity as a Justice of the High Court has in relation to proceedings in the High Court.

Item 37 Subsection 6E(1)

61. This item is consequential to the amendment made in item 38.

Item 38 At the end of section 6E

62. This item adds subsection 6E(3). Section 6E deals with lawfully intercepted information. Subsection 6E(3) provides a reference in the Act to lawfully intercepted information does not include a reference to information obtained in accordance with an IPO (within the meaning of Schedule 1, as added by the Bill). This is to preserve the meaning of lawfully intercepted information in the TIA Act as it relates to interception within the context of the Australian telecommunications systems.

Item 39 Section 6P

63. This item amends section 6P, which deals with the identification of a service, to provide that the provisions in this section do not apply to Schedule 1, as added by the Bill.

Item 40 After paragraph 7(2)(bb)

64. This item inserts paragraph 7(2)(bc). Subsection 7(2) relates to exemptions from the general prohibition in subsection 7(1) to the interception of telecommunications. Paragraph 7(2)(bc) introduces a new exemption, being an act or thing done in compliance with an IPO (within the meaning of Schedule 1, as added by the Bill).

Item 41 After paragraph 108(2)(cb)

65. This item inserts paragraph 108(2)(cc). Subsection 108(2) relates to exemptions from the general prohibition in subsection 108(1) on access to stored communications. Paragraph 108(2)(cc) introduces a new exemption, being an act or thing done in compliance with an IPO (within the meaning of Schedule 1, as added by the Bill).

Item 42 After section 299

66. This item inserts section 299A, which relates to Schedule 1, as added by the Bill. This is a technical item, which provides Schedule 1 has effect.

Item 43 At the end of the Act

67. This item adds Schedule 1 - IPOs to the TIA Act. A note inserted by this item refers to section 299A inserted by item 42 of the Bill.

Schedule 1 - International Production Orders

Part 1 - Introduction

68. Clause 1 provides a simplified outline of Schedule 1 of the TIA Act, as inserted by the Bill. It briefly describes the framework for issuing IPOs directed to prescribed communications providers, and for enabling the exemption from Commonwealth laws restricting interception or disclosure, acts or things done in compliance with corresponding orders issued by a competent authority, in accordance with a designated international agreement.

69. Clause 2 provides the definitions for many of the terms which have a particular meaning under Schedule 1 of the TIA Act.

a.

access is defined as including access subject to a pre-condition (such as the use of a password), access by way of push technology and access by way of standing request. Push technology involves access that is not initiated by an end-user (pull technology). For example, a user could be presented with a message notification that they have not intentionally accessed and is displayed automatically and this would be considered access. This is consistent with the definition used in the Enhancing Online Safety Act 2015 and Part 15 of the Telecommunications Act 1997.

b.

account is broadly defined as including a free account, a pre-paid account and anything that may reasonably be regarded as the equivalent of an account. This is intended to ensure the definition applies to possible future circumstances where the ordinary understanding of what constitutes an account shifts and changes along with relevant technological changes. This is consistent with the definition used in the Enhancing Online Safety Act 2015.

c.

ASIO official is defined to mean the Director-General of Security; or an ASIO employee; or an ASIO affiliate. This definition is intended to ensure the Bill's record keeping requirements regarding ASIO apply to each of these kinds of individuals.

d.

Attorney-General's Department is defined to mean the Department administered by the Attorney-General.

e.

Australian Designated Authority is defined to mean the Secretary of the Attorney-General's Department.

f.

based in a foreign country has the meaning given by clause 10A.

g.

certified copy is defined to have the meaning giving by clauses 174 to 178 of this Schedule. In line with clauses 174 to 178 certified copies are to be received in evidence as a true copy of the IPO.

h.

control order IPO agency is defined to include those agencies within the definition of control order warrant agency already contained within the TIA Act.

i.

designated international agreement is defined in clause 3. Clause 3 sets out the requirements in terms of designating an international agreement for the purposes of this Schedule.

j.

eligible judge is defined to be given meaning by clause 14 of Schedule 1.

k.

eligible position-holder is defined to mean an ASIO employee, or an ASIO affiliate, who holds, or is acting in, a position in the Organisation that is equivalent to or higher than a position occupied by an Executive Level 2 APS employee. The inclusion of 'affiliates' will ensure that personnel seconded to ASIO to perform duties are able to be authorised by the Director-General of Security to make applications for IPOs relating to telecommunications data on ASIO's behalf where appropriate (e.g. an AFP officer seconded to lead an investigative team).

l.

general electronic content service is defined to have the meaning given by clause 8 of Schedule 1.

m.

general electronic content service provider is defined to mean a person who provides a general electronic content service to the public or a section of the public. This captures any provider who provides a service that allows end-users to access material using a transmission service, or delivers material to persons having equipment appropriate for receiving that material. An example of this includes a service that permits the public to post content either available to the broader public or a section of the public. This would capture circumstances where a person provides a website that contains private or public forums that may facilitate the sharing of information or content.

n.

individual transmission service means a transmission service to the extent to which the service is supplied using a particular telecommunications identifier.

o.

individual message/call application service is defined as a message/call application service to the extent to which the service is provided using a particular telecommunications identifier. This definition is used to ensure that for an IPO in respect of individual message/call application services, the individual message/call application service must be identifiable. For example, an over-the-top messaging application that allows for a person to communicate with other persons identifiable by a unique telecommunications identifier (unique account identifier, or mobile device identifier attached to that message application installed on the mobile device).

p.

intended recipient is defined to have the meaning given by clause 11 of Schedule 1.

q.

intercept is defined to mean record or live stream to a single destination. The inclusion of live streaming recognises that unlike traditional telecommunication interception warrants, the person required to comply with an IPO may operate differently, and may not involve agency officers listening to the communication as it passes their telecommunications network. However, the person required to comply with an IPO may be required to live stream the communication to a single destination to facilitate the agency officer to listen to that communication.

r.

International Production Order is defined to mean an IPO issued under this Schedule.

s.

issuing authority is defined to mean a person in respect of whom an appointment is in force under clause 16 of Schedule 1.

t.

manager is defined to mean the chief executive officer (however described) of the provider; or any other individual who is involved in the management of the provider. This is intended to be flexible depending on the prescribed communications provider to ensure that the authorisation of evidentiary certificates is not an onerous process but has sufficient seniority to authorise evidentiary certificates for that particular prescribed communications provider.

u.

material is defined broadly to capture current and future forms of electronic information.

v.

member of staff of the Attorney-General's Department is defined to mean either the Secretary of the Attorney-General's Department, or an Australian Public Service employee in that Department.

w.

message is defined broadly to capture current and future forms of a message.

x.

message application service is defined to have the meaning given by clause 4 of Schedule 1.

y.

message/call application service is defined broadly to include message, voice call and video call application services.

z.

message/call application service provider is defined as a person who provides a message/call application service to the public or a section of the public. This term encompasses application services that enable end-users to send or receive communications to or from one another using a transmission service.

aa.

network entity means a person who owns or operates a telecommunications network that is used to supply a transmission service to the public or a section of the public.

bb.

nominated AAT member is defined to mean a member of the AAT in respect of whom a nomination is in force under clause 15 of Schedule 1 to issue IPOs under Division 2 of Part 2, and Division 2 of Part 3, of this Schedule.

cc.

nominated AAT Security Division member is defined to mean a member of the AAT in respect of whom a nomination is in force under clause 17 of Schedule 1 to issue IPOs under Part 3 of this Schedule.

dd.

operates in a foreign country has the meaning given by clause 10A.

ee.

posted on a general electronic content service is defined to have the meaning given by clause 9 of Schedule 1.

ff.

prescribed communications provider is defined to mean a network entity; or a transmission service provider; or a message/call application service provider; or a storage/back up service provider; or a general electronic content service provider. The definition of prescribed communications provider is distinct from similar definitions within the Telecommunications Act 1997, such as references to 'designated communications provider' under section 317C of that Act.

gg.

protected information is defined to include information obtained in accordance with an IPO and other information related to an IPO that requires protection from unauthorised use and disclosure.

hh.

relevant agency is defined to mean an interception agency; or a criminal law enforcement agency; or an enforcement agency; or a control order IPO agency.

ii.

relevant statistics is exhaustively defined, in relation to applications of a particular kind, to include how many applications were made, withdrawn, refused, and how many IPOs were issued in response to applications of that kind. This definition is intended to reflect the relevant statistic definition contained under section 5 of the TIA Act.

jj.

senior position-holder is defined to have the same meaning as in the Australian Security Intelligence Organisation Act 1979, in order to ensure consistency. Senior position-holder is defined in the ASIO Act to mean an ASIO employee, or an ASIO affiliate, who holds, or is acting in, a position in ASIO that is equivalent to or higher than a position occupied by an SES employee; or known as Coordinator. The inclusion of 'affiliates' in the definition of senior position-holder will ensure that personnel seconded to ASIO to perform duties are able to be authorised by the Director-General of Security to make applications for IPOs relating to interception and stored communications on ASIO's behalf where appropriate (e.g. an AFP officer seconded to lead an investigative team).

kk.

serious category 1 offence is defined to mean an offence that is punishable by a maximum term of imprisonment of 3 years or more or for life. This reflects the minimum threshold for offences that can be the subject of a stored communications warrant.

ll.

serious category 2 offence is defined to mean a serious offence or an offence that is punishable by a maximum term of imprisonment of 7 years or more or for life, or a serious offence at section 5D of the TIA Act. This reflects the minimum threshold for offences that can be the subject of a telecommunications interception warrant.

mm.

service is defined to include a website and does not apply to the definition of transmission service.

nn.

statutory requirements certificate is defined to have the meaning given by subclause 3B(2).

oo.

storage/back-up service is defined to have the meaning given by clause 7.

pp.

storage/back-up service provider is defined to mean a person who provides a storage/back-up service to the public or a section of the public. An example of this would be a cloud-storage solutions provider who provides the ability for the public to remotely store material for storage or back up purposes.

qq.

stored communications has a meaning similar to stored communications as defined in subsection 5(1) of the TIA Act, but is broadened to include material that is uploaded for storage/back-up or posted. The definitions in subparagraph (ii) of paragraphs (a) and (b) has been included to clearly distinguish stored communications from interception.

rr.

telecommunications data includes information or documents that are not the content of a communication or material. For example, telecommunications data generally falls into two categories: information that allows a communication to occur (such as the time and date of a communication, or the duration of the communication), and information about the parties to the communication (such as the name of the customer, billing information, contact details, and account information). It may also go to identifying a service. This reflects the types of information that can be authorised to be disclosed under Chapter 4 of the TIA Act.

ss.

telecommunication identifier refers to information that can be used to identify a relevant service.

tt.

telecommunications network is defined to mean a system, or series of systems, that carries, or is capable of carrying, communications by means of guided and/or unguided electromagnetic energy. This is similar to the definition of telecommunication network in subsection 5(1) of the TIA Act but does not exclude systems for carrying communications solely by means of radiocommunication.

uu.

telephone application is defined to mean an application made by telephone for an IPO.

vv.

telephone number is defined to include a mobile telephone number.

ww.

transmission service means a service for carrying communications by means of guided and/or unguided electromagnetic energy.

xx.

transmission service provider means a person who supplies a transmission service to the public or a section of the public. The definition of transmission service provider does not require a nexus to Australia.

yy.

uploaded is defined to have a meaning affected by clause 10.

zz.

urgent circumstances is defined to have a meaning affected by clause 17A.

aaa.

use is defined to have a meaning affected by clause 12.

bbb.

video call is defined to have a meaning that includes a video call that has an audio component.

ccc.

video call application service is defined to have a meaning given by clause 6.

ddd.

voice call is defined to include a call that involves a recorded or synthetic voice.

eee.

voice call applications service is defined to have a meaning given by clause 5.

Designated international agreement

70. Clause 3 provides the definition for a designated international agreement.

71. Subclause 3(1) sets out the conditions for a bilateral agreement to be a designated international agreement for the purposes of Schedule 1 to the TIA Act. For an agreement to be a designated international agreement, the provisions require the agreement to be a treaty between Australia and a foreign country, the full English text of the agreement, and not just the name of the agreement, to have been published in the regulations, and the agreement to have entered into force for both Australia and the foreign country.

72. If Australia and the foreign country subsequently make an amendment to the text of a designated international agreement, the text of the amendment must also be set out in the regulations and the amendment must have entered into force for both Australia and the foreign country before the agreement, as affected by the amendments, is treated as a designated international agreement for the purposes of Schedule 1 to the TIA Act.

73. This ensures that the regulations provide certainty and transparency for Parliament and the public about the content of designated international agreements and any subsequent amendments to the text of designated international agreements. Any regulations made under subclause 3(1) will be legislative instruments and subject to parliamentary scrutiny and disallowance.

74. Subclause 3(1) contains a note that clarifies that an agreement mentioned in paragraph (a) is a treaty to which Australia is party. Proposed treaty actions, such as amendments and extensions to the duration of designated international agreements, are subject to Australia's treaty-making process. In accordance with these treaty process, the text of each agreement and amendment will be subject to parliamentary scrutiny, including consideration by the Joint Standing Committee on Treaties (JSCOT), and published on the Australian Treaties Library on the AustLII website ( www.austlii.edu.au ).

75. Subclause 3(1A) provides that, if a bilateral agreement deals with the issuing of orders (such as production orders, subpoenas or warrants) by a competent authority of the foreign country, then the text of the agreement cannot be set out in the regulations unless a statutory requirements certificate has been issued by the Attorney-General in relation to the agreement and the foreign country party to the agreement. This ensures that, where the agreement would permit authorities of a foreign country to issue orders to Australian entities, then the Attorney-General must consider the statutory requirements in clause 3B and be satisfied that those requirements are met before the agreement can be set out in the regulations pursuant to paragraph 3(1)(b) and be treated as a designated international agreement for the purposes of Schedule 1 to the TIA Act.

76. Subclause 3(2) places a further restriction on when a bilateral agreement that deals with the issuing of orders by a foreign country may be set out in the regulations pursuant to paragraph 3(1)(b). If the law of the foreign country contains offences that are punishable by death, then the text of the agreement cannot be set out in the regulations unless the Minister has received a written assurance from the government of the foreign country relating to the use or non-use of Australian-sourced information obtained by virtue of the agreement in any proceeding by way of a prosecution for a death penalty offence in the foreign country. Subclause 3(2) clarifies that information is treated to be obtained by virtue of the agreement if it is obtained pursuant to an order issued by a competent authority of the foreign country pursuant to the agreement.

77. Subclause 3(2) is designed to be flexible as to the form, content and nature of the written assurance to be received, as this will depend on the particular foreign country and the particular agreement. This written assurance may be contained in a single written document, or across a number of documents, such as the text of the agreement, a letter or exchange of letters, or a record of understanding or memorandum of understanding. The written assurance may deal with how Australian-sourced information may be used by the foreign country in proceedings in connection with prosecutions for death penalty offences, including for exculpatory purposes, and subject to any restrictions or conditions required by Australia, or it may deal with how Australian-sourced information is not to be used in prosecutions for death penalty offences, or a combination of both.

78. The intention of subclause 3(2) is to give effect to Australia's long-standing bipartisan opposition to the death penalty in the context of reciprocal cross-border access to communications data, and complements existing death penalty safeguards across the full spectrum of Australia's international crime cooperation frameworks. The use of assurances to protect Australia's death penalty interests is a longstanding practice in international crime cooperation frameworks, including mutual legal assistance regimes. The provision expressly prohibits an agreement from being set out in the regulations and being treated as a designated international agreement for the purposes of Schedule 1 to the TIA Act, except in circumstances where the Minister has received a written assurance from the government of a foreign country that has laws including death penalty offences.

79. A further safeguard is provided in clause 3B, which provides that the Attorney-General must be satisfied that the Minister has received a written assurance from the government of the foreign country before issuing a statutory requirements certificate in relation to the agreement and foreign country.

80. Subclause 3(3) sets out the conditions for a multilateral agreement to be a designated international agreement. For a multilateral agreement to be a designated international agreement, the provisions require the agreement to be a treaty entered into between Australia and two or more foreign countries, the full English text of the agreement, and not just the name of the agreement, to be published in the regulations, and the agreement to have entered into force for Australia. The text of each agreement will also be tabled in Parliament and published on the Australian Treaties Library on the AustLII website ( www.austlii.edu.au ).

81. Subclause 3(3) also provides that, if Australia and the foreign country parties to the agreement subsequently make an amendment to the text of a designated international agreement, the text of the amendment must also be set out in the regulations and the amendment must have entered into force for Australia before the agreement, as affected by the amendments will be treated as a designated international agreement for the purposes of Schedule 1 to the TIA Act.

82. This ensures that the regulations provide certainty and transparency to Parliament and the public about the content of agreements and amendments to agreements. Any regulations made under new subclause 3(3) will be legislative instruments and subject to parliamentary scrutiny and disallowance.

83. Subclause 3(3) contains a note that clarifies that an agreement mentioned in paragraph (a) is a treaty to which Australia is party. Proposed treaty actions, such as amendments and extensions to the duration of designated international agreements, are subject to Australia's treaty-making process. In accordance with this process, the text of each agreement and amendment will be subject to parliamentary scrutiny, including consideration by JSCOT, and published on the Australian Treaties Library on the AustLII website ( www.austlii.edu.au ).

84. Subclause 3(4) provides, for a multilateral agreement, the regulations may declare that one or more of the party foreign countries are recognised parties to the agreement for the purposes of this Schedule.

85. Subclause 3(4A) provides that, if a multilateral agreement deals with the issuing of orders by a competent authority of each of the foreign country parties, then a foreign country party to the agreement cannot be declared a recognised party under subclause 3(4) unless a statutory requirements certificate has been issued by the Attorney-General in relation to the agreement and that foreign country party to the agreement. This ensures that where a multilateral agreement would permit the authorities of a foreign country to issue orders to Australian entities, then the Attorney-General must consider the statutory requirements in clause 3B and be satisfied that those requirements are met in relation to the agreement and the foreign country parties to that agreement before those countries can be declared as recognised parties to the agreement.

86. Subclause 3(4A) is intended to provide flexibility so that the Attorney-General may issue a statutory requirements certificate that relates to a multilateral agreement and all foreign country parties to that agreement or, alternatively, if the Attorney-General is only satisfied the statutory requirements in clause 3B are met in relation to particular foreign country parties to that agreement, may issue a certificate only in relation to those particular foreign countries. The Attorney-General may decide to issue further statutory certificates in relation to additional foreign country parties to a multilateral agreement if subsequently satisfied of the statutory requirements in relation to additional foreign country parties.

87. Subclause 3(5) places a further restriction on when a foreign country party to a multilateral agreement that deals with the issuing of orders by a competent authority of each of the foreign country may be declared as a recognised party pursuant to subclause 3(4). If the law of one or more of those foreign countries contains offences that are punishable by death, then those foreign countries cannot be declared as a recognised party under subclause 3(4) unless the Minister has received a written assurance from the government of the foreign country relating to the use or non-use of Australian-sourced information obtained by virtue of the agreement in connection with any proceeding by way of prosecution for a death penalty offence in the foreign country. Subclause 3(5) clarifies that information is obtained by virtue of the agreement if it is obtained pursuant to an order issued by the competent authority of the foreign country pursuant to the agreement.

88. This written assurance may be contained in a single written document, or across a number of documents, such as the text of the agreement, a letter or exchange of letters, or a record of understanding or memorandum of understanding. The written assurance may deal with how Australian-sourced information may be used by the foreign country in proceedings in connection with prosecutions for death penalty offences, including for exculpatory purposes, and subject to any restrictions or conditions required by Australia, or it may deal with how Australian-sourced information is not to be used in prosecutions for death penalty offences, or a combination of both. New subclause 3(5) is designed to be flexible as to the form, content and nature of the written assurance to be received as this will depend on the particular foreign country and the particular agreement.

89. The policy intention of this provision is to give effect to Australia's long-standing bipartisan opposition to the death penalty in the context of reciprocal cross-border access to communications data, and complements existing death penalty safeguards across the full spectrum of Australia's international crime cooperation frameworks. The use of assurances to protect Australia's death penalty interests in a longstanding practice in international crime cooperation frameworks, including mutual legal assistance regimes. from the provision expressly prohibits a foreign country that has laws including death penalty offences from being declared as a recognised party under subclause 3(4) for the purpose of Schedule 1 to the TIA Act except in circumstances where the Minister has received, from the government of that foreign country, a written assurance relating to the use or non-use of Australian-sourced information in proceedings by way of a prosecution for a death penalty offence.

90. A further safeguard is provided in clause 3B, which provides that the Attorney-General must be satisfied that the Minister has received a written assurance from the government of the foreign country before issuing a statutory requirements certificate in relation to that foreign country.

91. Subclause 3(6) provides the Schedule will not have effect in relation to foreign countries that are not declared as recognised parties to the relevant multilateral designated international agreement. This is intended to permit the Schedule to apply to parties to multilateral agreements that do not have offences punishable by death, or that provide the Minister with a written assurance in line with subclause 3(5). In regulations, the Minister may declare or remove foreign countries as recognised parties to the agreement, including in the event that a country party introduces or abolishes the death penalty, provides an assurance at a later time, or a new country with the death penalty becomes a party to the agreement.

92. Subclause 3(7) provides the Minister must announce, by notifiable instrument, the day an agreement under this clause enters into force for Australia.

93. Subclause 3(7A) defines death penalty offence to mean an offence against a law of a foreign country that is punishable by death.

94. Subclause 3(8) identifies when information obtained in accordance with an order is Australian-sourced information. This definition is intended to capture a range of circumstances in which the information might reasonably be considered to have been sourced from Australia pursuant to an order, warrant, authorisation or other request. These circumstances are where the order requires something to be done in Australia, or if the order is directed to an individual in Australia, or a body corporate that is incorporated in Australia, or a body established by or under a Commonwealth, state or territory law.

95. The text of each designated international agreement will be able to be viewed in the Australian Treaties Library on the AustLII website: www.austlii.edu.au .

Disallowance of regulations relating to designated international agreements

96. Regulations made for the purposes of clause 3 will be legislative instruments and subject to parliamentary scrutiny and disallowance. Clause 3A sets out the process for disallowance of regulations made for the purpose of clause 3.

97. Subclause 3A(1) provides that clause 3A applies to regulations made for the purpose of clause 3, which includes regulations setting out the text of an agreement, or the text of an amendment to an agreement, or declaring a foreign country to be a recognised party.

98. Subclause 3A(2) provides that either House of Parliament may, following a motion upon notice, pass a resolution disallowing the regulations. The notice must have been given in a House of Parliament within 15 sitting days of that House after a copy of the regulations was tabled and the resolution must be passed within 15 sitting days of that House after the notice is given. This makes clear that regulations setting out the text of an agreement or the text of an amendment to a designated international agreement will be subject to parliamentary disallowance.

99. Subclause 3A(3) sets out when regulations made for the purposes of clause 3 take effect. The regulations will take effect on the day immediately after the last day upon which a disallowance resolution could have been passed. This makes clear that regulations made for the purposes of clause 3 cannot commence until after the applicable parliamentary disallowance period has expired.

100. Subclause 3A(4) provides for circumstances where the regulations will be deemed to have been disallowed. Subclause 3A(4) closely reproduces subsection 42(2) of the Legislation Act 2003. Subclause 3A(4) provides that, the regulations will be taken to have been disallowed if a notice of motion to disallow regulations has been given with 15 sitting days of the relevant House after a copy of the regulations was tabled, and the motion has not been considered, withdrawn or otherwise disposed of within 15 sitting days after the giving of the notice. In these circumstances, subclause 3A(3) does not apply, meaning the regulations would not take effect.

101. Subclause 3A(5) makes clear that section 42 (disallowance) of the Legislation Act 2003 does not apply to the regulations. Two notes are included to explain that the 15 sitting day notice period mentioned in paragraph 3A(2)(a), and the 15 sitting day disallowance period mentioned in paragraph 3A(2)(b), are consistent with paragraphs 42(1)(a) and (b) respectively of the Legislation Act 2003.

Statutory requirements certificate-designated international agreements

102. Clause 3B creates a framework for the Attorney-General to issue statutory requirements certificates in relation to agreements and foreign country parties to agreements. The purpose of the statutory requirements certificate is to provide assurance to Parliament and the public that the Attorney-General has considered the statutory requirements in relation to an agreement, and is satisfied those requirements are met, prior to an agreement being set out the regulations for the purposes of paragraph 3(1)(b) or a foreign country being declared as a recognised party pursuant to subclause 3(4).

Scope

103. Subclause 3B(1) clarifies that clause 3B only applies, and therefore a statutory requirements certificate may only be issued, if an agreement deals with the issue of orders by a competent authority of a foreign country. This is consistent with subclauses 3(1A) and 3(4A), which only require a statutory requirements certificate to be in force prior to setting out the text of an agreement in the regulations if that agreement deals with the issuing of orders by a competent authority of a foreign country (for bilateral agreements), or each of the foreign countries (for multilateral agreements).

Certificate

104. Subclause 3B(2) provides that the Attorney-General may issue a statutory requirements certificate in relation to an agreement and a foreign country party to an agreement. The Attorney-General must consult with both the Minister administering the TIA Act (the Minister for Home Affairs) and the Minister for Foreign Affairs prior to issuing a statutory requirements certificate. This consultation requirement is intended to ensure the Attorney-General can be appropriately informed of relevant matters related to proposed Schedule 1 to the TIA Act, and foreign policy and treaties. This does not prevent the Attorney-General from also consulting any additional persons or entities that the Attorney-General considers appropriate.

105. Subclause 3B(3) provides that a statutory requirements certificate is a notifiable instrument. This ensures there will be public notification that the Attorney-General has considered the statutory requirements in relation to an agreement and a foreign country, and is satisfied that those requirements are met. A statutory requirements certificate must be in force in relation to an agreement and a foreign country before the text of a bilateral agreement can be set out in regulations for the purposes of paragraph 3(1)(b) and before a foreign country can be declared to be a recognised party for the purposes of subclause 3(4).

106. Notifiable instruments are not legislative in nature, meaning that they are published but are not subject to parliamentary scrutiny or sunsetting. This is appropriate because a statutory requirements certificate sets out a decision of an administrative nature that is in the long-term public interest. Publication of certificates on the Federal Register of Legislation will notify the public that a certificate has been issued, and that subclause 3(1A) or (4A) has been met, in relation to an agreement

107. Subclause 3B(4) sets out the statutory requirements that the Attorney-General must be satisfied of before issuing a statutory requirements certificate in relation to an agreement and one or more foreign country parties to the agreement. While the Attorney-General must be satisfied of these requirements prior to issuing a certificate, clause 3B does not prevent the Attorney-General from considering any additional matters that the Attorney-General may consider appropriate.

108. Paragraph 3B(4)(c) provides the Attorney-General must be satisfied that the agreement is appropriate in the circumstances, having regard only to the foreign country's respect for the rule of law, as well as the foreign country's respect for its own international human rights law obligations. This reflects Australia's expectations that designated international agreements will only permit a foreign country to issue orders to Australian entities if the Attorney-General, in consultation with other Ministers, has considered the foreign country's respect for the rule of law and for its international human rights obligations.

109. This provision provides flexibility as to the matters that are considered relevant to determining that the agreement is appropriate in the circumstances, as this will depend on the nature and scope of orders the agreement permits the foreign country to issue to Australian entities, and the circumstances of the particular foreign country. A relevant consideration for respect for the rule of law could be a constitutional structure or system of laws that establishes checks and balances, including on the exercise of executive power by government authorities. This provision also allows for regard of principles such as equality and non-discrimination under the law and before the law. Relevant considerations related to a country's respect for its international human rights law obligations could include the international human rights treaties that a country has ratified, and the country's domestic implementation of its international human rights obligations relevant to the issuing of orders such as protections against arbitrary and unlawful interference with privacy, and protections for freedom of expression and associate and the right to life.

110. Paragraph 3B(4)(d) provides that the Attorney-General must be satisfied that an agreement reflects certain minimum requirements and standards in relation to the issue of orders (such as production orders, warrants or subpoenas) by the foreign country to Australian entities. These requirements must be satisfied in relation to orders (as defined or described in the agreement) that may be issued by a competent authority of the foreign country to Australian entities.

111. Subparagraph 3B(4)(d)(i) requires the agreement to provide that orders from the foreign country are to be issued in compliance with the foreign country's domestic law. This reflects Australia's expectation that the domestic law of the foreign country will provide the legal basis for the issuing of orders by the foreign country, and not the agreement. There is no requirement in proposed Schedule 1 to the TIA Act that an Australian entity comply with an order from a foreign country.

112. Subparagraph 3B(4)(d)(ii) requires the agreement to provide that orders may only be issued by the foreign country for the purposes of obtaining information relevant to the prevention, detection, investigation or prosecution of serious crime (as defined in the agreement). This reflects Australia's expectation that orders will be issued for law enforcement and national security purposes in order to address serious crime. This provision provides flexibility for the scope and meaning of 'serious crime' and the particular activities to be permitted by the agreement to be negotiated with the relevant foreign country or countries in relation to each individual agreement.

113. Subparagraph 3B(4)(d)(iii) requires the agreement to provide that the foreign country is not permitted to issue orders for the purposes of investigating, prosecuting or punishing a person on account of their political opinions. This reflects Australia's expectation that foreign countries will not be permitted by agreements to issue orders to Australian entities for the purposes of intimidating, persecuting or penalising a person because the person holds, or has expressed, a particular political opinion. This provision is not intended to limit or prevent a foreign country from pursuing legitimate investigations into serious criminal offences that may have a political component such as terrorism, violent extremism, foreign interference or espionage offences.

114. Subparagraph 3B(4)(d)(iv) requires the agreement, so far as it relates to orders issued by a foreign country, is appropriate in the circumstances, specifically having regard to the matters set out in subclause 3B(5) relating to the issuing of orders. This reflects Australia's expectation that either the text of the agreement, or the domestic legal framework of the foreign country, or both, will set out these requirements and standards in relation to orders to be issued by the foreign country to Australian entities.

115. Subparagraph 3B(4)(d)(v) provides that the agreement must not permit the foreign country to issue orders to an Australian entity for the particular purpose of obtaining information about the communications of a person who is an Australian citizen or a permanent resident of Australia. This reflects Australia's expectation that, where the authorities of a foreign country have identified a legitimate requirement to seek access to the communications of Australian citizens and permanent residents for the purposes of combatting serious crime, they will use government-to-government mechanisms to request that information rather than issuing orders directly to Australian private entities.

116. Subparagraph 3B(4)(d)(vi) requires the agreement to include limitations and safeguards relating to the use, handling and disclosure of information that the foreign country has obtained from an Australian entity pursuant to an order. This reflects the expectation that sufficient or appropriate limitations and safeguards will be negotiated with the foreign country and included in the agreement.

117. Subparagraph 3B(4)(d)(vii) requires that the agreement must not permit the foreign country to issue orders to Australian entities on behalf of, or at the request of, another country (including Australia). This reflects Australia's expectation that the foreign country should issue orders for the purposes of their law enforcement or national security investigations conducted by authorities of that foreign country. It also reflects the expectation that Australian authorities not be permitted to circumvent Australian legislative requirements for accessing information by requesting a foreign government to obtain information from an Australian entity on behalf of Australian authorities, and that the foreign government cannot obtain information on behalf of a third-party country that is not permitted to directly issue orders to Australian entities.

118. Subparagraph 3B(4)(viii) complements the requirement in subparagraph 3B(4)(d)(vii) by requiring that the agreement must not require or create an obligation on the foreign country to share information it has obtained pursuant to an order it has issued to an Australian entity with a third-party government. This provision is not intended to prevent authorities in the foreign country from voluntarily sharing information with Australian authorities, for example, if those authorities have identified the information may be relevant to addressing crime in Australia.

119. Paragraph 3B(4)(e) applies if one or more of offences against the law of the foreign country are death penalty offences, as defined in new clause 7A. In those circumstances the Attorney-General must be satisfied that the Minister has received a written assurance from the government of the foreign country in accordance with subclause 3(2) or (5).

120. Subclause 3B(5) sets out the matters the Attorney-General must consider in reaching a state of satisfaction that the agreement, so far as it relates to orders issued by the foreign country, is appropriate in the circumstances for the purposes of subparagraph 3B(4)(d)(iv). Subclause 3B(5) provides that the matters to be considered are the criteria for issuing of orders, the limitations on the scope and objects of orders, and limits on the periods for which orders are in force, as set out in the agreement or the law of the foreign country. This reflects Australia's expectation that the foreign country's orders will be tailored in scope and not permit indiscriminate collection of information. The provision provides flexibility for these criteria and limitations to be set out in either the agreement, or the domestic law of the foreign country, or both, in order for the requirement to be met.

121. The decision to issue a statutory requirements certificate will be made personally by the Attorney-General, and involves consideration of major political issues and matters that have significant capacity to affect Australia's relationships with other countries. Policy decisions of a high political content were identified by the Administrative Review Council in its publication 'What decisions should be subject to merits review?' as being unsuitable for merits review.

Copy of certificate to be given to the Chair of the Joint Standing Committee on Treaties

122. Subclause 3B(6) provides that if the Attorney-General issues a statutory requirements certificate, the Attorney-General must, as soon as practicable after the certificate is issued, give a copy of the certificate to the Chair of JSCOT. This ensures the Chair of JSCOT is notified, given the important role of JSCOT in reviewing and scrutinising agreements under Australia's domestic treaty-making processes, before an agreement will be set out in the regulations for the purposes of paragraph 3(1)(b) or (3)(3)(b).

Australia's treaty making process

123. Clause 3C clarifies that nothing in Schedule 1 to the TIA Act is intended to modify or limit the application of Australia's treaty-making process in relation to a designated international agreement, including any proposed amendments to, or extensions to the duration of, a designated international agreement. This reflects that, as designated international agreements are treaties to which Australia is a party, all designated international agreements, and actions such as amendments to and extensions of such agreements, will be subject to the Australian treaty process. In accordance with the treaty process, the text of each agreement and amendment will be subject to parliamentary scrutiny, including consideration by JSCOT, and published on the Australian Treaties Library on the AustLII website (www.austlii.edu.au).

124. This ensures that amendments and extensions to designated international agreements will be subject to the same requirements as other proposed treaty actions.

Message application service

125. Clause 4 provides the definition for a message application service. Subclause 4(1) provides a message application service means any service that enables end users to send or receive messages to or from other end-users using a transmission service. Current examples of a message application service including the services offered by Kik Messenger and WhatsApp, which are instant mobile messaging applications that are used to send messages to other users of those services.

126. Subclause 4(2) clarifies that it is immaterial whether the service also enables end users to send or receive messages to or from persons other than end-users who use the transmission service.

127. Subclause 4(3) clarifies that a transmission service provider is not a message/call application service provider merely because they supply a transmission service that enables messages to be sent or received.

128. Subclause 4(4) excludes persons who provide billing services, or a fee collection service, in relation to a message application service, who do not provide the message application service itself.

Voice call application service

129. Clause 5 provides the definition for a voice call application service. Subclause 5(1) provides a voice call application service means any service that enables end users to make or receive voice calls to or from other end-users using a transmission service. A voice call application service is exemplified by those services currently offered by Viber or Discord.

130. Subclause 5(2) clarifies that it is immaterial whether the service also enables end users to make or receive voice calls to or from persons other than end-users who use the transmission service.

131. Subclause 5(3) clarifies that a transmission service provider is not a message/call application service provider merely because they supply a transmission service that enables voice calls to be made or received.

132. Subclause 5(4) excludes persons who provide billing services, or a fee collection service, in relation to a voice call application service, who do not provide the voice call application service itself.

Video call application service

133. Clause 6 provides the definition for a video call application service. Subclause 6(1) provides a video call application service means any service that enables end users to make or receive video calls to or from other end-users using a transmission service. A video call application service is exemplified by those services currently offered by Skype or Facebook Messenger.

134. Subclause 6(2) clarifies that it is immaterial whether the service also enables end users to make or receive video calls to or from persons other than end-users who use the transmission service.

135. Subclause 6(3) clarifies that a transmission service provider is not a message/call application service provider merely because they supply a transmission service that enables video calls to be made or received.

136. Subclause 6(4) excludes persons who provide billing services, or a fee collection service, in relation to a video call application service, who do not provide the video call application service itself.

Storage/back-up service

137. Clause 7 provides the definition for a storage/back-up service. Subclause 7(1) provides a storage/back-up service means any service that enables end users to store or back-up material, where the uploading of the material for storage or back-up is by means of a transmission service. A storage/back-up service is exemplified by those services currently offered by Dropbox.

138. Subclause 7(2) clarifies that a transmission service provider is not a storage/back-up service provider merely because they supply a transmission service that enables material to be uploaded for storage or back-up.

139. Subclause 7(3) excludes persons who provide billing services, or a fee collection service, in relation to a storage/back-up service, who do not provide the storage/back up service itself.

General electronic content service

140. Clause 8 provides the definition for a general electronic content service. Subclause 8(1) provides a general electronic content service means any service that allows end users to access material using a transmission service or a service that delivers material to persons having equipment appropriate for receiving that material, where the delivery of the service is by means of a transmission service. For example, where a person provides a service that contains private or public forums that may facilitate the sharing of information or content, this would constitute a general electronic service. A general electronic content service is exemplified by those services currently offered by Facebook, Reddit and YouTube.

141. The definition is designed to be capable of capturing a range of existing and future technologies. Examples of general electronic content services may include websites, chat forums and social media platforms.

142. Subclause 8(2) clarifies that a transmission service provider is not a general electronic content service provider merely because they supply a transmission service that enables material to be accessed or delivered.

143. Subclause 8(3) excludes persons who provide billing services, or a fee collection service, in relation to a general electronic content service, who do not provide the general electronic content service itself.

When material is posted on a general electronic content service

144. Clause 9 describes the circumstances where material is posted on a general electronic content service. This is intended to capture scenarios such as where a person posts material on a profile page, on a social media group page, or on a chat forum, so that the material can be viewed by other users of the website or forum.

Uploaded material

145. Clause 10 clarifies that a person is taken to have uploaded material for storage/back-up even in circumstances where the material is automatically uploaded. This is intended to capture scenarios where a person has uploaded electronic information for the sole purpose of storing that information, rather than with an intention to share this information with another individual.

When a prescribed communications provider is based in, or operates in, a foreign country

146. Clause 10A defines the circumstances in which a provider will be taken to be 'based in' or 'operate in' a foreign country for the purposes of Schedule 1 to the TIA Act. This definition applies in the context of the mandatory criterion that must be considered by an independent decision-maker when issuing an IPO. The criterion requires that the person making the application for the order reasonably suspects that the provider to which the order is to be issued is 'based in', or 'operates in', a foreign country that is a party to the nominated designated international agreement.

147. The definitions of when a provider will be 'based in' and 'operate in' a country are intentionally broad given the increasing global nature of the modern communications environment and the need to be technologically neutral. If the prescribed communications provider is an individual, they will be taken to be 'based in' a foreign country if such an individual is ordinarily resident in the foreign country. If the prescribed communications provider is a body corporate it will be taken to be 'based in' a foreign country if it is incorporated in the foreign country or has its principal place of business in the foreign country.

148. A prescribed communications provider is taken to 'operate in' a foreign country if the provider handles communications, or holds stored communications, or holds telecommunications data in the foreign country. The terms 'handles' and 'holds' are intended to take on their ordinary meaning. Both terms are intentionally broad and are designed to be technology neutral. The breadth of these terms is intended to capture the evolving and numerous ways in which providers may deal with data captured by a designated international agreement. 'Handling' communications includes a broad range of dealings with data. 'Handling' is intended to include situations where the provider is not actively doing something to the communications; for example, 'handling' communications would include automated processes (such as machine to machine processes) where the provider may be responsible for, in control of, or able to exercise control over the communications or the movement of the communications. Both 'holding' and 'handling' of data can include where a provider has physical possession of the data, and also where they have control of the data but it is otherwise held remotely (for example, where a provider remotely stores data at a remote data storage facility provided by another company).

Intended recipient of a communication

149. Clause 11 defines the intended recipient of a communication for the purposes of Schedule 1 of the TIA Act. This is modelled on section 5G of the TIA Act, but takes into account that an individual transmission service for the purposes of Schedule 1 of the TIA Act is broader than a telecommunications service.

Use of a thing

150. Clause 12 describes when a thing is used for the purposes of Schedule 1 of the TIA Act. This definition is intended to capture a broad range of uses. Clause 12 is based on clause 17 of Schedule 7 to the Broadcasting Services Act 1992, and is intended to overcome potential difficulties in attributing instrumentality to a single element of a system, where the whole system is required to perform an act.

Identification of a particular person

151. Clause 13 describes how a particular person may be identified in an IPO and includes any unique identifying factor that is applicable to the person. This definition is intentionally broad so as to capture circumstances where the real identity of the person using the account is not known.

Eligible Judge

152. Clause 14 describes how, for the purposes of this Schedule, a consenting judge may be nominated and declared by the Attorney-General to be an eligible judge. An eligible judge has the same protection and immunity as a Justice of the High Court has in relation to proceedings in the High Court. Judges, in exercising their functions with respect to matters in Schedule 1 as inserted by the Bill, do so in their personal capacity.

Nominated AAT member

153. Clause 15 describes how a Deputy President, senior member or member of the AAT, as described by the clause, may be nominated by the Attorney-General to issue IPOs under Division 2 of Part 2, and Division 2 of Part 3, of this Schedule (with respect to enforcement of the criminal law, and control orders, respectively). A nomination ceases if the person's relevant appointment to the AAT ceases. For the purposes of this Schedule, a nominated AAT member has the same protection and immunity as a Justice of the High Court has in relation to proceedings in the High Court.

Issuing authority

154. Clause 16 describes how the Attorney-General may, for the purposes of this Schedule, appoint as an issuing authority a judge of a court created by Parliament, or a magistrate, who has consented to the appointment. Likewise, the Attorney-General may appoint a Deputy President, senior member or member of the AAT, as described by the clause, as an issuing authority. An appointment ceases should the person cease to be a person whom the Attorney-General could appoint under this clause. An issuing authority has, for the purposes of this Schedule, the same protection and immunity as a Justice of the High Court has in relation to proceedings in the High Court.

Nominated AAT Security Division member

155. Clause 17 describes how the Attorney-General may nominate a senior member or member of the Security Division of the AAT, as described by the clause, or a Deputy President of the AAT to issue IPOs under this Schedule (with respect to national security). A nomination ceases if the person's relevant appointment to the AAT ceases, or if the person is a senior member or member and ceases to be a Security Division member. Subclauses 17(3A) and 17(3B) ensure that Deputy Presidents are capable of being nominated to issue IPOs relating to national security without needing to be a member of the Security Division. A nominated AAT Security Division (including a Deputy President nominated under this section) member has, for the purposes of this Schedule, the same protection and immunity as a Justice of the High Court has in relation to proceedings in the High Court.

Urgent circumstances

156. Clause 17A defines urgent circumstances for the purposes of making an application to an independent decision maker for an IPO by telephone, and for seeking the Attorney-General's oral consent to making a telephone application. Knowing precisely what matters are considered urgent will enable agencies to respond more quickly in situations that necessitate immediate action. Defining urgent circumstances will also assist agencies to know whether a matter is not urgent, thereby enabling them to use the appropriate procedures in the Bill to reflect the circumstances.

157. The definition of urgent circumstances in relation to Parts 2 and 3 of the Bill requires that the applicant think it necessary to make a telephone application because an imminent risk of serious harm to a person or substantial damage to property exist, and the IPO is necessary for the purpose of dealing with that risk, and it is not practicable in the circumstances to make the application in writing.

158. The definition of urgent circumstances in relation to applications to nominated Security Division members of the AAT in Part 4 of the Bill requires the applicant to think it necessary to make a telephone application because the delay caused by making a written application may be prejudicial to security, and it not be practicable in the circumstances to make the application in writing.

159. The definition of urgent circumstances in relation to seeking the oral consent of the Attorney-General to making an application for an IPO under Part 4 of the Bill requires the applicant to think it necessary for the Attorney-General to consent orally because the delay caused by obtaining written consent may be prejudicial to security, and it not be practicable in the circumstances for the Attorney-General to consent in writing.

160. What is 'practicable in the circumstances' in relation to clause 17A is not limited to only include whether it is physically possible to make a written application, but also includes matters such as whether it is practicable given the time imperative of the urgent circumstances or the security requirements for dealing with classified documents.

Meaning of expressions in other provisions of this Act

161. Clause 18 clarifies that an expression used in Schedule 1 of the TIA Act is not intended to affect the meaning of any other expressions in the TIA Act, other than international production order.

Extra territorial application

162. Clause 19 clarifies that Schedule 1 of the TIA Act, including IPOs issued under that Schedule, has extra-territorial application.

Constitutional basis of this Schedule

163. Clause 20 establishes that Schedule 1 of the TIA Act is supported by the communications power at paragraph 51(v) of the Constitution.

Part 2 - International production orders relating to the enforcement of the criminal law

Division 1 - Simple outline

164. Clause 21 provides a simplified outline of Part 2 of Schedule 1, as introduced by the Bill.

Division 2 - International production orders relating to interception: enforcement of the criminal law

Subdivision A - Applications

165. Subdivision A sets out the requirements for an interception agency to apply for an IPO relating to interception activities.

What form must an application for an International Production Order relating to interception be in?

166. Clause 22(1) provides an interception agency may apply to an eligible Judge or nominated AAT member for a law enforcement IPO seeking interception activities. Paragraph 22(1)(a) provides this can only be done in respect of one or more individual transmission services, or one or more individual message/call application services. This is intended to capture technologies or services associated with the making of communications by means of transmission services. For example, a message or call application service, such as Voice-over-IP services, permits persons to be able to communicate over an internet service.

167. Paragraph 22(1)(b) requires that where an interception agency makes an application to an eligible Judge or nominated AAT member, it must be directed to a prescribed communications provider as defined under clause 2 (definitions).

168. Subclause 22(2) requires that the interception agency nominate a designated international agreement as specified in the regulations under clause 3.

169. Subclause 22(3) provides, in the case of an interception agency, members or executive officers (as described) of the particular agency may apply for an IPO. The agencies and people within those agencies that can make an application for an IPO are intended to mirror the current arrangements under the TIA Act. This will ensure the same agencies who can access electronic information domestically can do so internationally to successfully investigate serious crime, national security matters, and monitor control orders. Chief Officers of relevant agencies can authorise appropriate persons within their agencies to make authorisations for IPOs in order to streamline processes and assist the relevant agency to enact and discharge its functions. Law enforcement and national security officers will receive training on the legislative requirements for making applications and will be supported by their legal areas to ensure that applications are of sufficient quality, and meet legislative requirements.

170. Clause 23 requires that applications must be in writing unless urgent circumstances require an application to be made by telephone. Only the chief officer of the agency or a person who is authorised by the chief officer can make an application by telephone. Subclause 23(3) requires that any authorisation must be in writing and can be either particular persons or classes of persons.

Contents of application

171. Clause 24 provides the application will state the name of the agency and the name of the person making the application on the agency's behalf.

172. Clause 25 sets out various matters to be included in the affidavit in support of an application for an IPO, including the facts or grounds on which the application is to be based.

173. Subclauses 25(3) and (4) provide that the affidavit should set out information regarding previous IPOs sought by the interception agency in relation to the same service. The inclusion of this information in the affidavit is intended to assist the eligible Judge or nominated AAT member's consideration of the matters listed in subclause 30(5), such as how much the information to be obtained under the IPO would likely assist in connection with the interception agency's investigation.

174. Clause 26 provides in addition to this information, a telephone application for an IPO must include details of the urgent circumstances that led to a telephone application.

175. Clause 27 provides an eligible Judge or nominated AAT member with the power to request further information, and the form in which the further information must be given.

Submissions and questioning by the Public Interest Monitor

176. Clauses 28 and 29 allow the intervention of the Victorian and Queensland Public Interest Monitors (PIMs) to assess the applications for interception activities made by their jurisdiction's relevant agency. Based on the information before them, the PIM may make an assessment of the application against the same criteria that the decision maker will use to make their assessment. Their assessment may then be submitted to the eligible Judge or nominated AAT member assessing the application for an IPO.

177. Under these provisions, PIMs may also question certain persons in connection with an application for an IPO. The questioning however may only take place in the presence of the eligible Judge or nominated AAT member.

178. These provisions allow the intervention of the Victorian and Queensland PIMs to assess the applications for interception activities made by their jurisdiction's relevant agency. Nothing in this Bill is intended to prevent the PIMs from fulfilling any of their functions set out under the relevant Victorian and Queensland legislation. Rather, the Bill provides a mechanism for PIMs to monitor applications by their jurisdiction's respective agencies for an IPO.

179. Subclauses 29(4) and 29(5) provide for the delegation by the Queensland PIM to the Queensland deputy PIM the powers under clause 29. In exercising powers under the delegation, the Queensland deputy PIM must comply with any directions of the Queensland PIM.

Subdivision B - International production orders relating to interception

Issue of International Production Order relating to interception - law enforcement

180. Subclause 30(1) provides an IPO relating to interception may be made in respect of one or more individual transmission services, or one or more individual message/call application services. The application must direct the order to a prescribed communications provider. IPOs relating to interception are limited to only those types of services recognising that these are services that permit communication via a transmission service and/or telecommunications network.

181. Subclause 30(2) provides an eligible Judge or nominated AAT member may issue an IPO if he or she is satisfied (paragraphs 30(2)(a)-(j)):

•

In the case of an application relating to one or more individual transmission services - that there are reasonable grounds that the prescribed communications provider either owns or operates a telecommunications network that is, or is likely to be, used to supply the transmission services to which the order relates; or the prescribed communications provider supplies those individual transmission services;

•

In the case of an application concerning individual message/call application services - that there are reasonable grounds for suspecting that the prescribed communications provider provides those individual message/call application services;

•

that the person who made the application on behalf of the agency reasonably suspects that the prescribed communications provider is based in, or operates in, a foreign country that is a party to the designated international agreement nominated in the application;

•

where the application was made by telephone, that the urgency of the situation justified a telephone application;

•

there are reasonable grounds for suspecting that a particular person is using, or is likely to use, those individual transmission services, or individual message/call application services;

•

the information to be obtained is likely to assist in connection with the investigation by the interception agency of a serious category 2 offence, or serious category 2 offences, in which the particular person is involved, or another person is involved who will be communicating with the particular person (particular person refers to the person who is involved in an offence within the meaning of section 6B of the TIA Act, whilst another person captures B-Party interception).

182. The threshold 'likely to assist' applies for all warrants under the TIA Act other than control order warrants. The decision to use the threshold 'likely to assist' as opposed to 'likely to substantially assist' was made to provide Australia's law enforcement and national security agencies with the operational flexibility they need to carry out their functions in order to investigate, detect and prevent serious crimes and threats to national security, including terrorism.

183. The higher threshold of 'likely to substantially assist' may have the effect of preventing law enforcement and national security agencies from accessing overseas information likely to assist in the investigation of serious crime or matters relating to national security. During the early stages of an investigation, it would be extremely difficult for agencies to demonstrate in advance of reviewing the information that the information will be 'likely to substantially assist' the investigation. For example, telecommunications data, such as account details and IP addresses, are often collected during the early stages of an investigation. When seeking an IPO, agencies need to demonstrate that this information is likely to assist the investigation, for example by determining a link between an account and the suspected criminal activity or offender, and thereby identifying further lines of inquiry. A higher threshold could therefore be detrimental to law enforcement and national security investigations by removing a critical line of inquiry during the early stages of an investigation.

184. Subclause 30(2) further provides an eligible Judge or nominated AAT member may issue an order directing a prescribed communications provider to:

•

In the case of an application in respect of one or more individual transmission services - intercept communications during a specified period, make those intercepted communications available to the interception agency, and disclose specified telecommunications data that relates to those intercepted communications and/or the services themselves.

•

In the case of an application in respect of one or more individual message/call application services - intercept messages sent or received, voice calls made or received, or video calls made or received, using those services during a specified period, make those intercepted messages, voice calls or video calls available to the interception agency, and disclose specified telecommunications data that relates to those intercepted messages, voice calls or video calls, and/or the services themselves.

Period specified in the International Production Order

185. Subclause 30(3) provides an IPO must not begin in terms of interception of communications, or intercept messages sent or received, voice calls made or received, or video calls made or received before the time when the order is given to the prescribed communications provider. This recognises that the authority of the IPO must not permit interception activities until the IPO is given to the prescribed communications provider.

186. Subclause 30(3) also inserts a note which clarifies that IPOs are given under clause 111. Subclause 30(4) specifies that the period in which an IPO can require interception activities as described under subparagraphs 30(2)(i)(i) or 30(2)(j)(i) cannot be longer than 90 days, or in the case of B-Party, 45 days. The period specified in an IPO seeking B-Party interception is half that applicable to a non B-Party interception IPO, as B-Party interception inherently involves a potential for greater privacy intrusion of persons who may not be involved in the commission of an offence.

Matters to which an eligible Judge or nominated AAT member must have regard

187. Subclause 30(5) sets out a list of matters to which an eligible Judge or nominated AAT member must have regard when considering whether to issue an IPO in relation to one or more individual transmission services, or one or more individual message/call application services. An eligible Judge or nominated AAT member must have regard to the following:

•

how much the privacy of any person or persons would be likely to be interfered with by intercepting communications using those services,

•

the gravity of the conduct constituting the offence/offences,

•

how much the information would be likely to assist in the connection with the investigation by the interception agency of the offence/offences,

•

to what extent the methods of investigating the offence/offences that do not involve the interception of communications have been used by, or are available to, the interception agency,

•

how much such methods would be likely to assist in connection with the investigation by the interception agency of the offence/offences,

•

how much such methods would be likely to prejudice the investigation by the interception agency of the offence/offences, including whether because of delay or for any other reason,

•

in relation to an application made by a Victorian interception agency - any submissions made by a Victorian PIM under clause 13 to the eligible Judge or nominated AAT member,

•

in relation to an application made by a Queensland interception agency - any submissions made by a Queensland PIM under clause 14 to the eligible Judge or nominated AAT member, and

•

any such other matters as the eligible Judge or nominated AAT member considers relevant (this is an additional criterion to the current domestic warrant regime under the TIA Act. It is intended to take into account the cross-border nature of the IPO regime and allow sufficient flexibility for consideration of any additional matters that may be relevant in this context).

Restriction on issuing order

188. Subclauses 30(6) and 30(7) provides an IPO relating to interception must not be issued in relation to a B-Party unless an eligible Judge or nominated AAT member are satisfied that:

•

the interception agency has exhausted all other practicable methods of identifying the individual transmission services or message/call application services used, or likely to be used, by the person being investigated in terms of the offence/offences; or

•

the interception of communications carried by individual transmission services or message/call application services used or likely to be used by that person would not otherwise be possible.

Content of International Production Order

189. Clause 31 sets out the content of an IPO in response to an application made by an interception agency. The order must be signed by the eligible Judge or nominated AAT member who issued the order and set out information including the name of the relevant prescribed communications provider and designated international agreement, the applicable telecommunications identifiers (such as telecommunications service numbers, account holder names, or specific URLs unique to account holders), and short particulars of each serious category 2 offence or offences.

190. Subclauses 31(4), (6), and (8) provide that where an order requires the communications provider to intercept communications, messages, voice messages, voice calls or videos, or telecommunications data, the order may require the provider to do so in a specified way, and make those intercepted communications available to the interception agency in a specified way. This ensures intercepted communications are made available in a way that facilitates effective use of information provided in response to an order. For example, it may require that the prescribed communications provider provides the intercepted communications in a certain format to assist law enforcement in processing the intercepted communications.

191. Subclauses 31(5), (7), and (9) provide that a requirement under subclauses 31(4), (6), and (8) may include the intercepted material be made available directly to the interception agency, or require the intercepted material be made available to the interception agency indirectly via the Australian Designated Authority. This ensures maximum flexibility in the delivery of intercepted material. Interception agencies, the Australian Designated Authority, and prescribed communications providers have the ability to decide on an approach that achieves the goal of providing intercepted communications effectively, efficiently and in line with any designated international agreement requirements.

192. Subclause 31(10) provides the reference to specified way in clause 31 may deal with matters of timing. A note is inserted in to the subclause to provide an example requirement.

Issue of further International Production Order

193. Clause 32 establishes limitations for when a further IPO can be sought for interception activities in relation to the particular services and provider subject to an earlier IPO. A further IPO can be issued so long as the period specified in the further order begins after the end of the period specified in the original order. This is provided for both transmission services and message/call application services.

194. For example, an original order specifies a period of 30 days. The interception agency may obtain a further IPO in relation to the same transmission services or message/call application services during that 30 day period, so long as the period specified on the further IPO commences after the expiry of the 30 day period specified on the original order. It is expected that an interception agency should be able to obtain sequential IPOs with no gaps between the expiry and the beginning of the new IPO to ensure that communications are not lost in transitional time.

Division 3 - International production orders relating to stored communications: enforcement of the criminal law

Subdivision A - Applications

195. Subdivision A sets out the requirements for a criminal law-enforcement agency to apply for an IPO relating to stored communications.

196. Clause 33(1) provides a criminal law-enforcement agency may apply to an issuing authority for an IPO seeking stored communications. An issuing authority is defined in clause 2.

197. Applications under clause 33 must be made with respect of a particular person and directed to a prescribed communications provider. Therefore, an IPO may seek disclosure of an individual's messages which were sent using a particular messaging application and emails sent to and from a specified email address.

198. Subclause 33(2) requires the application nominate a designated international agreement as specified in the regulations under clause 3.

What form must an application for an International Production Order relating to stored communications be in?

199. Clause 34 requires applications to be in writing, unless urgent circumstances require an application to be made by telephone. Only the chief officer of the agency or a person who is authorised by the chief officer can make an application by telephone. Subclause 34(3) requires that any authorisation must be in writing and can be either particular persons or classes of persons.

Contents of application

200. Clause 35 provides a written application will state the name of the agency and the name of the person making the application on the agency's behalf.

201. Clause 36 provides a written application will be accompanied by one or more affidavits that set out the facts and other grounds on which the application is based.

202. Clause 37 provides, in addition to this information, a telephone application for an IPO must include details of the urgent circumstances that led to a telephone application. It must also include each matter that, if the application had been made in writing, clause 35 or 36 would have required the application, or an affidavit accompanying it, to set out, and must be given orally or in writing, as the issuing authority directs.

203. Clause 38 provides the issuing authority with the power to request further information in connection with the application, and the form in which the further information must be given.

Subdivision B - International production orders relating to stored communications

Issue of International Production Order - law enforcement

204. Clause 39 provides for the issuing of a law enforcement IPO relating to stored communications, by an issuing authority.

205. Subclause 39(2) sets out criteria for issuing the IPO.

206. Subclause 39(2)(a) provides the issuing authority may issue an IPO if satisfied by the information given that there are reasonable grounds for suspecting that the prescribed communications provider holds any of the stored communications set out in that subclause. The issuing authority has discretion to issue the order.

207. Stored communications at subclause 39(2)(a)(v) may include messages sent through a messaging application.

208. Stored communications at subclauses 39(2)(a)(vi)-(vii) may include calls made using a Voice over Internet Protocol function.

209. Stored communications at subclauses 39(2)(a)(viii) may include material on hosting services including cloud and web hosting.

210. Stored communications at subclause 39(2)(a)(ix) may include posts in a closed group page in an online social media application or in chat fora.

211. Subclause 39(2)(aa) requires the issuing authority when considering an application for an IPO relating to stored communications to be satisfied, amongst other things, that the person who made the application on behalf of the agency reasonably suspects that the prescribed communications provider is based in, or operates in, a foreign country that is a party to the designated international agreement nominated in the application.

212. Subclause 39(2)(d) provides the issuing authority must be satisfied that the information under the order would be likely to assist in connection with the investigation by the criminal law-enforcement agency of one or more serious category 1 offence/offences involving the particular person in respect of whom the application was made. Investigation in this instance includes the prevention, detection, investigation, or prosecution of a serious crime.

213. The threshold 'likely to assist' applies for all warrants under the TIA Act other than control order warrants. The decision to use the threshold 'likely to assist' as opposed to 'likely to substantially assist' was made to provide Australia's law enforcement and national security agencies with the operational flexibility they need to carry out their functions in order to investigate, detect and prevent serious crimes, and threats to national security including terrorism.

214. The higher threshold of 'likely to substantially assist' may have the effect of preventing law enforcement and national security agencies from accessing overseas information likely to assist in the investigation of serious crime or matters relating to national security. During the early stages of an investigation, it would be extremely difficult for agencies to demonstrate in advance of reviewing the information that the information will be 'likely to substantially assist' the investigation. For example, telecommunications data, such as account details and IP addresses, are often collected during the early stages of an investigation. When seeking an IPO, agencies need to demonstrate that this information is likely to assist the investigation, for example by determining a link between an account and the suspected criminal activity or offender and thereby identifying further lines of inquiry. A higher threshold could therefore be detrimental to law enforcement and national security investigations by removing a critical line of inquiry during the early stages of an investigation.

215. The issuing authority may issue an order which directs the prescribed communications provider to do the actions set out in subclauses 39(2)(e) to (l). This includes making copies of the stored communications, making that copy available to the criminal law-enforcement agency, and disclosing specified telecommunications data.

What must the issuing authority have regard to?

216. Subclause 39(3) provides the matters to which the issuing authority must have regard in deciding whether to issue an IPO:

•

how much the privacy of any person or persons would be likely to be interfered with by the criminal law-enforcement agency obtaining a copy of the stored communications,

•

the gravity of the conduct constituting the offence/offences,

•

how much the information would be likely to assist in connection with the investigation by the criminal law-enforcement agency of the offence/offences,

•

to what extent the methods of investigating the offence/offences that do not involve obtaining a copy of the stored communications have been used by, or are available to, the criminal law-enforcement agency,

•

how much such methods would be likely to assist in connection with the investigation by obtaining a copy of the stored communications of the offence/offences,

•

how much such methods would be likely to prejudice the investigation by obtaining a copy of the stored communications of the offence/offences, including whether because of delay or for any other reason,

•

any such other matters as the issuing authority considers relevant (this is an additional criterion to the current domestic warrant regime under the TIA Act. It is intended to take into account the cross-border nature of the IPO regime and allow sufficient flexibility for consideration of any additional matters that may be relevant in this context).

What must the International Production Order contain?

217. Clause 40 provides for the content of the IPO.

218. Subclause 40(2) provides the IPO must be signed by the issuing authority who issued it.

219. Subclause 40(3) provides the matters which the order must set out. This includes the name of the relevant prescribed communications provider and designated international agreement; and short particulars of each serious category 1 offence.

220. Subclause 40(4) provides an order may require a prescribed communications providers to make a copy of stored communications available to the agency in a specified way. This could include being provided in a certain format. Subclause 40(5) provides subclause 40(4) may require that a copy of stored communications be made available to the criminal law-enforcement agency directly or indirectly via the Australian Designated Authority. The intention is to allow flexibility for the Australian Designated Authority, the prescribed communications provider and the Australian criminal law-enforcement agency in determining how best to provide the copy of the stored communications in response to an IPO.

221. Subclauses 40(6) and 40(7) also provide for similar requirements and flexibility in terms of the disclosure of telecommunications data.

222. Subclause 40(6) provides in the case of an order that requires disclosure of telecommunications data - the order may require the provider to disclose that data in a specified way, and make that data available to the criminal law-enforcement agency in a specified way. This ensures telecommunications data is made available in a way that facilitates effective use of information provided in response to an order. For example, it may require that the prescribed communications provider provides the telecommunications data in a certain format to assist law enforcement in processing the telecommunications data.

223. Subclause 40(7) provides a requirement in terms of subclause 79(4) may require that the telecommunications data be made available directly to the criminal law-enforcement agency, or require that the telecommunications data is made available to the agency indirectly via the Australian Designated Authority. This ensures maximum flexibility for enforcement agencies, the Australian Designated Authority and the prescribed communications providers to decide on an approach that achieves the goal of providing telecommunications data effectively, efficiently and in line with any designated international agreement requirements.

224. Subclause 40(8) provides a specified way may deal with matters of timing. This could include requirements on the frequency of transmitting the data.

Issue of further International Production Order

225. Clause 41 enables further IPOs to be issued. Noting that a stored communications IPO is executed at a point in time (communications that are held at the time the prescribed communications provider receives the order), further IPOs may be required. The agency would be required to make a new application in line with the requirements of Subdivision A.

Division 4 - International production orders relating to telecommunications data: enforcement of the criminal law

Subdivision A - Applications

226. Subdivision A (clauses 42-47) sets out general requirement provisions that apply for a valid application by an enforcement agency to an issuing authority for a telecommunications data IPO.

What form must an application for an International Production Order relating to telecommunications data be in?

227. Clause 42(1) sets out the circumstances in which an enforcement agency can apply for a law enforcement IPO relating to telecommunications data. The definition of enforcement agency is intended to have the same meaning given by section 176A of the TIA Act.

228. Subclause 42(2) requires that the enforcement agency nominate a designated international agreement as specified in the regulations under clause 3.

229. Subclause 42(3) provides in the case of an enforcement agency, only an authorised officer of the particular agency may apply for an IPO. The definition of authorised officer is intended to have the same meaning as that given under subsection 5(1) of the TIA Act.

230. Clause 43 requires that applications must be in writing unless urgent circumstances require an application to be made by telephone. Only the chief officer of the agency or a person who is authorised by the chief officer can make an application by telephone. Subclause 43(3) requires that any authorisation must be in writing and can be made either in relation to particular persons or classes of persons.

Content of application

231. Clause 44 provides the application will state the name of the agency and the person making the application on the agency's behalf.

232. Clause 45 requires a written application under clause 42 for an IPO must be accompanied by an affidavit that sets out various matters to be included in support of an application for an IPO, including the facts or grounds on which the application is made. Despite subclause 45(1), a written application may be accompanied by two or more affidavits that together set out each matter that this clause, without this subclause, would have required an affidavit accompanying the application to set out.

233. Clause 46 provides, in addition to this information, a telephone application for an IPO must include details of the urgent circumstances that led to a telephone application. It must also include each matter that, if the application had been made in writing, clause 42 or 43 would have required the application, or an affidavit accompanying it, to set out and must be given orally or in writing, as the issuing authority directs.

234. Clause 47 provides an issuing authority with the power to request further information, and the form in which the further information must be given.

Subdivision B - International production orders relating to telecommunications data

235. Subdivision B (clauses 48-50) sets out the scope and content of a valid IPO for telecommunications data and the general requirements that must be satisfied before an issuing authority may issue an order to a prescribed communications provider.

236. Subclause 48(1) provides subclause 48 applies when an enforcement agency applies, under clause 42, to an issuing authority for an IPO that is directed to a prescribed communications provider.

237. Subclause 48(2) provides an issuing authority may issue an IPO if he or she is satisfied that there are reasonable grounds for suspecting that the prescribed communications provider holds, or is likely to commence to hold, any of the types of telecommunications data listed.

238. Subclause 48(2) further provides that an issuing authority must be satisfied that:

•

the person who made the application on behalf of the agency reasonably suspects that the prescribed communications provider is based in, or operates in, a foreign country that is a party to the designated international agreement nominated in the application;

•

where the application was made by telephone, that the urgency of the situation justified a telephone application;

•

the information to be obtained is likely to assist in connection with the investigation by the enforcement agency of a serious category 1 offence, or serious category 1 offences.

239. The threshold 'likely to assist' applies for all warrants under the TIA Act other than control order warrants. The decision to use the threshold 'likely to assist' as opposed to 'likely to substantially assist' was made to provide Australia's law enforcement and national security agencies with the operational flexibility they need to carry out their functions in order to investigate, detect and prevent serious crimes, and threats to national security including terrorism.

240. The higher threshold of 'likely to substantially assist' may have the effect of preventing law enforcement and national security agencies from accessing overseas information likely to assist in the investigation of serious crime or matters relating to national security. During the early stages of an investigation, it would be extremely difficult for agencies to demonstrate in advance of reviewing the information that the information will be 'likely to substantially assist' the investigation. For example, telecommunications data, such as account details and IP addresses, are often collected during the early stages of an investigation. When seeking an IPO, agencies need to demonstrate that this information is likely to assist the investigation, for example by determining a link between an account and the suspected criminal activity or offender and thereby identifying further lines of inquiry. A higher threshold could therefore be detrimental to law enforcement and national security investigations by removing a critical line of inquiry during the early stages of an investigation.

241. Subclause 48(2) further provides an issuing authority may issue an order directing a prescribed communications provider to:

•

In the case of an application in respect of telecommunications data held by the prescribed communications provider when the IPO comes into force - disclose any such telecommunications data to the agency;

•

In the case of an application in respect of telecommunications data held by the prescribed communications provider that commences to be held during a specified period - disclose any such telecommunications data to the agency.

242. Subclause 48(3) provides an IPO must not begin, in terms of disclosure of telecommunications data, before the time when the order is given to the prescribed communications provider. This recognises that the authority of the IPO must not permit disclosure until the IPO is given to the prescribed communications provider.

243. Subclause 48(3) also inserts a note which clarifies that IPOs are given under clause 111. Subclause 48(4) specifies that the period in which an IPO can require disclosure as described under subclause 48(2) cannot be longer than 90 days.

244. Subclause 48(5) sets out a list of matters to which an issuing authority must have regard when considering whether to issue an IPO. Subclause 48(5)(a)-(g) sets out the list of matters which relate to one or more individual transmission services and has the following:

•

how much the privacy of any person or persons would be likely to be interfered with by disclosing, under an IPO, the telecommunications data;

•

the gravity of the conduct constituting the offence/offences;

•

how much the information would be likely to assist in connection with the investigation by the enforcement agency of the offence/offences;

•

to what extent the methods of investigating the offence/offences that do not involve the disclosure of telecommunications data have been used by, or are available to, the enforcement agency;

•

how much such methods would be likely to assist in connection with the investigation by the enforcement agency of the offence/offences;

•

how much such methods would be likely to prejudice the investigation by the enforcement agency of the offence/offences, including whether because of delay or for any other reason; and,

•

any such other matters as the issuing authority considers relevant.

245. Clause 49 sets out the content of an IPO in response to an application made by an enforcement agency. The order must be signed by the issuing authority who issued the order and set out matters including the name of the relevant prescribed communications provider and designated international agreement, and short particulars of each serious category 1 offence or offences.

246. Subclause 49(4) provides in the case of an order that requires disclosure of telecommunications data - the order may require the provider to disclose that data in a specified way, and make that data available to the enforcement agency in a specified way. This ensures telecommunications data is made available in a way that facilitates effective use of information provided in response to an order. For example, it may require that the prescribed communications provider provides the telecommunications data in a certain format to assist law enforcement in processing the telecommunications data.

247. Subclause 49(5) provides a requirement in terms of subclause 49(4) may require that the intercepted communications be made available directly to the interception agency, or require that the telecommunications data is made available to the enforcement agency indirectly via the Australian Designated Authority. This ensures maximum flexibility for enforcement agencies, the Australian Designated Authority and the prescribed communications providers to decide on an approach that achieves the goal of providing telecommunications data effectively, efficiently and in line with any designated international agreement requirements.

248. Subclause 49(6) provides the reference to specified way in clause 49 may deal with matters of timing. A note is inserted in to the subclause to provide an example requirement.

249. Clause 50 sets out the limitations for when a further IPO can be sought for telecommunications data already covered by an earlier IPO. This recognises that an IPO for telecommunications data is executed at a point in time and subsequent IPOs may be required to obtain further telecommunications data.

Part 3 - International production orders relating to control orders

250. Part 3 enables control order IPO agencies to obtain an IPO for purposes in connection with a control order imposed by an issuing court under the schedule to the Criminal Code Act 1995 (the Criminal Code). This will assist control order IPO agencies to monitor compliance with controls under a control order to protect the public from terrorist acts, prevent support for terrorist acts and hostile acts overseas and detect breaches of the control order.

Division 1 - Introduction

251. Clause 51 provides a simplified outline of Part 3 of Schedule 1, as introduced by the Bill.

Division 2 - International production orders relating to interception: control orders

Subdivision A - Applications

252. Subdivision A (clauses 52-59) sets out general requirement provisions that apply for a valid application by a control order IPO agency to an eligible Judge or nominated AAT member for an interception IPO.

What form must an application for an International Production Order relating to interception be in?

253. Clause 52(1) sets out where a control order IPO agency can apply for an IPO relating to interception. Subclause 52(1)(a) provides this can only be done in respect of one or more individual transmission services, or one or more individual message/call application services. This is intended to capture technologies or services associated with the making of communications by means of transmission service. For example, a message or call application service, such as Voice-over-IP services, permits persons to be able to communicate over an internet service.

254. Subclause 52(1)(b) requires that where a control order IPO agency makes an application to an eligible Judge or nominated AAT member, it must be directed to a prescribed communications provider as defined under clause 2 (definitions).

255. Subclause 52(2) requires that the control order IPO agency must nominate a designated international agreement as specified in the regulations under clause 3.

256. Subclause 52(3) provides, in the case of a control order IPO agency, an IPO must be applied for by certain officers, members or executive officers (as described) of the particular agency.

257. Subclause 52(4) provides the chief officer of a control order IPO agency may also nominate in writing an office or position involved in the management of the agency for this purpose.

258. Clause 53 requires that applications must be in writing, unless urgent circumstances require an application to be made by telephone. Only the chief officer of the agency or a person who is authorised by the chief officer can make an application by telephone.

259. Subclause 53(3) requires that any authorisation must be in writing and can be either particular persons or classes of persons.

Contents of application

260. Clause 54 provides the application will state the name of the agency and the name of the person making the application on the agency's behalf.

261. Clause 55 provides a written application under clause 52 by a control order IPO agency for an IPO must be accompanied by an affidavit that sets out various matters to be included in support of an application for an IPO, including the facts or grounds on which the application is made.

262. Subclauses 55(3) and (4) provide that the affidavit should set out information regarding previous IPOs sought by the agency in relation to the same service. The inclusion of this information in the affidavit is intended to assist the eligible Judge or nominated AAT member's consideration of the matters listed in subclauses 60(5) and 60(6). This aligns with similar requirements that have already been established with respect to monitoring powers currently available for control orders.

263. Clause 56 provides in addition to this information, a telephone application for an IPO must include details of the urgent circumstances that led to a telephone application. It must also include each matter that, if the application had been made in writing, clause 54 and 55 would have required the application, or an affidavit accompanying it, to set out and must be given orally or in writing, as the issuing authority directs.

264. Clause 57 provides the eligible Judge or nominated AAT member with the power to request further information, and the form in which the further information must be given.

265. Clause 58 enables the Victorian PIM to make submissions to eligible Judges or nominated AAT members or to question certain persons if a Victorian control order IPO agency applies to an eligible Judge or nominated AAT member for an IPO under clause 52.

266. Clause 59 enables the Queensland PIM to make submissions to eligible Judges or nominated AAT members or to question certain persons if a Queensland control order IPO agency applies to an eligible Judge or nominated AAT member for an IPO under clause 52.

267. Noting that both Victoria and Queensland contain legislation establishing an Office of the Public Interest Monitor, the intent of these provisions is to allow these offices the ability to consider IPOs created under the Bill. Nothing in this legislation is intended to prevent the PIMs from fulfilling any of their functions set out under the relevant legislation. Rather, the Bill provides a mechanism to give the PIMs the option of monitoring applications for IPOs.

268. In making a submission to an eligible Judge or nominated AAT member, or in utilising its ability to question certain persons in relation to an order, PIMs must ensure that the matter is in relation to one or more of those set out in subclauses 60(6)(a) - (g). In questioning the person making an application for the order or a person that is providing information on the order, the eligible Judge or nominated AAT member that is intended to approve of the order must be present. This presence can be in person or via telephone.

Subdivision B - International production orders relating to interception

Scope and issue of International Production Orders relating to interception - control orders

269. Clause 60 provides that in relation to an application made under clause 52, an eligible Judge or nominated AAT member may issue an IPO if he or she is satisfied (paragraphs 60(2)(a)-(j)):

•

in the case of an application in respect of one or more individual transmission services - that there are reasonable grounds for suspecting that the prescribed communications provider either owns or operates a telecommunications network that is, or is likely to be, used to supply the transmission services to which the order relates; or the prescribed communications provider supplies those individual transmission services; and,

•

in the case of an application in respect of one or more individual message/call application services - that there are reasonable grounds for suspecting that the prescribed communications provider provides those individual message/call application services; and,

•

that the person who made the application on behalf of the agency reasonably suspects that the prescribed communications provider is based in, or operates in, a foreign country that is a party to the designated international agreement nominated in the application; and,

•

where the application was made by telephone, that the urgency of the situation justified a telephone application; and,

•

there are reasonable grounds for suspecting that a particular person is using, or is likely to use, those individual transmission services, or individual message/call application services; and,

•

in the case of an application for an International Production Order that is in respect of one or more individual transmission services:

i.

a control order is in force in relation to the particular person; or

ii.

a control order is in force in relation to another person, and the particular person is likely to communicate with the other person using those individual transmission services; and

•

in the case of an application for an International Production Order that is in respect of one or more individual message/call application services:

i.

a control order is in force in relation to the particular person; or

ii.

a control order is in force in relation to another person, and the particular person is likely to communicate with the other person using those individual message/call application services; and

•

in the case of an application for an IPO that is in respect of one or more individual transmission services--information that would be likely to be obtained by intercepting, under an order issued under this clause, communications that are being carried by those individual transmission services would be likely to substantially assist in connection with:

i.

the protection of the public from a terrorist act; or

ii.

preventing the provision of support for, or the facilitation of, a terrorist act; or

iii.

preventing the provision of support for, or the facilitation of, the engagement in a hostile activity in a foreign country; or

iv.

determining whether the control order, or any succeeding control order, has been, or is being, complied with; and

•

in the case of an application for an IPO that is in respect of one or more individual message/call application services-information that would be likely to be obtained by intercepting, under an order issued under this clause, messages sent or received, voice calls made or received, or video calls made or received, using those individual message/call application services would be likely to substantially assist in connection with:

i.

the protection of the public from a terrorist act; or

ii.

preventing the provision of support for, or the facilitation of, a terrorist act; or

iii.

preventing the provision of support for, or the facilitation of, the engagement in a hostile activity in a foreign country; or

iv.

determining whether the control order, or any succeeding control order, has been, or is being, complied with.

270. For the sake of clarity, subclause 60(2) also contains four notes to explain that the Criminal Code Act 1995 contains offences that require consideration and explains restrictions placed under subclauses 60(7) and (8).

271. Subclause 60(3) specifies that the time period for the commencement of an IPO must be after the order is given to a prescribed communications provider.

272. Subclause 60(3) also contains a note that explains IPOs are given under clause 111.

273. Subclause 60(4) notes that the time period specified must not be longer than 90 days for the purposes of subparagraphs 60(2)(k)(i) or (l)(i) unless subparagraphs 60(2)(g)(ii) and (h)(ii) apply, then the time period specified must not be longer than 45 days. The period specified in an IPO seeking B-Party interception is half that applicable to a non B-Party interception IPO, as B-Party interception inherently involves a potential for greater privacy intrusion of persons who may not be involved in the commission of an offence.

Matters to which the eligible Judge or nominated AAT member must have regard

274. Subclause 60(5) sets out the matters to which the eligible Judge or nominated AAT member must have regard in deciding whether to issue an IPO that is in respect of one or more individual transmission services. This subclause has been drafted to reflect the privacy considerations that are required by a Judge or nominated AAT member when issuing a domestic telecommunications interception warrant for the purpose of monitoring compliance with control orders. The matters include whether intercepting would be the method that is likely to have the least interference with any person's privacy. This is an additional criterion to matters to which the eligible Judge or AAT member must have regard with respect to IPOs relating to interception under Part 2 or Part 3 of the Schedule. This additional consideration is consistent with the existing control order warrant regime under the TIA Act, and provides additional protection.

275. Subclause 60(6) sets out equivalent matters to which the eligible Judge or nominated AAT member must have regard in deciding whether to issue an IPO that is in respect of one or more individual message/call application services (paragraphs 60(6)(a)-(j)). Similar to subclause 60(5), this subclause has been drafted to reflect the privacy considerations that are required by a Judge or nominated AAT member when issuing a domestic telecommunications interception warrant for the purpose of monitoring compliance with control orders and it contains similar considerations for this reason.

276. In instances where subparagraphs 60(2)(g)(ii) apply, subclause 60(7) sets out the conditions with which the eligible Judge or nominated AAT member must be satisfied before issuing an IPO:

•

the requesting agency has exhausted all other practicable methods to identify the individual transmission service used, or likely to be used by the person to whom the control order relates, or

•

the interception of communications carried by individual transmission services used, or likely to be used, by that person would otherwise not be possible.

277. Subclause 60(7) is intended to reduce the impact on the privacy of a person who is only in contact with someone that is subject to a control order and this is achieved by ensuring an eligible Judge or nominated AAT member has adequately turned their mind to this issue.

278. In instances where subparagraph 60(2)(h)(ii) applies, subclause 60(8) sets out the conditions that the eligible Judge or nominated AAT member must be satisfied before issuing an IPO:

•

the requesting agency has exhausted all other practicable methods to identify the individual message/call application service used, or likely to be used by the person to whom the control order relates, or

•

the interception of messages, voice calls, video calls, or the use of individual message/call application services used by the person or any of these that are likely to be used by the person would not otherwise be possible.

Content of International Production Order

279. Clause 61 provides for what must be included in the content of an IPO. The order must be signed by the eligible Judge or nominated AAT member who issued the order and set out details including the name of the relevant prescribed communications provider and designated international agreement, the applicable telecommunications identifiers (such as telecommunications service numbers, account holder names, or specific URLs unique to account holders), the name of the person, and whether the order relates to an interim or confirmed control order.

280. Subclause 61(4) provides in the case of an order that requires interception relating to communications - the order may require the provider to intercept those communications in a specified way, and make those intercepted communications available to the control order IPO agency in a specified way. This ensures intercepted communications are made available in a way that facilitates effective use of information provided in response to an order. For example, it may require that the prescribed communications provider provides the intercepted communications in a specified format to assist the control order IPO agency.

281. Subclause 61(5) provides a requirement in terms of subclause 61(4) may require that the intercepted communications be made available directly to the control order IPO agency, or require that the intercepted communications be made available to the control order IPO agency indirectly via the Australian Designated Authority. This ensures maximum flexibility for a control order IPO agency, the Australian Designated Authority and the prescribed communications providers to decide on an approach that achieves the goal of providing intercepted communications effectively, efficiently and in line with any designated international agreement requirements.

282. Subclauses 61(6) and (7) provide the same requirements as subclauses 61(4) and (5) respectively, where it relates to an order that directs a prescribed communications provider to intercept messages, voice calls or video calls from a message.

283. Subclause 61(8) provides where an order directs a prescribed communications provider to disclose telecommunications data to the control order IPO agency, the order may require the provider to do so in a specified way. Subclause 61(9) provides an order may require that the telecommunications data be made available directly to the control order IPO agency, or require that the intercepted communications be made available to the control order IPO agency indirectly via the Australian Designated Authority.

284. Subclause 61(10) provides the reference to specified way in clause 61 may deal with matters of timing. A note is inserted into the subclause to provide an example requirement. This is to ensure that a requesting agency is given the discretion to ask for information in a way that will be able to most assist the purpose of requesting an IPO, such as receiving the information within 30 minutes in cases of urgency.

Issue of a further International Production Order

285. Clause 62 sets out the limitations for when a further IPO can be sought for interception activities already covered by an earlier IPO. A further IPO can be issued so long as the period specified in the further order begins after the end of the period specified in the original order. This is provided for both transmission services and message/call application services (subclauses (1) and (2) respectively).

286. For example, the original order has a specified period of 30 days. The control order IPO agency would be able to obtain a further IPO during that 30 days as long as the period specified would occur after the expiry of those 30 days. It is expected that the control order IPO agency should be able to obtain sequential IPOs with no gaps between the expiry and the beginning of the new IPO to ensure that communications are not missed or lost due to international time and date differences.

Division 3 - International production orders relating to stored communications: control orders

Subdivision A - Applications

287. Subdivision A (clauses 63 - 68) sets out general requirements that apply for a valid application by a control order IPO agency to an issuing authority for an IPO relating to stored communications. The current domestic regime does not facilitate warrants for stored communications relating to control orders and this Bill intends to create a complimentary regime that can be applied where stored communications data is held outside Australia.

What form must an application for an International Production Order relating to stored communications be in?

288. Clause 63(1) sets out the circumstances in which a control order IPO agency can apply to an issuing authority for a law enforcement IPO relating to stored communications. An issuing authority is defined in section 5.

289. Subclause 63(1)(a) provides this can only be done in respect of a particular person. This means that IPOs are more similar to named person interception warrants than service interception warrants (consistent with the existing domestic stored communications regime under Chapter 3).

290. Subclause 63(1)(b) requires that where a control order IPO agency makes an application, it must be directed to a prescribed communications provider as defined under clause 2 (definitions).

291. Subclause 63(2) requires that the application nominate a prescribed international agreement as specified in the regulations under clause 3.

292. Subclause 63(3) sets out who can make an application on the control order IPO agency's behalf. Similar to subclause 52(3), in the case of a control order IPO agency, an IPO must be applied for by certain officers, members or executive officers (as described) of the particular agency.

293. Subclause 63(4) provides the chief officer of a control order IPO agency may also nominate in writing an office or position involved in the management of the agency for this purpose.

294. For the purpose of complete clarity, subclause 63(5) provides subclause 63(4) is not a legislative instrument.

295. Clause 64 requires that applications must be in writing, unless urgent circumstances require an application to be made by telephone. Only the chief officer of the agency or a person who is authorised by the chief officer can make an application by telephone.

296. Subclause 64(3) requires that any authorisation must be in writing and can be either particular persons or classes of persons.

Content of application

297. Clause 65 provides a written application will state the name of the agency and the applicant. Clause 66 provides a written application will be accompanied by one or more affidavits that set out the facts and other grounds on which the application is based. Clause 67 provides in addition to this information, a telephone application for an IPO must include details of the urgent circumstances that led to a telephone application.

298. Clause 68 provides the issuing authority with the power to request further information in connection with the application, and the form in which the further information must be given.

Subdivision B - International production orders relating to stored communications

Issue of an International Production Order - control order

299. Clause 69 provides for the issuing of a control order IPO relating to stored communications, by an issuing authority.

300. Subclause 69(1) provides an IPO relating to stored communications may be made in respect of one or more individual transmission services, or one or more individual message/call application services. Subclause 69(1)(a) provides this can only be done in respect of a particular person and subclause 69(1)(b) requires that the application must be directed to a prescribed communications provider as defined under clause 2 (definitions).

301. Subclause 69(2) sets out criteria for issuing the IPO.

302. Subclause 69(2)(a)-(e) specifically provides the issuing authority may issue an IPO if satisfied that:

•

a control order is in force in relation to the relevant person; and

•

there are reasonable grounds for suspecting that the prescribed communications provider holds any of the mentioned stored communications; and

•

the person who made the application on behalf of the agency reasonably suspects that the prescribed communications provider is based in, or operates in, a foreign country that is a party to the designated international agreement nominated in the application; and

•

Subdivision A has been complied with in relation to the application; and

•

in the case of a telephone application-because of urgent circumstances, it was necessary to make the application by telephone; and

•

information that would be likely to be obtained by making a copy, under an order issued under this clause, of the stored communications would be likely to substantially assist in connection with:

i.

the protection of the public from a terrorist act; or

ii.

preventing the provision of support for, or the facilitation of, a terrorist act; or

iii.

preventing the provision of support for, or the facilitation of, the engagement in a hostile activity in a foreign country; or

iv.

determining whether the control order has been, or is being, complied with.

303. The issuing authority may issue an order which directs the prescribed communications provider to do the actions set out in subclauses 69(2)(f)-(m). This includes making copies of the stored communications, making that copy available to the control order IPO agency, and to disclose specified telecommunications data.

What must the issuing authority have regard to?

304. Subclause 69(3) provides the matters to which the issuing authority must have regard in deciding whether to issue an IPO. Having regard to these matters ensures that the issuing authority only issues an IPO in circumstances where it is justified and proportionate to do so. The list includes:

•

how much the privacy of any person or persons would be likely to be interfered with by the control order IPO agency obtaining a copy of the stored communications,

•

how much the information would be likely to assist in connection with the following aims:

i.

the protection of the public from a terrorist act; or

ii.

preventing the provision of support for, or the facilitation of, a terrorist act; or

iii.

preventing the provision of support for, or the facilitation of, the engagement in a hostile activity in a foreign country; or

iv.

determining whether the control order has been, or is being, complied with;

•

to what extent methods to achieve those aims that do not involve obtaining a copy of the stored communications have been used by, or are available to, the control order IPO agency,

•

how much the use of such methods would be likely to assist in connection with the above points,

•

how much such methods would be likely to prejudice the above points,

•

any such other matters as the issuing authority considers relevant (this criterion is intended to take into account the cross-border nature of the IPO regime and allow sufficient flexibility for consideration of any additional matters that may be relevant in this context).

Content of an International Production Order

305. Clause 70 provides for the content of the IPO.

306. Subclause 70(2) sets out that the order must be signed by the eligible Judge or nominated AAT member who issued the order. Subclause 70(3) sets out that the order must set out matters including the name of the relevant prescribed communications provider and designated international agreement, the name of the person, and whether the order relates to an interim control order or a confirmed control order.

307. Subclause 70(4) provides an order may require a prescribed communications provider to make a copy of stored communications available to the agency in a specified way. This could include being provided in a certain format. Subclause 70(5) provides subclause 70(4) may require that a copy of stored communications be made available to the criminal law-enforcement agency directly or indirectly via the Australian Designated Authority. The intention is to allow flexibility for the Australian Designated Authority, the prescribed communications provider and the Australian law enforcement agency in determining how best to provide the copy of the stored communications in response to an IPO.

308. Subclauses 70(6) and 70(7) provide for similar requirements and flexibility in terms of the disclosure of telecommunications data.

309. Subclause 70(6) provides an IPO to direct that telecommunications data is provided in a certain way, which is to ensure any information provided in a way that is most helpful to the control order IPO agency.

310. Subclause 70(7) sets out that a requirement under 70(6) may require that the telecommunications data be disclosed to the control order IPO agency directly or indirectly via the Australian Designated Authority. Again, this subclause ensures flexibility for the benefit of a control order IPO agency requesting telecommunications data.

311. Subclause 70(8) provides a specified way may deal with matters of timing. This could include requirements on the frequency of transmitting the data.

Issue of a further International Production Order

312. Clause 71 enables further IPOs to be issued. Noting that a stored communications IPO is executed at a point in time (communications that are held at the time the prescribed communications provider receives the order), further IPOs may be required. The agency would be required to make a new application in line with the requirements of Subdivision A.

Division 4 - International production orders relating to telecommunications data: control orders

Subdivision A - Applications

313. Subdivision A (clauses 72-77) sets out general requirement provisions that apply for a valid application by a control order IPO agency to an issuing authority for a telecommunications data IPO.

What form must an application for an International Production Order relating to telecommunications data be in?

314. 72(1) sets out the circumstances in which a control order IPO agency can apply for a law enforcement IPO relating to telecommunications data. The definition of control order IPO agency is intended have the meaning given by section 5 of Schedule 1.

315. Subclauses 72(1)(a)-(b) set out that an IPO must be issued in respect of a particular person and directed to a prescribed communications provider.

316. Subclause 72(2) requires that the enforcement agency nominate a designated international agreement as specified in the regulations under clause 3.

317. Subclause 72(3) provides in the case of an enforcement agency, an IPO may be applied for by an authorised officer of the particular agency. The definition of authorised officer is intended to have the same meaning as that given under subsection 5(1) of the TIA Act.

318. Clause 73 requires that applications must be in writing unless urgent circumstances require an application to be made by telephone. Only the chief officer of the agency or a person who is authorised by the chief officer can make an application by telephone. Subclause 73(3) requires that any authorisation must be in writing and can be either particular persons or classes of persons.

Contents of application

319. Clause 74 provides the application will state the name of the agency and the applicant.

320. Clause 75 sets out various matters to be included in the affidavit in support of an application for an IPO, including the facts or grounds on which the application is made. Despite subclause 75(1), a written application may be accompanied by 2 or more affidavits that together set out each matter that, but for this subclause, this clause would have required an affidavit accompanying the application to set out.

321. Clause 76 provides in addition to this information, a telephone application for an IPO must include details of the urgent circumstances that led to a telephone application. It must also include each matter that, if the application had been made in writing, clause 74 or 75 would have required the application, or an affidavit accompanying it, to set out and must be given orally or in writing, as the issuing authority directs.

322. Clause 77 provides the issuing authority with the power to request further information, and the form in which the further information must be given.

Subdivision B - International production orders relating to telecommunications data: control orders

323. Subdivision B (clauses 78 - 80) sets out the scope and content of a valid IPO for telecommunications data and the general requirements that must be satisfied before an issuing authority may issue an order to a prescribed communications provider.

324. Subclause 78(1) provides clause 78 applies if a control order IPO agency applies to an issuing authority for an IPO that is directed to a prescribed communications provider.

325. Subclause 78(2)(a) provides an issuing authority may issue an IPO if he or she is satisfied a control order is in force in relation to the relevant person.

326. Subclause 78(2)(b) provides an issuing authority may issue an IPO if he or she is satisfied of the circumstances set out under paragraphs 78(2)(b)(i)-(ix) that there are reasonable grounds for suspecting that the prescribed communications provider holds, or is likely to commence to hold, or is likely to commence to hold, any of the types of telecommunications data listed.

327. Subclause 78(2) further provides an issuing authority must be satisfied that:

•

the person who made the application on behalf of the agency reasonably suspects that the prescribed communications provider is based in, or operates in, a foreign country that is a party to the designated international agreement nominated in the application;

•

subdivision A has been complied with in relation to the application;

•

where the application was made by telephone, that the urgency of the situation justified a telephone application;

•

the information to be obtained would be likely to substantially assist in connection with:

i.

the protection of the public from a terrorist act; or

ii.

preventing the provision of support for, or the facilitation of, a terrorist act; or

iii.

preventing the provision of support for, or the facilitation of, the engagement in a hostile activity in a foreign country; or

iv.

determining whether the control order, or any succeeding control order, has been, or is being, complied with.

328. Subclause 78(2) further provides an issuing authority may issue an order directing a prescribed communications provider to:

•

So far as the telecommunications data is held by the prescribed communications provider when the IPO comes into force - disclose any such telecommunications data to the agency;

•

So far as the telecommunications data commences to be held by the prescribed communications provider during a specified period - disclose any such telecommunications data to the agency.

329. Subclause 78(3) provides an IPO must not begin in terms of disclosure of telecommunications data before the time when the order is given to the prescribed communications provider. This recognises that the authority of the IPO must not permit disclosure until the IPO is given to the prescribed communications provider.

330. Subclause 78(3) also inserts a note which clarifies that IPOs are given under clause 111. Subclause 78(4) specifies that the period in which an IPO can require disclosure as described under paragraphs 78(2)(g) cannot be longer than 90 days.

331. Subclause 78(5) sets out a list of matters to which an issuing authority must have regard when considering whether to issue an IPO. The subclause is intended to accord with the domestic approach to balancing privacy with a control order IPO agency's need to access certain information for certain purposes. Subclause 78(5)(a)-(f) sets out the list of matters which relate to one or more individual transmission services and has the following:

•

how much the privacy of any person or persons would be likely to be interfered with by the control order IPO agency obtaining a copy of the stored communications,

•

how much the information would be likely to assist in connection with:

i.

the protection of the public from a terrorist act; or

ii.

preventing the provision of support for, or the facilitation of, a terrorist act; or

iii.

preventing the provision of support for, or the facilitation of, the engagement in a hostile activity in a foreign country; or

iv.

determining whether the control order has been, or is being, complied with;

•

to what extent the methods to achieve those aims that do not involve obtaining a copy of the stored communications have been used by, or are available to, the control order IPO agency,

•

how much the use of such methods would be likely to assist in connection with the above points,

•

how much such methods would be likely to prejudice the above points,

•

any such other matters as the issuing authority considers relevant (this criterion is intended to take into account the cross-border nature of the IPO regime and allow sufficient flexibility for consideration of any additional matters that may be relevant in this context).

332. Clause 79 provides for what must be included in the content of an IPO. The order must be signed by the issuing authority who issued the order and set out matters including the name of the relevant prescribed communications provider and designated international agreement, the applicable telecommunications identifiers (such as telecommunications service numbers, account holder names, or specific URLs unique to account holders), the name of the person, and whether the order relates to an interim control order or a confirmed control order.

333. Subclause 79(4) provides in the case of an order that requires disclosure of telecommunications data, the order may require the provider to disclose that data in a specified way, and make that data available to the enforcement agency in a specified way. This ensures telecommunications data is made available in a way that facilitates effective use of information provided in response to an order. For example, it may require that the prescribed communications provider provides the telecommunications data in a certain format to assist law enforcement in processing the telecommunications data.

334. Subclause 79(5) provides a requirement in terms of subclause 79(4) may require that the telecommunications data be made available directly to the control order IPO agency, or require that the telecommunications data is made available to the agency indirectly via the Australian Designated Authority. This ensures maximum flexibility for enforcement agencies, the Australian Designated Authority and the prescribed communications providers to decide on an approach that achieves the goal of providing telecommunications data effectively, efficiently and in line with any designated international agreement requirements.

335. Subclause 79(6) provides the reference to specified way in clause 79 may deal with matters of timing. A note is inserted in to the subclause to provide an example requirement.

Issue of a further International Production Order

336. Clause 80 sets out the limitations for when a further IPO can be sought for telecommunications data already covered by an earlier IPO. This recognises that an IPO for telecommunications data is executed at a point in time and subsequent IPOs may be required to obtain further telecommunications data.

Division 5 - Notification to Ombudsman by control order IPO agencies in relation to International Production Orders

337. Clause 81 establishes notification requirements for control order IPO agencies in relation to IPOs.

338. Subclause 81(1) sets out that, within 3 months after an IPO is issued under this Part in response to an application by a control order IPO agency, the chief officer of the agency must:

•

notify the Ombudsman that the order has been issued; and

•

give to the Ombudsman a copy of the order.

339. The inclusion of a three month period in subclause 81(1) of the Bill reflects advice from the Commonwealth Ombudsman that, given this is a new scheme and its frequency of use is not yet known, a period of three months would be more appropriate to facilitate timely oversight. This is already a marked reduction from current regimes. Both the Crimes Act 1914 and the TIA Act establish a six month notification period.

340. The Commonwealth Ombudsman conducts its inspections of agencies' use of covert and intrusive powers retrospectively, with records generally assessed after the relevant warrant, authorisation or order has ceased to be in force. As such, inspections of records regarding control order IPOs are likely to occur some months after the Commonwealth Ombudsman has been notified of a control order IPO being issued. However, it is likely to significantly assist the Commonwealth Ombudsman to schedule and allocate resources for inspections, especially as it is anticipated that the use of the IPO regime will likely increase compared to current levels.

341. Subclause 81(2) establishes that if the chief officer of a control order IPO agency contravenes paragraph 114(1)(d) of this Schedule (so far as that paragraph relates to an IPO issued under this Part), the chief officer must:

•

notify the Ombudsman of the contravention; and

•

do so as soon as practicable after the contravention.

342. The notification requirement in clause 81 facilitates Commonwealth Ombudsman oversight of agency use of the IPO regime as it relates to control orders. This additional notification requirement in respect of control order IPOs is necessary given the extraordinary nature of the control order monitoring powers. Subclause 81(3) seeks to clarify that if an agency fails to comply with the administrative requirements in subclauses (1) or (2), the validity of the order remains unaffected. The purpose of this clause is to ensure that an administrative oversight does not result in the potential for invalidity.

343. Control order IPO agencies are required to comply with their reporting obligations in this clause and more broadly throughout the Bill. However, subclause 81(3) ensures that where an administrative reporting obligation is included and contravened, the contravention would not undermine the validity of the order, which could result in perverse outcomes eventuating, for instance the inability to obtain information relevant to preventing a terrorist attack or subsequent prosecution relating to that potential attack.

344. Control order IPO agencies will be subject to strict oversight by the Commonwealth Ombudsman, as is the case for existing agencies that can apply for a control order warrant. Failure to comply with obligations in clause 81 may result in the investigation and public reporting on agency practices. This is consistent with current practices under the TIA Act for domestic control order warrants.

345. Clause 81 has been drafted to reflect section 3ZZTE of the Crimes Act 1914 and section 59B of the TIA Act as it is intended the reporting requirements that already exist for monitoring warrants are maintained under the new IPO regime.

Part 4 - International production orders relating to national security

Division 1 - Introduction

346. Clause 82 provides a simplified outline of Part 4 of Schedule 1, as introduced by the Bill.

Division 2 - International production orders relating to interception: national security

Subdivision A - Applications

347. Clause 83 sets out where the Organisation can apply for a national security IPO relating to interception. Subclause 83(1) provides that the Organisation can apply to a nominated AAT Security Division member for an IPO in respect of one or more individual transmission services, or one or more individual message/call application services. This is intended to capture technologies or services associated with the making of communications by means of transmission services. For example, a message or call application service, such as Voice-over-IP services, which permit persons to be able to communicate over an internet service.

348. Paragraph 83(1)(b) requires that where the Organisation makes an application to a nominated AAT Security Division member, it must be directed to a prescribed communications provider as defined under clause 2 (definitions).

349. Subclause 83(2) requires that the Organisation nominate a designated international agreement as specified in the regulations under clause 3.

350. Subclause 83(3) provides an IPO may be applied for on the Organisation's behalf by positions within the Organisation - namely, the Director-General of Security, or Deputy Director-General of Security, or a senior position-holder in relation to whom an authorisation is in force under subclause 83(4).

351. Subclause 83(5) provides that the Organisation can only apply to a nominated AAT Security Division member with the consent of the Attorney-General. The consent provision recognises the role of the Attorney-General as the First Law Officer and his or her ordinary role in approving intelligence collection powers of the Organisation. Whilst ordinarily these powers would not require the authorisation of a nominated AAT Security Division member, the consent by the Attorney-General, and subsequent application to the nominated AAT Security Division member is required to ensure flexibility in working with the designated international agreements.

352. Subclauses 83(6) and 83(7) set out matters regarding which the Attorney-General must be satisfied before consenting to an application being made for an IPO in respect of one or more individual transmission services, or individual message/call application services respectively, under this clause. The Attorney-General must be satisfied that:

•

there are reasonable grounds for suspecting that one or more individual transmission services, or individual message/call application services, are being or likely to be:

i.

used by a person engaged in, or reasonably suspected of being engaged in, or of being likely to engage in, activities prejudicial to security, or

ii.

the means by which the person receives or sends communications, messages etc. from or to another person who is engaged in, or reasonably suspected of being engaged in, or of being likely to engage in, activities prejudicial to security (another person captures B-Party interception); or

iii.

used for purposes prejudicial to security; and

•

there are reasonable grounds for suspecting that the information that would be likely to be obtained by the use of the IPO communications, messages sent or received, voice calls made or received, or video calls made or received, would likely assist in the Organisation in carrying out its function of obtaining intelligence relating to security.

The criteria at subclauses 83(6) and 83(7) are consistent with a subset of broader criteria about which the nominated AAT member must be satisfied.

353. Subclause 83(8) requires the Attorney-General's consent to be in writing, unless as per subclause 83(9) the person proposing to make the application considers urgent circumstances make it necessary for the Attorney-General to consent orally to the application. The Attorney-General must be satisfied of the matters set out in clause 83(6) or (7) when considering a request for their consent, whether consent is given in writing or orally.

354. Subclause 83(9A) applies where a person requests the Attorney-General consent orally to making an application for a national security IPO relating to interception on behalf of the Organisation. Subclause 83(9A) provides that, at the time of seeking the Attorney-General's oral consent, the person must inform the Attorney-General of the particulars of the urgent circumstances because of which the person thought it necessary for the Attorney-General to consent orally.

355. The intention of subclause 83(9A) is to ensure the Attorney-General is apprised of the particulars of the urgent circumstances necessitating the oral consent at the time the request for consent is made, as well as requiring this information in a written report pursuant to subclause 83(10) within 3 working days after consent has been given.

356. Subclause 83(10) provides that, in the event the Attorney-General's oral consent is given, the person must give the Attorney-General a written report setting out the urgent circumstances, and whether the application was granted, withdrawn or refused, within 3 working days of the relevant outcome. Subclause 83(11) provides that the Organisation must give the IGIS a copy of the report within the same timeframe.

What form must an application for an International Production Order relating to interception be in?

357. Clause 84 sets out the form of the application. It must be in writing unless the person applying for the IPO thinks it is necessary, because of urgent circumstances, to make the application by telephone.

Contents of application

358. Clause 85 provides the application will state the name of the person making the application on the Organisation's behalf and a statement to the effect that the application is made by the Organisation. In determining whether to include an Organisation employee's name on the application, the Organisation will have due regard for any restrictions or limitations as to the name requirements under the Australian Security Intelligence Organisation Act 1979 or other Commonwealth legislation.

359. Subclauses 86(3) and (4) provide that the affidavit should set out information regarding previous IPOs sought by the Organisation in relation to the same services. The inclusion of this information in the affidavit is intended to assist the AAT Security Division member's consideration of the matters listed in subclauses 89(5).

360. Clause 87 sets out the requirements of the information that must be given to a nominated AAT Security Division member in connection to a telephone application. The following information must be provided:

•

particulars of the urgent circumstances because of which the person making the application thinks it necessary to make the application by telephone;

•

each matter that, had the application been made in writing, what would have been included in that application in terms of content of the application and the accompanying affidavit; and,

•

must be given in writing or orally as the nominated AAT Security Division member directs.

361. Clause 88 provides the nominated AAT Security Division member with ability to require further information, and the form in which the further information must be given.

Subdivision B - International production orders relating to interception

Issue of an International Production Order relating to interception - national security

362. Subclause 89(1) provides an IPO relating to interception may be made in respect of one or more individual transmission services, or one or more individual message/call application services. The application must direct the order to a prescribed communications provider.

363. Subclause 89(2) provides a nominated AAT Security Division member may issue an IPO if he or she is satisfied (paragraphs 89(2)(a)-(h)):

•

in the case of an application relating to one or more individual transmission services - that there are reasonable grounds that the prescribed communications provider either owns or operates a telecommunications network that is, or is likely to be, used to supply the transmission services the order relates; or the prescribed communications provider supplies those individual transmission services;

•

In the case of an application concerning individual message/call application services - that there are reasonable grounds for suspecting that the prescribed communications provider provides those individual message/call application services;

•

that the person who made the application on behalf of the Organisation reasonably suspects that the prescribed communications provider is based in, or operates in, a foreign country that is a party to the designated international agreement nominated in the application;

•

that subdivision A has been complied with in relation to the application (general application provisions and consent of Attorney-General);

•

where the application was made by telephone, that the urgency of the situation justified a telephone application;

•

there are reasonable grounds for suspecting that one or more individual transmission services, or individual message/call application services, are being or likely to be:

i.

used by a person engaged in, or reasonably suspected of being engaged in, or of being likely to engage in, activities prejudicial to security, or

ii.

the means by which the person receives or sends communications, messages etc. from or to another person who is engaged in, or reasonably suspected of being engaged in, or of being likely to engage in, activities prejudicial to security (another person captures B-Party interception); or

iii.

used for purposes prejudicial to security.

•

there are reasonable grounds for suspecting that the information would be likely to be obtained by the use of the IPO communications, messages sent or received, voice calls made or received, or video calls made or received, would likely assist in the Organisation in carrying out its function of obtaining intelligence relating to security.

364. Subclause 89(2) further provides a nominated AAT Security Division member may issue an order directing a prescribed communications provider to:

•

In the case of an application in respect of one or more individual transmission services - intercept communications during a specified period, make those intercepted communications available to the Organisation, and disclose specified telecommunications data that relates to those intercepted communications and/or the services themselves.

•

In the case of an application in respect of one or more individual message/call application services - intercept messages sent or received, voice calls made or received, or video calls made or received, using those services during a specified period, and make those intercepted messages, voice calls or video calls available to the Organisation, and disclose specified telecommunications data that relates to those intercepted messages, voice calls or video calls, and/or the services themselves.

365. Clause 89 also inserts a note that clarifies that subclauses (7) and (8) restrict the issuing of IPOs if subparagraphs 89(2)(h)(ii) or (i)(ii) apply.

Period specified in the International Production Order

366. Subclause 89(3) provides an IPO must not begin in terms of interception of communications, or intercept messages sent or received, voice calls made or received, or video calls made or received before the time when the order is given to the prescribed communications provider. This recognises that the authority of the IPO must not permit interception activities until the IPO is given to the prescribed communications provider.

367. Subclause 89(4) provides the period specified in an IPO for the purposes of subparagraph (2)(i)(i) or (j)(i) must not be longer than 3 months if subparagraph 89(2)(e)(ii) or (i)(ii) applies, or 6 months otherwise. The period specified in an IPO seeking B-Party interception is half that applicable to a non B-Party interception IPO, as B-Party interception inherently involves a potential for greater privacy intrusion of persons who may not be involved in the commission of an offence.

Matters to which nominated AAT Security Division member must have regard

368. Subclause 89(5) sets out the matters to which a nominated AAT Security Division member must have regard when considering whether to issue an IPO in respect of one or more individual transmission services or individual message/call application services. Paragraphs 89(5)(a) and 89(5)(b) set out the list of matters to which the member must have regard:

•

to what extent methods of carrying out the Organisation's function of obtaining intelligence relating to security that are less intrusive than intercepting, have been used by, or are available to, the Organisation;

•

how much the use of such methods would be likely to assist the Organisation in carrying out its function of obtaining intelligence relating to security in so far as carrying out that function relates to the target;

•

how much the use of such methods would be likely to prejudice the Organisation in carrying out this function, whether because of delay or for any other reason in so far as carrying out that function relates to the target; and,

•

any such other matters as the nominated AAT Security Division member considers relevant.

369. This means that where there are other methods to access the necessary information that would be less intrusive on the privacy of the person, the Organisation may be required to turn to those means instead of seeking an IPO for interception activities.

370. While an application by the Organisation does not need to be assessed with respect to other privacy considerations, the Organisation must conduct their security intelligence activities in accordance with Ministerial Guidelines. This includes, among other things, that the Organisation's actions should be proportionate to the gravity of the threat posed and the probability of its occurrence, and that inquiries and investigations should be done with as little intrusion into privacy as possible.

Restriction on issuing order

371. Subclauses 89(6)(a) and 89(6)(b) provide the nominated AAT Security Division member must not issue an IPO in a case where subparagraph 89(2)(e)(ii) applies unless the member is satisfied that the Organisation has exhausted all other practicable methods of identifying the individual transmission services or message/call application services used, or likely to be used, by the target, or where the interception would not otherwise be possible. This reflects the additional privacy implications on persons not necessarily the subject of the specific investigation or intelligence activities but those that may be communicating with the person of interest.

Content of an International Production Order

372. Clause 90 sets out the content of a national security IPO relating to interception in response to an application made by the Organisation. The order must be signed by the nominated AAT Security Division member who issued the order and include matters including the name of the relevant prescribed communications provider and designated international agreement, and the applicable telecommunications identifiers (such as telecommunications service numbers, account holder names, or specific URLs unique to account holders).

373. Subclause 90(4) provides in the case of an order that requires interception relating to communications - the order may require the provider to intercept those communications in a specified way, and make those intercepted communications available to the Organisation in a specified way. This ensures intercepted communications are made available in a way that facilitates effective use of information provided in response to an order. For example, it may require that the prescribed communications provider provides the intercepted communications in a certain format to assist the Organisation in processing the intercepted communications.

374. Subclause 90(5) provides a requirement in terms of subclause 90(4) may require that the intercepted communications be made available directly to the Organisation, or require that the intercepted communications be made available to the Organisation indirectly via the Australian Designated Authority. This ensures maximum flexibility for the Organisation, the Australian Designated Authority and the prescribed communications providers to decide on an approach that achieves the goal of providing intercepted communications effectively, efficiently and in line with any designated international agreement requirements.

375. Subclauses 90(6) and (7) provide the same where it relates to an IPO that directs a prescribed communications provider to intercept messages, voice calls or video calls from a message respectively.

376. Subclause 90(8) provides where an order directs a prescribed communications provider to disclose telecommunications data to the Organisation, the order may require the provider to do so in a specified way. Subclause 90(9) provides an order may require that the telecommunications data be made available directly to the Organisation, or require that the intercepted communications be made available to the Organisation indirectly via the Australian Designated Authority.

377. Subclause 90(10) provides the reference to specified way in clause 90 may deal with matters of timing. A note is inserted in to the subclause to provide an example requirement.

Issue of a further International Production Order

378. Clause 91 sets out the limitations for when a further IPO can be sought for interception activities already covered by an earlier IPO. A further IPO can be issued so long as the period specified in the further order begins after the end of the period specified in the original order. This is provided for both transmission services and message/call application services (subclauses (1) and (2) respectively).

379. For example, the original order has a specified period of 30 days. The Organisation would be able to obtain a further IPO during that 30 days as long as the period specified would occur after the expiry of those 30 days. It is expected that the Organisation should be able to obtain sequential IPOs with no gaps between the expiry and the beginning of the new IPO to ensure that communications are not missing or lost due to international time and date differences.

Division 3 - International production orders relating to stored communications: national security

Subdivision A - Applications

380. Subdivision A (clauses 92 - 97) sets out general requirements that apply for a valid application by the Organisation to a nominated AAT Security Division member for an IPO relating to stored communications.

381. Clause 92 sets out where the Organisation can apply for a national security IPO relating to interception. Subclause 92(1)(a) provides that the Organisation can apply to a nominated AAT Security Division member for an IPO in respect of a particular person. This means that IPOs are more similar to named person interception warrants than service interception warrants (consistent with the existing domestic stored communications regime under Chapter 3). For example, an IPO may authorise access to all messages associated with a single messaging application and all emails sent to and from a specified email address.

382. Subclause 92(1)(b) requires the IPO be directed to a prescribed communications provider as defined under clause 2 (definitions).

383. Subclause 92(2) requires that an application must nominate a designated international agreement.

384. Subclause 92(3) provides an IPO may be applied for by positions within the Organisation - namely, the Director-General of Security, or Deputy Director-General of Security, or a senior position-holder in relation to whom an authorisation is in force under subclause 92(4).

385. Subclause 92(5) provides that the Organisation can only apply to a nominated AAT Security Division member with the consent of the Attorney-General. The consent provision recognises the role of the Attorney-General as the First Law Officer and his or her ordinary role in approving intelligence collection powers of the Organisation. Whilst ordinarily these powers would not require the authorisation of a nominated AAT Security Division member, the consent by the Attorney-General, and subsequent application to the nominated AAT Security Division member is required to ensure flexibility in working with the designated international agreements.

386. Subclause 92(6) provides the Attorney-General must not consent to the making of the application unless satisfied that:

•

there are reasonable grounds for suspecting that the person is engaged in, or is likely to engage in, activities prejudicial to security; and

•

information that would be likely to be obtained would be likely to assist the Organisation in carrying out its function of obtaining intelligence relating to security.

387. The criteria at subclause 92(6) are consistent with a subset of broader criteria about which the nominated AAT member must be satisfied.

388. Subclause 92(7) requires the Attorney-General's consent to be in writing, unless as per subclause 92(8) the person proposing to make the application considers urgent circumstances make it necessary for the Attorney-General to consent orally to the application. The Attorney-General must be satisfied of the matters set out in clause 92(6) when considering a request for their consent, whether consent is given in writing or orally.

381. Subclause 92(8A) applies where a person requests the Attorney-General consent orally to making an application for a national security IPO relating to stored communications on behalf of the Organisation. Subclause 92(8A) provides that, at the time of seeking the Attorney-General's oral consent, the person must inform the Attorney-General of the particulars of the urgent circumstances because of which the person thought it necessary for the Attorney-General to consent orally.

382. The intention of subclause 92(8A) is to ensure the Attorney-General is apprised of the particulars of the urgent circumstances necessitating the oral consent at the time the request for consent is made, as well as requiring this information in a written report pursuant to subclause 92(9) within 3 working days after consent has been given.

383. Subclause 92(9) provides that, in the event the Attorney-General's oral consent is given, the person must give the Attorney-General a written report setting out the urgent circumstances, and whether the application was granted, withdrawn or refused, within 3 working days of the relevant outcome. Subclause 92(10) provides that the Organisation must give the IGIS a copy of the report within the same timeframe.

What form must an application for an International Production Order relating to stored communications be in?

384. Clause 93 requires that applications must be in writing, unless urgent circumstances require an application to be made by telephone. An application by telephone must only be made where the person making the application thinks it necessary, because of urgent circumstances, to make the application by telephone. Urgent circumstances could include, for example, potential loss of intelligence, loss of life or serious damage to property.

Contents of application

385. Clause 94 provides a written application will state the name of the Organisation and the applicant. Clause 95 provides a written application will be accompanied by one or more affidavits that set out the facts and other grounds on which the application is based. Clause 96 provides in addition to this information, a telephone application for an IPO must include details of the urgent circumstances that led to a telephone application.

386. Clause 97 provides the nominated AAT Security Division member with the ability to require further information in connection with the application, and the form in which the further information must be given.

Subdivision B - International production orders relating to stored communications

387. Clause 98 provides for the issuing of a national security IPO relating to stored communications, by a nominated AAT Security Division member. Subclause 98(1) sets out that an IPO applies in respect of a particular person and must be directed to a prescribed communications provider.

388. Subclause 98(2) sets out the criteria for issuing the IPO. Subclause 98(2) provides the nominated AAT Security Division member may issue an IPO if satisfied by the information given that:

•

there are reasonable grounds for suspecting that the relevant person is engaged in, or is likely to engage in, activities prejudicial to security,

•

there are reasonable grounds for suspecting that the prescribed communications provider holds any of the stipulated stored communications,

•

the person who made the application on behalf of the Organisation reasonably suspects that the prescribed communications provider is based in, or operates in, a foreign country that is a party to the designated international agreement nominated in the application,

•

Subdivision A has been complied with (general application provisions and the consent of the Attorney-General),

•

in the case of a telephone application - because of urgent circumstances, it was necessary to make the application by telephone, and

•

the information that would be likely to be obtained by making a copy of the stored communications would be likely to assist the Organisation in carrying out its function of obtaining intelligence relating to security.

389. The nominated AAT Security Division member may issue an order which directs the prescribed communications provider to do the actions set out in subclauses 98(2)(f) - (m). This includes making copies of the stored communications, making that copy available to the Organisation, and to disclose specified telecommunications data.

Matters to which nominated AAT Security Division member must have regard

390. Subclause 98(3) provides the matters to which the nominated AAT Security Division member must have regard in deciding whether to issue an IPO relating to stored communications. The member is required have regard to:

•

to what extent methods of carrying out the Organisation's function of obtaining intelligence relating to security that are less intrusive have been used by, or are available to, the Organisation;

•

how much the use of such methods would be likely to assist the Organisation in carrying out its function of obtaining intelligence relating to security in relation to the specific purposes of the IPO;

•

such other matters (if any) as the nominated AAT Security Division member considers relevant.

What must the International Production Order contain?

391. Clause 99 sets out what must be contained in the IPO. The IPO must be signed by the nominated AAT Security Division member who issued it.

392. Subclauses 99(3) - (8) set out specific requirements, including that the order must set out the date on which the order was issued, the name of the prescribed communications provider, and the name of the designated international agreement.

393. Subclause 99(4) provides an order may require a prescribed communications provider to make a copy of stored communications available to the Organisation in a specified way. This could include being provided in a certain format. Subclause 99(5) provides subclause 99(4) may require that a copy of stored communications be made available to the Organisation directly or indirectly via the Australian Designated Authority. The intention is to allow flexibility for the Australian Designated Authority, the prescribed communications provider and the Organisation in determining how best to provide the copy of the stored communications in response to an IPO.

394. Subclauses 99(6) and 99(7) provide for similar requirements and flexibility in terms of the disclosure of telecommunications data.

395. Subclause 99(8) provides a specified way may deal with matters of timing. This could include requirements on the frequency of transmitting the data.

Issue of further International Production Order

396. Clause 100 provides for a further IPO for stored communications in respect of a person, or directed to a prescribed communications provider. Noting that a stored communications IPO is executed at a point in time (communications that are held at the time the prescribed communications provider receives the order), further IPOs may be required. The Organisation would be required to make a new application in line with the requirements of Subdivision A.

Division 4 - International production orders relating to telecommunications data: national security

Subdivision A - Applications

397. Subdivision A (clauses 101 - 106) sets out general requirements that apply for a valid application by the Organisation to a nominated AAT Security Division member for an IPO relating to telecommunications data.

398. Subclause 101(1) sets out where the Organisation can apply to a nominated AAT Security Division member for an IPO relating to telecommunications data.

399. Paragraph 101(1)(a) provides this can only be done in respect of a particular person. This means that IPOs are more similar to named person interception warrants than service interception warrants.

400. Paragraph 101(1)(b) requires that where the Organisation makes an application, it must be directed to a prescribed communications provider as defined under clause 2 (definitions).

401. Subclause 101(2) requires that an application must nominate a designated international agreement.

402. Subclause 101(3) provides an IPO may be applied by positions within the Organisation - namely, the Director-General of Security, or Deputy Director-General of Security, or an eligible position-holder in relation to whom an authorisation is in force under subclause 101(4).

What form must an application for an International Production Order relating to telecommunications data be in?

403. Clause 102 requires that applications must be in writing, unless urgent circumstances require an application to be made by telephone. An application by telephone must only be made where the person making the application thinks it necessary, because of urgent circumstances, to make the application by telephone. Urgent circumstances could include, for example, potential loss of intelligence, loss of life or serious damage to property.

Contents of application

404. Clause 103 provides a written application will state the name of the Organisation and the applicant. Clause 104 provides a written application will be accompanied by one or more affidavits that set out the facts and other grounds on which the application is based. Clause 105 provides in addition to this information, a telephone application for an IPO must include details of the urgent circumstances that led to a telephone application.

405. Clause 106 provides the nominated AAT Security Division member with the ability to require further information in connection with the application, and the manner in which it must be given.

Subdivision B - International production orders relating to telecommunications data

406. Subdivision B (clauses 107 to 109) sets out the scope and content of a valid IPO for telecommunications data and the general requirements that must be satisfied before a nominated AAT Security Division member may issue an order.

407. Subclause 107(1) sets out the scope of an IPO when the Organisation applies for an IPO for telecommunications data to a nominated AAT Security Division member.

408. Subclause 107(1)(a) provides this can only be done in respect of a particular person. Subclause 107(1)(b) requires that the application must be directed to a prescribed communications provider as defined under clause 2 (definitions).

409. Subclause 107(2) provides a nominated AAT Security Division member may issue an IPO if he or she is satisfied of the following:

•

there are reasonable grounds for suspecting that the prescribed communications provider holds, or is likely to commence to hold any of the following telecommunications data:

i.

telecommunications data that relates to the communications the relevant person has made using an individual transmission service supplied by the prescribed communications providers;

For example, the internet identifier (information that uniquely identifies a person on the Internet) assigned to the user by the provider.

ii.

telecommunications data that relates to an individual transmission service supplied using a telecommunications network owned or operated by the prescribed communications provider, where the individual transmission service is used, or likely to be used, by the relevant person;

For example, the number called or texted for a mobile service.

iii.

telecommunications data that relates to an individual transmission service supplied by the prescribed communications provider, where the individual transmission service is used, or is likely to be used, by the relevant person;

For example, billing and account information for an internet account.

iv.

telecommunications data that relates to messages sent or received by the relevant person using an individual message/call application service provided by the prescribed communications provider;

For example, the destination account that a message was sent to on an instant messaging mobile application.

v.

telecommunications data that relates to voice calls made or received by the relevant person using an individual message/call application service provided by the prescribed communications provider;

For example, details of voice calls made or received by a particular telecommunications application account.

vi.

telecommunications data that relates to video calls made or received by the relevant person using an individual message/call application service provided by the prescribed communications provider;

For example, details of video calls made or received by a particular video chat account.

vii.

telecommunications data that relates to an individual message/call application service provided by the prescribed communications provider, where the individual message/call application service is used, or is likely to be used, by the relevant person;

For example, account information for an instant messaging account.

viii.

telecommunications data that relates to material that has been uploaded by the relevant person for storage or back up by a storage/back up service provided by the prescribed communications provider;

For example, the date and time in which material was uploaded to a cloud storage service.

ix.

telecommunications data that relates to material that has been posted by the relevant person on a general electronic content service provided by the prescribed communications provider.

For example, the Internet Protocol address associated with a particular post in a chat forum.

•

that the person who made the application on behalf of the Organisation reasonably suspects that the prescribed communications provider is based in, or operates in, a foreign country that is a party to the designated international agreement nominated in the application.

•

Subdivision A has been complied with in relation to the provisions of general application;

•

in the case of a telephone application - that it was necessary due to urgent circumstances;

•

disclosure of the telecommunications data would be in connection with the performance by the Organisation of its functions.

410. Subclause 107(2) further provides a nominated AAT Security Division member may issue an order directing the prescribed communications provider to:

•

In the case of an application in respect of telecommunications data is held by the prescribed communications provider when the International Production Order comes into force - disclose any such telecommunications data to the Organisation;

•

In the case of an application in respect of telecommunications data commences to be held by the prescribed communications provider commences to be held during a specified period - disclose any such telecommunications data to the Organisation.

411. Subclause 107(3) provides an IPO must not begin in terms of disclosure of telecommunications data before the time when the order is given to the prescribed communications provider. This recognises that the authority of the IPO must not permit disclosure until the IPO is given to the prescribed communications provider.

412. Subclause 107(4) specifies that the period in which an IPO can require disclosure as described under paragraphs 107(2)(f) cannot be longer than 90 days. This is consistent with the period for an authorisation for access to prospective telecommunications data under the existing TIA Act.

413. Subclause 107(5) provides the matters to which the nominated AAT Security Division member must have regard in deciding whether to issue an IPO relating to telecommunications data. The member is required have regard to:

•

to what extent methods of carrying out the Organisation's function of obtaining intelligence relating to security that are less intrusive have been used by, or are available to, the Organisation;

•

how much the use of such methods would be likely to assist the Organisation in carrying out its functions in relation to the specific purposes of the IPO in so far as carrying out that function relates to the target;

•

how much the use of such methods would be likely to prejudice the Organisation in carrying out its functions, whether because of delay or for any other reason in so far as carrying out that function relates to the target;

•

such other matters (if any) as the nominated AAT Security Division member considers relevant.

What must the International Production Order contain?

414. Clause 108 sets out the content of an IPO in response to an application made by the Organisation. The order must be signed by the nominated AAT Security Division member who issued the order and set out the date on which the order was issued, the name of the relevant prescribed communications provider and the name of designated international agreement.

415. Subclause 108(4) provides in the case of an order that requires disclosure of telecommunications data, the order may require the provider to disclose that data in a specified way, and make that data available to the Organisation in a specified way. This ensures telecommunications data is made available in a way that facilitates effective use of information provided in response to an order. For example, it may require that the prescribed communications provider provides the telecommunications data in a certain format to assist law enforcement in processing the telecommunications data.

416. Subclause 108(5) provides a requirement in terms of subclause 108(4) may require that the intercepted communications be made available directly to the interception agency, or require that the telecommunications data is made available to the Organisation indirectly via the Australian Designated Authority. This ensures maximum flexibility for the Organisation, the Australian Designated Authority and the prescribed communications providers to decide on an approach that achieves the goal of providing telecommunications data effectively, efficiently and in line with any designated international agreement requirements.

417. Subclause 108(6) provides the reference to specified way in clause 108 may deal with matters of timing. A note is inserted in to the subclause to provide an example requirement.

418. Clause 109 provides for a further IPO for telecommunications data in respect of a particular person and directed to a prescribed communications provider. This recognises that an IPO for telecommunications data is executed at a point in time and subsequent IPOs may be required to obtain further telecommunications data. The Organisation would be required to make a new application in line with the requirements of Subdivision A.

Part 5 - Giving of international production orders

419. Clause 110 provides a simplified outline of Part 5 of Schedule 1, as introduced by the Bill.

Provision of International Production Orders to Australian Designated Authority-relevant agency

420. Subclause 111(1)(a) provides if an IPO is issued under Part 2 or 3 of the Schedule then the relevant agency that obtained the IPO must give the IPO, or a certified copy of the IPO, to the Australian Designated Authority. In practice, the IPO or certified copy of the IPO may be provided electronically, including through a technical system established between the relevant agency and the Australian Designated Authority.

Review of International Production Orders-relevant agency

421. Subclause 111(1)(b) requires the Australian Designated Authority to consider whether the IPO complies with the designated international agreement nominated in the application for the order. In reviewing an order for compliance with the designated international agreement, the Australian Designated Authority will consider the order against any limitations or restrictions specified in the designated international agreement with the relevant country, such as any limitations on what criminal offences orders can relate to, who may be targeted by an order, what types of data can be sought under an order, and what communications providers an order may be directed to.

422. This review may need to be more detailed, or more cursory, depending on the complexity of the order, and the complexity of the nominated designated international agreement. This review process by the Australian Designated Authority will help to ensure that each designated international agreement is applied in relation to each order that is given pursuant to that particular designated international agreement.

423. Subclause 111(1)(c) provides, if the Australian Designated Authority is satisfied that an IPO complies with the nominated designated international agreement, then the Australian Designated Authority must give the order or a certified copy of the order to the prescribed communications provider to which the order is directed as soon as practicable. In practice, it is anticipated that the time it takes for the Australian Designated Authority to give an order could be affected by whether or not the prescribed communications provider has provided an electronic address for service and the technical capability of prescribed communications providers to receive orders electronically, including through a technical system established between the Australian Designated Authority and the prescribed communications provider.

424. Subclause 111(1)(d) provides, if the Australian Designated Authority is not satisfied that an IPO complies with the nominated designated international agreement, then the Australian Designated Authority must cancel the IPO and return the IPO, or the certified copy of the IPO, to the relevant agency that obtained the IPO. In practice, the IPO, or certified copy of the IPO, may be returned to the relevant agency electronically or through a notification to the relevant agency sent via a technical system established between the relevant agency and the Australian Designated Authority.

425. Subclause 111(1)(d)(iii) provides where the Australian Designated Authority cancels an IPO, it must also provide such advice as the Australian Designated Authority considers appropriate to the relevant agency that obtained the IPO in relation to compliance with the designated international agreement nominated in the IPO.

426. The Australian Designated Authority may choose to provide its advice to the relevant agency at the same time the IPO is returned to the agency, or afterwards. The length, nature and content of this advice is at the discretion of the Australian Designated Authority, and may be determined on a case-by-case basis. In practice, the advice may include advice on the aspects of the IPO that are considered to be inconsistent with the nominated designated international agreement.

427. Subclause 111(2) provides, if the Australian Designated Authority gives a certified copy of an IPO to a prescribed communications provider, then the Australian Designated Authority is taken to have given the IPO to the prescribed communications provider under subclause 111(1). In practice, prescribed communications providers will generally be based in foreign countries and correspondence with prescribed communications providers, including the giving of IPOs, will generally be done electronically. Ensuring that a certified copy of an IPO can be given to a prescribed communications provider will also streamline the time it takes for an IPO to be given and responded to.

When an International Production Order comes into force-relevant agency

428. Subclause 111(3) provides an IPO does not come into force until the Australian Designated Authority gives the order to the prescribed communications provider to which it is directed. This means that the order does not place any legal obligations on the prescribed communications provider under the Schedule until the order has been given to them.

429. Subclause 111(4) provides an order is taken to invoke the designated international agreement nominated in the order at the time it is given to the prescribed communications provider under subclause 111(1). This means that the order does not place any obligations on the prescribed communications provider pursuant to the nominated designated international agreement until the order has been given to them.

Notification of giving of International Production Orders-relevant agency

430. Subclause 111(5) provides, if the Australian Designated Authority gives an order to a prescribed communications provider, then it must also notify the relevant agency that obtained the order that the order has been given. This notification may be made at the same time the order is given to the prescribed communications provider, or afterwards.

431. Subclause 111(6) provides a cancellation under subclause 111(1) must be set out by the Australian Designated Authority in a written instrument.

432. Subclause 111(7) provides that the relevant agency that applied for the order may give further information to the Australian Designated Authority to assist the Australian Designated Authority in making a decision under this clause. This is intended to enable the relevant agency to provide additional information to the Australian Designated Authority that relates to the order's compliance with requirements of the designated international agreement.

Provision of International Production Order to Australian Designated Authority-Organisation

433. Subclause 112(1)(a) provides if an order is issued under Part 4 of the Schedule then the Organisation must give the order, or a certified copy of the order, to the Australian Designated Authority. In practice, the order or certified copy of the order may be provided electronically, including through a technical system established between the Australian Designated Authority and the Organisation.

Review of International Production Orders-Organisation

434. Subclause 112(1)(b) requires the Australian Designated Authority to consider whether the IPO complies with the designated international agreement nominated in the application for the order. In the reviewing an order for compliance with the designated international agreement, the Australian Designated Authority will consider the order against any limitations or restrictions specified in the designated international agreement with the relevant country, such as any limitations on what criminal offences orders can relate to, who may be targeted by an order, what types of data can be sought under an order, and what communications providers an order may be directed to. This review may need to be more detailed, or more cursory, depending on the complexity of the order, and the complexity of the nominated designated international agreement.

435. This review process by the Australian Designated Authority will help to ensure that each designated international agreement is consistently applied in relation to each order that is given pursuant that designated international agreement.

436. Subclause 112(1)(c) provides, if the Australian Designated Authority is satisfied that an order complies with the nominated designated international agreement, then the Australian Designated Authority must give the order or a certified copy of the order to the prescribed communications provider to which the order is directed as soon as practicable. In practice, it is anticipated that the time it takes for the Australian Designated Authority to give an order could be affected by whether or not the prescribed communications provider has provided an electronic address for service and the technical capability of prescribed communications providers to receive orders electronically, including through a technical system established between the Australian Designated Authority and the prescribed communications provider.

437. Subclause 112(1)(d) provides, if the Australian Designated Authority is not satisfied that an order complies with the nominated designated international agreement, then the Australian Designated Authority must cancel the order and return the order, or the certified copy of the order, to the Organisation. In practice, the order, or certified copy of the order, may be returned to the Organisation electronically or through a notification sent via a technical system established between the Australian Designated Authority and the Organisation.

438. Subclause 112(1)(d)(iii) provides, where the Australian Designated Authority cancels an order, it must also provide such advice to the Organisation as the Australian Designated Authority considers appropriate in relation to compliance with the designated international agreement nominated in the order.

439. The Australian Designated Authority may choose to provide its advice to the Organisation at the same time the order is returned to the agency, or afterwards. The length, nature and content of this advice is at the discretion of the Australian Designated Authority, and may be determined on a case-by-case basis. In practice, the advice may include advice on the aspects of the order that are considered to be inconsistent with the nominated designated international agreement.

440. Subclause 112(2) provides, if the Australian Designated Authority gives a certified copy of an order to a prescribed communications provider, then the Australian Designated Authority is taken to have given the order to the prescribed communications provider under subclause 112(1). In practice, prescribed communications providers will generally be based in foreign countries and correspondence with prescribed communications providers, including the giving of orders, will generally be done electronically. Ensuring that a certified copy of an order can be given to a prescribed communications provider will also streamline the time it takes for an order to be given and responded to.

When an International Production Order comes into force-Organisation

441. Subclause 112(3) provides an order does not come into force until the Australian Designated Authority gives the order to the prescribed communications provider to which it is directed. This means that the order does not place any legal obligations on the prescribed communications provider under the Schedule until the order has been given to them.

442. Subclause 112(4) provides an order is taken to invoke the designated international agreement nominated in the order at the time it is given to the prescribed communications provider under subclause 112(1). This means that the order does not place any obligations on the prescribed communications provider pursuant to the nominated designated international agreement until the order has been given to them.

Notification of giving of International Production Orders-Organisation

443. Subclause 112(5) provides, if the Australian Designated Authority gives an order to a prescribed communications provider, then it must also notify the Organisation that the order has been given. This notification may be made at the same time the order is given to the prescribed communications provider, or afterwards.

444. Subclause 112(6) provides a cancellation under subclause 112(1) must be set out by the Australian Designated Authority in a written instrument.

445. Subclause 112(7) provides that the Organisation may give further information to the Australian Designated Authority to assist the Australian Designated Authority in making a decision under this clause. This is intended to enable the Organisation to provide additional information to the Australian Designated Authority that relates to the order's compliance with requirements of the designated international agreement.

Part 6 - Revocation of international production orders

446. Clause 113 provides a simplified outline of Part 6 of Schedule 1, as introduced by the Bill.

Revocation of International Production Orders-relevant agency

447. Clause 114 provides for revocation of IPOs by the relevant agency.

448. Subclause 114(1) is with respect to IPOs issued under Part 2, or Part 3, of the Schedule, which relates to enforcement of the criminal law or control orders respectively. If the IPO is in force, and it was issued in response to an application made by a relevant agency, then the chief officer of the agency may revoke the order. The chief officer must revoke the order if satisfied that the grounds on which the order was issued have ceased to exist. This mechanism is designed to avoid any doubt on the status of an IPO when the grounds for issuing an order are no longer valid. Beyond ensuring privacy is relevantly protected in these circumstances, the provision will also allow for more accurate reporting of IPOs.

449. Subclause 114(2) requires that a revocation under this provision be set out in a written instrument.

Giving of instrument of revocation-relevant agency

450. Clause 115 sets out the requirements for the giving of an instrument of revocation by a relevant agency.

451. Subclause 115(1) provides if an IPO is revoked pursuant to clause 114 the relevant agency must give the instrument of revocation to the Australian Designated Authority, and do so as soon as practicable after the order is revoked. The Australian Designated Authority must give the instrument of revocation to the prescribed communications provider to whom the order is directed, and do so as soon as practicable after it has received the instrument of revocation. This will ensure a provider that is issued an IPO that is subsequently revoked becomes aware of the revocation and cease transmitting any relevant electronic information.

452. Subclause 115(3) provides the revocation takes effect when the instrument of revocation is given to the prescribed communications provider.

Revocation of International Production Orders-Organisation

453. Clause 116 provides for revocation of IPOs issued to the Organisation.

454. Subclause 116(1) is with respect to IPOs issued under Part 4 of Schedule 1 of the TIA Act, which relate to national security. If the IPO is in force, then the Director-General of Security may revoke the order. The Director-General of Security must revoke the order if satisfied that the grounds on which the order was issued have ceased to exist.

455. Subclause 116(2) requires that a revocation under this provision be set out in written instrument.

Giving of instrument of revocation-Organisation

456. Subclause 117 sets out the requirements for the giving of an instrument of revocation by the Organisation.

457. Subclause 117(1) requires that if an IPO is revoked pursuant to clause 116 by the Director-General of Security the Organisation must give the instrument of revocation to the Australian Designated Authority, and do so as soon as practicable after the order is revoked.

458. Subclause 117(2) requires that the Australian Designated Authority must give the instrument of revocation to the prescribed communications provider to whom the order is directed, and do so as soon as practicable after it has received the instrument of revocation.

459. Subclause 117(3) provides the revocation takes effect when the instrument of revocation is given to the prescribed communications provider.

Delegation by the chief officer of a relevant agency

460. Subclause 118(1) provides the chief officer of a relevant agency may delegate any or all powers under this Part to a certifying officer of the agency. Subclause 118(2) provides the delegate must comply with any directions of the chief officer when performing functions, or exercising powers under a delegation under subclause 118(1).

Delegation by the Director-General of Security

461. Subclause 119(1) provides the Director-General of Security may delegate any or all powers under this Part to a Deputy Director-General of Security or an Organisation employee. Subclause 119(2) provides the delegate must comply with any directions of the Director-General of Security when performing functions, or exercising powers under a delegation under subclause 119(1).

462. The purpose of the delegation powers at subclauses 118 and 119 is to enable appropriate persons to perform functions or powers related to revocation of IPOs, streamlining processes in order to assist the relevant agency or the Organisation to discharge its functions.

Part 7 - Objections to, and cancellation of, international production orders

463. Clause 120 provides a simplified outline of Part 7 of Schedule 1, as introduced by the Bill.

Objections by prescribed communications providers

464. Clause 121 provides a prescribed communications provider may object to an IPO.

465. Subclause 121(1) provides the prescribed communications provider to which an IPO is directed may, by written notice given to the Australian Designated Authority, object to the order on the grounds that, in the view of the prescribed communications provider, the order does not comply with the designated international agreement nominated in the application for the order. For example, if the provisions of the designated international agreement place restrictions on the types of providers that Australian orders can be issued to, and the provider considers it is not a provider covered under the agreement, then it could raise an objection on that basis.

466. Subclause 121(2) requires that the written notice must be given to the Australian Designated Authority within a reasonable time after the IPO is given to the prescribed communications provider. The written notice must also set out the reasons why the provider considers that the order does not comply with the nominated designated international agreement.

467. The ability of a prescribed communications provider to object to an IPO under clause 121 is in addition to any other judicial, administrative or other review rights or remedies that may be available to the provider under Australian law.

Cancellation of International Production Orders

468. Clause 122 provides for the cancellation of an IPO by the Australian Designated Authority.

469. Subclause 122(1) provides the Australian Designated Authority may cancel an IPO, including prior to or after giving it to a prescribed communications provider. In practice, the Australian Designated Authority may decide to cancel an order for a range of reasons including, for example, because the Australian Designated Authority considers it is in the public interest to do so, or following dispute resolution with the prescribed communications provider or the government of a foreign country. Upon cancellation, the IPO will cease to be in force.

470. Subclause 122(2) provides a cancellation under subclause 122(1) must be set out in a written instrument.

471. Subclause 122(3) provides, if an IPO is cancelled under subclause 122(1), and the order was issued under Part 2 or Part 3 in response to an application by a relevant agency, the Australian Designated Authority must inform the chief officer of the relevant agency as soon as practicable after cancelling the order. If an IPO is cancelled under subclause 122(1), and the IPO was issued under Part 4, the Australian Designated Authority must inform the Organisation of the cancellation as soon as practicable after the cancelling the order.

472. Subclause 122(4) provides, if the Australian Designated Authority gave an IPO to the prescribed communications provider to whom the order is directed, and the order was subsequently cancelled pursuant to subclause 122(1), the Australian Designated Authority must give the instrument of cancellation to the prescribed communications provider as soon as practicable after cancelling the order.

473. Subclause 122(5) provides, if the instrument of cancellation is required to be given to the prescribed communications provider, then a cancellation under subclause 122(1) takes effect when the instrument is given. This is intended to ensure the prescribed communications provider is aware of the cancellation and can cease complying with the order. Otherwise, the cancellation takes effect from when it is made.

Part 8 - Compliance with international production orders

474. Part 8 establishes a framework for compliance with IPOs.

475. Clause 123 provides a simplified outline of Part 8 of Schedule 1, as introduced by the Bill.

476. Clause 124 provides, if an IPO is given to the prescribed communications provider to whom it is directed, and is in force, and the prescribed communications provider meets the enforcement threshold, the prescribed communications provider must comply with the order to the extent that it is capable of doing so. The item provides failure to do so attracts a civil penalty of 238 penalty units. Non-compliance with an IPO may jeopardise law enforcement or national security objectives, including resulting in the destruction of material evidence. Accordingly, the penalty is appropriate to achieve the primary aim of deterrence from non-compliance. An IPO will not be considered in force if it has been revoked or cancelled.

The enforcement threshold

477. The enforcement threshold requires a certain connection between the prescribed communications provider's service and Australia. While IPOs can be issued broadly to all prescribed communications providers, it is appropriate that the compliance framework attach an enforcement threshold in order to ensure its practical effectiveness.

478. Clause 125 identifies when a prescribed communications provider meets the enforcement threshold referenced in paragraph 124(c). For the purposes of Schedule 1, subclause 125(1) provides that if a prescribed communications provider supplies a service to one or more Australians, or owns or operates a telecommunications network that is used to supply a transmission service to one or more Australians, or one or more Australians have posted material on a general electronic content service provided by a prescribed communications provider, the provider meets the enforcement threshold, unless the provider cannot reasonably be considered to have offered or provided the service on the basis of the service being available to Australians, or if the provider cannot reasonably be considered to have offered or provided the general electronic content service on the basis of the opportunity to post material on the service being available to Australians.

479. Paragraphs 125(1)(a)-(j) set out the specific criteria for each of the prescribed communications providers defined in Part 1. A reference to one or more Australians does not need to mean the person to which the order relates, or any other specific person.

480. This provision sets out a two-part test for the compliance framework to apply. Firstly, the 'minimum contacts' test that requires there be a minimum of one or more Australians using the service, who are ordinarily resident in Australia. The second part sets out when a prescribed communications provider does not meet the threshold, on an exception basis. The second part is a 'reasonableness' test that goes to whether the prescribed communications provider could not reasonably be considered to have offered or provided the service to Australians at the time the order was given. The intention is to permit legal process to be served on a wide array of providers, but to exclude from the compliance framework local services that restrict their services to particular local identifiers for access, or passive services that have no intention that Australians use their services.

481. Subclause 125(2) provides Australian means an individual who is ordinarily resident in Australia. This is consistent with the definition in the Enhancing Online Safety Act 2015.

Enforceable civil penalty provision

482. Subclause 126(1) provides a civil penalty provision in Part 8 of Schedule 1, as introduced by the Bill, is enforceable under Part 4 of the Regulatory Powers (Standard Provision) Act 2014 (RPA Act). The item also includes a note to the effect that Part 4 of the RPA Act allows a civil penalty provision to be enforced by obtaining an order for a person to pay a pecuniary penalty for the contravention of the provision.

Authorised applicant

483. Subclause 126(2) provides, for the purposes of Part 4 of the RPA Act, the Communications Access Co-ordinator is an authorised applicant in relation to a civil penalty provision in Part 8 of Schedule 1. The Communications Access Co-ordinator is an independent officer within the Department of Home Affairs and is further defined in section 6R of the TIA Act.

Relevant court

484. Subclause 126(3) provides, for the purposes of Part 4 of the RPA Act, the Federal Court of Australia and the Federal Circuit Court of Australia are the relevant courts with respect to any proceedings under this Part.

Penalty for a body corporate

485. Subclause 126(4) requires that, with respect to an order sought to enforce a civil penalty under this Part, the penalty for a body corporate must not be more than 200 times the pecuniary penalty specified for the civil penalty provision. This subclause applies paragraph 82(5)(a) of the RPA Act as if "5 times" were omitted and "200 times" were substituted. At the time of introduction, this amounts to a maximum penalty of close to $10 million. This maximum penalty is proportionate, noting the policy objectives to combat serious criminal activity through the Schedule, and will ensure that large, multi-national communications providers that may be issued IPOs pursuant to this Schedule are sufficiently deterred from failing to comply with an order.

Extra-territorial application

486. Subclause 126(5) provides Part 4 of the RPA Act, as it applies in relation to a civil penalty provision in this Part, extends to acts, omissions, matters and things outside Australia.

Part 9 - Reporting and record-keeping requirements

Division 1 - Introduction

487. Clause 127 provides a simplified outline of Part 9, as introduced by the Bill. It briefly describes the framework for recordkeeping and reporting for agencies that can seek an IPO under Parts 2, 3, and 4, and for the Australian Designated Authority.

Division 2 - Reporting requirements

Annual reports by relevant agencies about International Production Orders

488. Clause 128 lists the matters which relevant agencies must report to the Minister with respect to their use of IPOs issued under Parts 2 and 3 of the Bill.

489. The chief officer of a relevant agency must provide the Minister the written report within three months after the end of each financial year. The reports go to the agency's use of, and the effectiveness of the IPOs.

Reports to be made to the Attorney-General by the Director-General of Security

490. Clause 129 requires the Director-General of Security to provide a report to the Attorney-General on the usefulness of information obtained under an IPO for interception activities. These reports are to be provided within 3 months after the sooner of the order expiring, or the time when the order ceases to be in force because of revocation or cancellation.

491. This clause ensures that the Attorney-General has oversight of the use of IPOs relating to interception, for which he or she had consented to an application being made. This reporting measure is only required for IPOs relating to interception, recognising interception as an intrusive method of obtaining intelligence.

Annual reports by the Australian Designated Authority

492. Clause 130 requires the Australian Designated Authority to provide a report to the Minister with respect to IPOs under Parts 2 and 3 of the Bill, including, as relevant, their issue, cancellation, revocation and objection. The Australian Designated Authority will not report on matters relevant to IPOs issued under Part 4 of the Bill, noting these matters will be included in the annual report of the Organisation.

493. The Australian Designated Authority must provide the Minister the written report within three months after the end of each financial year. Subclause 130(2) requires the Minister to cause a copy of the report to be given to the Attorney-General as soon as practicable after receiving the report. This is to provide the Attorney-General oversight of the functions of the Australian Designated Authority, noting the Secretary of the Attorney-General's Department is the Australian Designated Authority.

Annual reports by the Minister

494. Clause 131 requires the Minister to prepare a written report that sets out, for each relevant agency, the information contained in a report made under clause 128, and the information contained in report made by the Australian Designated Authority under clause 130.

495. Subclauses 131(1) and (2) require the report to be prepared as soon as practicable after the end of each financial year, and to be tabled in each House of Parliament by the Minister within 15 sitting days of that House after the report is prepared.

496. So as not to prejudice investigations, subclause 131(3) prohibits the report from being made in a way that is likely to enable the identification of a person.

497. As per item 4 of the Bill, reporting requirements relevant to the Organisation's use of Part 4 of the Bill are inserted into the existing annual reporting provision in the Australian Security Intelligence Organisation Act 1979. The existing annual reporting provision deals with deletions from the report that the Minister considers necessary for security, privacy or other specified reasons.

Deferral of inclusion of information in Ministerial report

498. Clause 132 sets out circumstances where the Minister must not include information that is considered to be control order information in the next Ministerial report. Clause 132 broadly aligns with reporting requirements that are applied to control order information in Australia's current regime. It is intended to recognise that control orders have been sought and made only rarely, with the effect that it is uncommon for there to be more than a limited number of control orders in force at any given time. If the Minister were required to contemporaneously report publicly on control orders, and only a limited number of persons are subject to control orders at that time, annual reporting may effectively reveal that a particular person who is subject to a control order is or is not also subject to covert surveillance.

499. Subclause 132(1) sets out the scope of this clause applies to information included in a report to the Minister under clause 128 by the chief officer of a relevant agency; or under clause 130 by the Australian Designated Authority and information that, apart from this clause, is a required inclusion in the next Ministerial report.

Exclusion of information-relevant agency

500. Subclause 132(2) sets out that, in the case of a report by the chief officer of a relevant agency, the chief officer of the relevant agency is satisfied that the information is control order information, the chief officer must advise the Minister in writing not to include the information in the next Ministerial report.

501. Subclause 132(3) establishes that, if the Minister is satisfied, on the advice of the chief officer, that the information is control order information, the Minister must notify the chief officer in writing and not include the information in a Ministerial report until the Minister decides otherwise under subclause 132(5).

Inclusion of information in subsequent report-relevant agency

502. Subclause 132(4) sets out that when the information has not been included in a Ministerial report because of subclause 132(3), the chief officer must, before the Minister prepares the next Ministerial report, reconsider whether the information is control order information; and, if the chief officer is satisfied that the information is not control order information, advise the Minister in writing to include the information in the next Ministerial report.

503. Subclause 132(5) establishes that, if the Minister is satisfied, on the advice of the chief officer, that the information is not control order information, the Minister must notify the chief officer in writing and include the information in the next Ministerial report.

Exclusion of information-Australian Designated Authority

504. Subclause 132(6) sets out that, in the case of a report by the Australian Designated Authority, the Australian Designated Authority is satisfied that the information is control order information, the Australian Designated Authority must advise the Minister in writing not to include the information in the next Ministerial report.

505. Subclause 132(7) establishes that If the Minister is satisfied, on the advice of the Australian Designated Authority, that the information is control order information, the Minister must notify the Australian Designated Authority in writing and not include the information in any Ministerial report until the Minister decides otherwise under subclause (9).

Inclusion of information in subsequent report-Australian Designated Authority

506. Subclause 132(8) ensures that when information has not been included in a Ministerial report because of subclause 132(7), the Australian Designated Authority must, before the Minister prepares the next Ministerial report, reconsider whether the information is control order information; and if the Australian Designated Authority is satisfied that the information is not control order information, advise the Minister in writing to include the information in the next Ministerial report.

507. Subclause 132(9) sets out that if the Minister is satisfied, on the advice of the Australian Designated Authority, that the information is not control order information, the Minister must notify the chief officer in writing; and include the information in the next Ministerial report.

Definitions

508. Subclause 132(10) defines control order information as information that, if made public, could reasonably be expected to enable a reasonable person to conclude that an IPO is likely to be, or is not likely to be, in force under Part 3 of this Schedule in relation to an inclusive list of services, stored communications, telecommunications data, or a particular person.

Division 3 - Record-keeping requirements

Keeping documents associated with International Production Orders-relevant agencies

509. Clause 133 requires the chief officer of a relevant agency to cause certain documents to be kept in the agency's records. This requirement will assist the agency to fulfil its annual reporting requirements under Division 2 of this Part, and will facilitate effective oversight of the agency's use of the IPO framework.

510. Subclause 133(2) requires the chief officer of the agency to cause a record kept under subclause 133(1) to be kept for 3 years, or when the Ombudsman gives a report to the Minister under clause 150 in relation to the record kept, whichever is sooner.

Other records to be kept-relevant agencies

511. Clause 134 requires the chief officer of a relevant agency to cause other relevant documents to be kept in the agency's records. Subclause 134(2) gives the Minister the power to prescribe, by legislative instrument, additional documents or material that must be caused to be kept on record by the chief officer of a relevant agency.

512. Subclause 134(3) requires the chief officer of the agency to cause a record kept under subclause 134(1) to be kept for 3 years, or when the Ombudsman gives a report to the Minister under clause 150 in relation to the record kept, whichever is sooner.

Keeping documents associated with International Production Orders-the Organisation

513. Clause 135 requires the Director-General of Security to cause certain documents to be kept in the Organisation's records. This requirement will assist the Organisation to fulfil its annual reporting requirements, and will facilitate effective oversight of the Organisation's use of the IPO framework by the IGIS. The clause provides flexibility by requiring the Director-General of Security to cause to be kept a copy of a document of a kind specified in a written agreement between the Director-General of Security and the IGIS

514. Subclause 135(2) sets out the length of time for which the Director-General of Security must cause a copy of a particular document to be kept in ASIO's records under subclause 135(1).

515. Paragraph 135(2)(b) provides that if the document relation to a national security IPO that was issued under Part 4 of proposed Schedule 1 to the TIA Act and information was obtained with the order, the period for which the document must be kept ends at the later of when 3 years have elapsed since the document came into existence or when the Organisation ceases to retain the information obtained in accordance with the order.

516. Paragraph 135(2)(c) provides that for documents where no information was obtained with the order, the period for which the document must be kept ends when 3 years have elapsed since the document came into existence.

517. Subclause 135(3) provides that a written agreement between the Director-General of Security and the IGIS under paragraph 135(1)(bd) specifying kinds of documents to be retained is not a notifiable or legislative instrument. It would not be appropriate for a written agreement of this kind to be listed on the Federal Register of Legislation, as the kinds of documents to be kept may relate to information otherwise be sensitive to Australia's national security.

Other records to be kept-the Organisation

518. Clause 136 requires the Director-General of Security to cause other relevant documents to be kept in the Organisation's records. Subclause 136(2) sets out the length of time for which the Director-General of Security must cause a copy of a particular document to be kept in ASIO's records under subclause 136(1).

519. Paragraph 136(2)(b) provides that, if the document relates to a national security IPO that was issued under Part 4 of this Schedule and information was obtained with the order, the period for which the document must be kept ends at the later of when 3 years have elapsed since the document came into existence or when the Organisation ceases to retain the information obtained in accordance with the order.

520. Paragraph 136(2)(c) provides that for documents where no information was obtained in accordance with an order, the period for which the document must be kept ends when 3 years have elapsed since the document came into existence.

521. Subclause 136(3) provides that a written agreement between the Director-General of Security and the IGIS under paragraph 136(1)(bd) specifying kinds of documents to be retained is not a notifiable or legislative instrument. It would not be appropriate for a written agreement of this kind to be listed on the Federal Register of Legislation, as the kinds of documents to be kept may relate to information otherwise be sensitive to Australia's national security.

Keeping documents associated with International Production Orders-Australian Designated Authority

522. Clause 137 requires the Australian Designated Authority to cause certain documents to be kept in their records. This requirement will assist the Australian Designated Authority to fulfil its annual reporting requirements under Division 2 of this Part, and will facilitate effective oversight of the Australian Designated Authority's role in the IPO framework.

523. Subclause 137(2) requires the Australian Designated Authority to cause a record kept under subclause 137(1) to be kept for 3 years.

Other records to be kept-Australian Designated Authority

524. Clause 138 requires the Australian Designated Authority to cause other relevant documents to be kept in the Australian Designated Authority's records. Subclause 138(3) requires the Australian Designated Authority to cause a record kept under subclauses 138(1) and 138(2) to be kept for 3 years.

Division 4 - Register of international production orders

525. Clause 139 requires the Australian Designated Authority to cause a register to be kept of all IPOs issued under Schedule 1. The establishment of a register under this clause is to assist the Ombudsman to oversight agency use of the IPO framework.

526. Subclause 139(3) allows an IGIS official to access the register of IPOs for the purpose of the performance of a function or duty, or the exercise of a power, by the IGIS official.

Division 5 - Destruction of records

Destruction of records

527. Clause 140 requires that information obtained under an IPO issued under Parts 2, 3 or 4 of Schedule 1 relating to interception activities or stored communications, must be destroyed in circumstances where the information is in the agency or the Organisation's possession, and the chief officer of the agency or the Director-General of Security is satisfied the records are not likely to be required for a purpose referred to in Part 11. This will ensure that records of sensitive, personal communications are not kept by agencies where no longer needed.

528. The destruction of telecommunications data obtained under an IPO is not required by this clause and is in line with current arrangements in the TIA Act. This view is supported by the Attorney-General's Department in their response to recommendation 28 of the Parliamentary Joint Committee on Intelligence and Security's Advisory report on the Telecommunications (Interception and Access) Amendment (Data Retention) Bill 2014. Among other things, the Attorney-General's Department's response found:

•

Keeping telecommunications data for extended periods of time can be beneficial to law enforcement agencies in particular circumstances.

•

A destruction requirement may have little privacy benefit and could create a further burden on the telecommunications industry.

•

It will be administratively challenging to destroy copies of telecommunications data given its need to be stored on numerous information management systems.

Part 10 - Oversight by the Commonwealth Ombudsman

529. Clause 141 provides a simplified outline of Part 10 of Schedule 1, as introduced by the Bill. This outlines the Ombudsman's ability to inspect records of a relevant agency and the Australian Designated Authority to determine compliance with the Schedule. The Ombudsman must table the findings of these inspections in an annual report to the Minister.

Inspection of relevant agency records by the Ombudsman

530. Subclause 142(1) is an enabling provision that provides that the Commonwealth Ombudsman may inspect records of a relevant agency to determine the extent of compliance with this Schedule by the agency and its officers. This enables the function of inspecting the relevant agency's records in order to ascertain compliance with its obligations under the Schedule, and empowers the Ombudsman to do anything incidental or conducive to that function. The Ombudsman has the additional function of reporting to the Minister about the results of the inspections under this Part.

531. Subclause 142(2) outlines the powers of the Ombudsman for the purposes of an inspection under subclause 142(1).

532. Subclause 142(3) requires that, before inspecting records of a relevant agency under this clause, the Ombudsman must give reasonable notice to the chief officer of the agency of when the inspection will occur. This is intended to allow the agency sufficient preparation time to ensure the necessary information is collated and available for the Ombudsman's inspection.

533. Subclause 142(4) requires that the chief officer must ensure members of staff of the agency give the Ombudsman any assistance the Ombudsman reasonably requires to enable the Ombudsman to perform functions under this clause. This may include access to certain computer systems, locations within the agency's premises, guidance personnel, and other assistance as required.

Inspection of Australian Designated Authority records by the Ombudsman

534. Clause 143 provides for the inspection of records of the Australian Designated Authority by the Ombudsman.

535. Subclause 143(1) provides that the Ombudsman may inspect records of the Australian Designated Authority to determine the extent of its compliance with this Schedule. This enables the function of inspecting the Australian Designated Authority's records in order to ascertain compliance with its obligations under the Schedule, and empowers the Ombudsman to do anything incidental or conducive to that function. The Ombudsman has the additional function of reporting to the Minister about the results of the inspections under this Part.

536. Subclause 143(2) outlines the powers of the Ombudsman for the purposes of an inspection under subclause 143(1).

537. Subclause 143(3) requires that, before inspecting records of the Australian Designated Authority under clause 143, the Ombudsman must give reasonable notice to the Australian Designated Authority of when the inspection will occur. This is intended to allow the Australian Designated Authority sufficient preparation time to ensure the necessary information is collated and available for the Ombudsman's inspection.

538. Subclause 143(4) requires that the Australian Designated Authority must ensure members of staff of the Attorney-General's Department give the Ombudsman any assistance the Ombudsman reasonably requires to enable the Ombudsman to perform functions under this clause. This may include access to certain computer systems, locations within the Department's premises, guidance personnel, and other assistance as required.

539. Clause 144 enables the Commonwealth Ombudsman to obtain relevant information.

Relevant agency

540. Subclause 144(1) provides that, if the Ombudsman has reasonable grounds to believe that an officer of a particular relevant agency is able to give information relevant to an inspection under this Part of the agency's records, the Ombudsman may:

•

if the Ombudsman knows the officer's identity, by written notice given to the officer, require the officer to do one or both of the following:

o

give the information to the Ombudsman, by writing signed by the officer, at a specified place and within a specified period;

o

attend before a specified inspecting officer to answer questions relevant to the inspection; or

•

if the Ombudsman does not know the officer's identity, require the chief officer of the agency, or a person nominated by the chief officer, to attend before a specified inspecting officer to answer questions relevant to the inspection.

Australian Designated Authority

541. Subclause 144(2) provides that, if the Ombudsman has reasonable grounds to believe that a member of staff of the Attorney-General's Department is able to give information relevant to an inspection under this Part of the Australian Designated Authority's records, the Ombudsman may:

•

if the Ombudsman knows the member's identity, by written notice given to the member, require the member to do one or both of the following:

o

give the information to the Ombudsman, by writing signed by the member, at a specified place and within a specified period;

o

attend before a specified inspecting officer to answer questions relevant to the inspection; or

•

if the Ombudsman does not know the member's identity, require the Australian Designated Authority, or a person nominated by the Australian Designated Authority, to attend before a specified inspecting officer to answer questions relevant to the inspection.

Specification of place and period etc.

542. Subclause 144(3) provides that a requirement to attend under subclauses 144(1)-(2) must specify a place for the attendance, and a period within which, or a time and day when, the attendance is to occur.

543. The place, and the period or the time and day, must be reasonable having regard to the circumstances in which the requirement is made. This is to take into account reasonable expectations regarding the requested officer's or member's availability.

Offence

544. Subclause 144(4) provides a person commits an offence if the person is subject to a requirement under subclauses 144(1) or (2); and the person omits to do an act; and the omission breaches the requirement. This includes failing to attend for the purposes of subclause 144(3), refusing to answer a question when directed without sufficient reason, or failing to provide a document when directed without sufficient reason.

545. The penalty for an offence against this subclause is imprisonment for 6 months, consistent with section 87 of the TIA Act.

546. Clause 145 provides that the Ombudsman is to be given information and access despite other laws.

547. Subclause 145(1) provides despite any other law, a person is not excused from giving information, answering a question, or giving access to a document, as and when required under this Part, on the ground that giving the information, answering the question, or giving access to the document, as the case may be, would contravene a law; or be contrary to the public interest; or might tend to incriminate the person or make the person liable to a penalty.

548. Subclause 145(2) provides that the information or any information obtained as a result of giving the information is not admissible in evidence against the person. An exclusion to this is in a proceeding by way of a prosecution for an offence against clause 152 or an offence against Part 7.4 or 7.7 of the Criminal Code. Limiting the admissibility to only these offences is intended to encourage cooperation with the Ombudsman's activities.

549. Subclause 145(3) provides nothing in clause 152 prevents an officer from giving information to an inspecting officer or giving access to a record of the relevant agency to an inspecting officer for the purposes of an inspection under this Part of the agency's records. This is intended to allow for an officer to give as much detail as is necessary to the inspecting officer to complete their task.

550. Subclause 145(4) provides a relevant agency may make a record of information, provided for the purposes of giving the information to an inspecting officer. This record of information may be kept by both parties.

551. Subclause 145(5) provides nothing in clause 152 prevents a member from giving information to an inspecting officer or giving access to a record to an inspecting officer for the purposes of an inspection under this Part of the Australian Designated Authority's records. This is intended to allow for a member to give as much detail as is necessary to the inspecting officer to complete their task.

552. Subclause 145(6) provides the Designated Authority may make a record of information, provided for the purposes of giving the information to an inspecting officer. This record of information may be kept by both parties.

553. Clause 146 provides for the application of the Ombudsman Act 1976.

554. Subclause 146(1) provides that section 11A of the Ombudsman Act 1976, referring to the powers of the Federal Court of Australia, does not apply in relation to the exercise or proposed exercise of a power, or the performance or the proposed performance of a function of the Ombudsman.

555. Subclause 146(2) provides that a reference in section 19 of the Ombudsman Act 1976, referring to the provision of reports to Parliament, does not include a reference to anything that an inspecting officer has done or omitted to do under this Part.

556. Subclause 146(3) provides, subject to clause 145, subsections 35(2), (3), (4) and (8) of the Ombudsman Act 1976 apply for the purposes of this Part, and lists the instances in which they would apply.

557. Clause 147 provides for the exchange of information between Ombudsman and State and Territory inspecting authorities. The effect of this provision is to enable the Ombudsman to communicate any accessed information to a State/Territory inspecting authority if it is relevant to the performance of the State/Territory inspecting authority's function. The Ombudsman must be satisfied that giving the information is necessary to enable the inspecting authority to perform its functions in relation to the State/Territory inspecting authority.

558. Subclause 147(3) clarifies that the Ombudsman may receive, from an inspecting authority, information relevant to the performance of the Ombudsman's functions under this Part.

559. Clause 148 provides for delegation by the Ombudsman.

560. Subclause 148(1) provides the Ombudsman may, by writing, delegate all or any of the Ombudsman's powers under this Part other than a power to report to the Minister. This delegation can only be provided to an APS employee responsible to the Ombudsman or a person under the law of any state or territory whom is responsible to an oversight body with similar functions to the Ombudsman.

561. The broad delegation power allows the Commonwealth Ombudsman to determine how best to allocate resources and who the most appropriate officers will be when executing the functions or powers of the Commonwealth Ombudsman. This provision replicates long standing provisions contained in the Ombudsman Act 1976 (section 34) and mirrors similar provisions contained in the oversight and accountability regimes established in the TIA Act, the Surveillance Devices Act 2004 (Part 6), and the Crimes Act 1914 (Part IAB).

562. The purpose of the delegation provision is to ensure the staff of the office of the Commonwealth Ombudsman can perform the functions of the Commonwealth Ombudsman as required. It is important that the Commonwealth Ombudsman be able to determine the most efficient, effective and appropriate means of operationalising their functions as between themselves and their staff, cognisant of the powers involved and the expertise required to exercise them. In practice, the exercise of these functions and powers is limited to members of the team within the office of the Commonwealth Ombudsman responsible for conducting inspections of covert and intrusive powers by agencies.

563. Subclause 148(2) requires that a delegate must, upon request of the person who is exercising the power of delegation, provide a written copy outlining their delegation powers for inspection by a person. The intent of this is to ensure that the delegated person outlines their authority to the affected person.

564. Clause 149 provides that the Ombudsman, an inspecting officer, or a person acting under an inspecting officer's direction or authority, is not to be sued for, or in relation to, an act or omission done in good faith in the performance or exercise, or the purported performance or exercise, of a function or power under this Part.

565. Clause 149 ensures the Commonwealth Ombudsman and staff with the office of the Commonwealth Ombudsman are able to perform their inspection functions under Part 10 without being impeded by the possibility of legal action. This provision is fundamental to enabling the Commonwealth Ombudsman and their staff to carry out their functions and powers freely and independently within the confines of the law. This immunity only applies if the inspection functions are being carried out in good faith. Immunity provisions of this kind are long-standing safeguards afforded to the Commonwealth Ombudsman and staff of the office of the Commonwealth Ombudsman, and similar immunities are contained elsewhere, such as section 33 of the Ombudsman Act 1976.

566. Clause 150 is a provision with respect to the reporting obligations of the Ombudsman.

567. Subclause 150(1) requires that the Ombudsman must report to the Minister, in writing, about the results of inspections of relevant agencies and the Australian Designated Authority during a financial year. Subclause 150(2) requires that the report must be given to the Minister as soon as practicable after the end of the financial year.

568. Subclause 150(3) requires that the Minister must cause a copy of the report to be tabled in each House of the Parliament within 15 sitting days of that House after the Minister receives it. This timing is consistent with other reports provided by the Ombudsman.

569. Subclause 150(4) provides the Ombudsman may report to the Minister in writing at any time about the results of an inspection and must do so if so requested by the Minister.

570. Subclauses 150(5) and 150(6) provide that if, as a result of an inspection of the records of a relevant agency or the Australian Designated Authority, the Ombudsman is of the opinion that an officer of the agency, or a member of staff of the Attorney-General's Department, has contravened a provision of this Schedule, the Ombudsman may include a report on the contravention in his or her report.

571. Subclause 150(7) requires that the Ombudsman must give a copy of relevant parts of a report produced under subclauses 150(1) or (4) to the chief officer of a relevant agency and the Australian Designated Authority, as relevant.

572. Subclause 150(8) requires that a report under clause 150 must not include information which, if made public, could reasonably be expected to endanger a person's safety, prejudice an investigation or prosecution, or compromise any relevant agency's operational activities or methodologies.

Part 11 - Disclosure of protected information

573. Clause 151 provides a simplified outline of Part 11 of Schedule 1, as introduced by the Bill.

Prohibition on use, recording, communication or publication of protected information or its admission in evidence

574. Clause 152 prohibits the use, recording, communication or publication of protected information, and its admission in evidence in any proceeding in Australia. A person commits an offence punishable by up to 2 years imprisonment if they use, record, communicate or publish protected information in a manner not permitted under Part 11. This clause is intended to protect the privacy of persons whose communications and information have been obtained pursuant to an IPO, and to control the disclosure of highly sensitive information pertaining to law enforcement and national security investigations that could prejudice investigations or compromise law enforcement and national security outcomes.

575. Protected information is defined in clause 2 to mean information in relation to, or obtained in accordance with an IPO.

576. Clause 152 is intended to reflect the approach taken in Part 6, Division 1 of the Surveillance Devices Act 2004, and TIA Act, with respect to prohibitions on the use and disclosure of information obtained under those Acts.

General exceptions to prohibition

577. Clause 153(1) provides general exceptions to the prohibition in clause 152.

578. Subclause 153(1)(a) allows for the use, recording, communication, publication or admission in evidence of protected information for the purposes of investigating a serious category 1 offence or serious category 2 offence. This is intended to include a Commonwealth, state or territory offence. Serious category 1 offence and serious category 2 offence are defined in clause 2. This exception also applies to the making of a report on the outcome of such an investigation.

579. Subclause 153(1)(b) allows for the use, recording, communication or publication of protected information for the purposes of making of a decision whether or not to bring a prosecution for a serious category 1 offence or a serious category 2 offence. This is intended to include a Commonwealth, state or territory offence. This exception does not apply where subclause 153(1)(r) would apply.

580. Subclause 153(1)(c) allows for the use, recording, communication, publication or admission in evidence of protected information for the purposes of a prosecution for a serious category 1 offence or a serious category 2 offence. This is intended to include a Commonwealth, state or territory offence. This exception does not apply where subclause 153(1)(r) would apply.

581. Subclause 153(1)(d) allows for the use, recording, communication, publication or admission in evidence of protected information for the purposes of bail application proceedings in connection with a prosecution for a serious category 1 offence or a serious category 2 offence. This is intended to include a Commonwealth, state or territory offence. Subclauses 153(1)(e) and (f) create similar exceptions in relation to proceedings to review a decision to refuse or grant a bail application referred to in subclause 153(1)(d).

582. Subclause 153(1)(g) allows for the use, recording, communication, publication or admission in evidence of protected information for the purposes of investigating a contravention of the civil penalty provisions in the Schedule. The civil penalty provisions are set out in Part 8. This exception also applies to the making of a report on the outcome of such an investigation.

583. Subclause 153(1)(h) allows for the use, recording, communication, publication or admission in evidence of protected information for the purposes of the performance of the functions, or the exercise of the powers, of the Organisation. This is intended to include communication of protected information to, and use of protected information by, the Organisation where the protected information relates or appears to relate to the functions and powers of the Organisation under the Australian Security Intelligence Organisation Act 1979. This exception is also intended to include the communication of protected information to, and use of protected information by, employees of the Organisation in the performance of their official functions and duties.

584. Subclause 153(1)(i) allows for the use, recording, communication, publication or admission in evidence of protected information for purposes in connection with Division 104 of the Criminal Code on control orders. This exception does not apply to control orders under state or territory laws.

585. Subclause 153(1)(j) allows for the use, recording, communication, publication or admission in evidence of protected information for purposes in connection with a preventative detention order law. This is intended to enable Commonwealth, state and territory agencies to use or disclose protected information in relation to their respective preventative detention order regimes, including in the following Acts:

•

Criminal Code Act 1995 (Cth)

•

Terrorism (Community Protection) Act 2003 (Vic)

•

Terrorism (Police Powers) Act 2002 (NSW)

•

Terrorism (Preventative Detention) Act 2005 (Qld)

•

Terrorism (Preventative Detention) Act 2005 (SA)

•

Terrorism (Preventative Detention) Act 2005 (Tas)

•

Terrorism (Preventative Detention) Act 2006 (WA)

•

Terrorism (Extraordinary Temporary Powers) Act 2006 (ACT), and

•

Terrorism (Emergency Powers) Act 2003 (NT).

586. Subclause 153(1)(k) allows for the use, recording, communication, publication or admission in evidence of protected information for purposes in connection with Division 105A of the Criminal Code on continuing detention orders. This exception does not apply to any continuing detention orders under state or territory laws.

587. Subclause 153(1)(l) allows for the use, recording, communication, publication or admission in evidence of protected information for the purpose of an application for a civil penalty order relating to a contravention of a civil penalty provision under Part 8 of this Schedule.

588. Subclauses 153(1)(m) and (n) allow for the use, recording, communication and publication of protected information for the purposes of record keeping and reporting under the Schedule and reporting under subsection 94(1) of the Australian Security Intelligence Organisation Act 1979, insofar as such reporting includes statements covered by subsection 94(2BBA) of that Act.

589. Subclauses 153(1)(o), (p) and (q) allow for the use, recording, communication and publication of protected information for the purposes of an inspection by the Ombudsman under clause 142 or 143, the performance of functions or duties and exercise of powers by the IGIS and by the Ombudsman official. This is intended to include communication of protected information to, and use of protected information by, the Ombudsman and IGIS.

590. Subclause 153(1)(r) allows for the use, recording, communication, publication or admission in evidence of protected information for purposes of investigations under the Privacy Act 1988 or any other Commonwealth law concerning the privacy of personal information. This subclause also clarifies that disclosure of protected information is also permitted for the purpose of any subsequent investigation or prosecution of a serious category 1 offence or a serious category 2 offence arising directly from the first-mentioned investigation, despite the fact that such a use, recording, communication, publication or admission in evidence of protected information would otherwise not be permitted under this subclause.

591. Subclause 153(s) allows for the use, recording, communication, publication and admission as evidence of protected information for the purposes of the administration or execution of this Schedule. This is designed to permit disclosure for the purposes of any acts done in administering or carrying out any part of this Schedule.

592. Subclause 153(t) allows for the use, recording, communication, publication and admission as evidence of protected information for the purposes of legal proceedings arising out of, or related to, this Schedule. This is intended to include, for example, any proceedings relating to a breach of the prohibition in clause 152. This exception also applies to any report of such proceedings.

593. Subclause 153(1)(u) allows for the use, recording, communication, publication and admission in evidence of protected information for the purposes of taking of evidence under section 43 of the Extradition Act 1988, in so far as the proceeding relates to a serious category 1 offence.

594. Subclause 153(1)(v) allows for the communication of protected information to, and the use of protected information by, a foreign country in accordance with section 13 of the Mutual Assistance in Criminal Matters Act 1987, provided that such communication or use is in relation to an offence against the law of that foreign country that is punishable by a term of imprisonment of three years or more, or life. This will ensure consistency of threshold with a serious category 1 offence.

595. Subclauses 153(1)(w) and 153(x) allows for the communication of protected information to, and the use of information by, the International Crime Court in connection with proceedings under Division 5 of Part 4, and Part 5, of the International Criminal Court Act 2002.

596. Subclause 153(1)(y) allows for the communication of protected information to, and the use of information by, the International War Crimes Tribunal in connection with proceedings under Division 1 of Part 4 of the International War Crimes Tribunals Act 1995.

597. Subclause 153(1)(z) allows for the use, recording, communication and publication of protected information for purposes in connection with a designated international agreement. This is intended to include the communication of protected information to, and use of information by governments in order to give effect to a designated international agreement, or for purposes required by or contemplated by the designated international agreement. For example, this exception would cover communication of protected information between the Australian Government and a foreign government with which Australia has a designated international agreement during discussions regarding the implementation of that agreement.

598. Subclause 153(2) clarifies that, for the purposes of the exceptions in subclause 153(1), the Schedule is taken to include the Regulatory Powers (Standard Provisions) Act 2014, so far as the Regulatory Powers (Standard Provisions) Act 2014 relates to the Schedule.

Disclosure to the Public Interest Monitor (PIM) of Victoria or Queensland

599. Subclauses 153(3) and (4) permit the notification, or giving of information, to the PIM of Victoria or Queensland. This will assist in the ability of the PIM to make submissions to the eligible Judge or nominated AAT member when a Victorian or Queensland interception agency or control order agency makes an application to those authorities.

International assistance

600. Subclauses 153(5), (6) and (7) ensure that protected information can be provided to foreign countries and international bodies such as the International Criminal Court and International War Crimes Tribunal. This accords with current practice in terms of information that agencies have obtained under the domestic regimes within the TIA Act. The Attorney-General has the discretion to authorise disclosure of protected information under the Mutual Assistance in Criminal Matters Act 1987, the International Criminal Court Act 2002, and the International War Crimes Tribunals Act 1995.

601. To facilitate the operation of subclauses 153(5) and (6), items 6 and 13 amend the International Criminal Court Act 2002 and the Mutual Assistance in Criminal Matters Act 1987 to broaden the scope of information that the Attorney-General may authorise to be provided to the International Criminal Court or a requesting foreign country, to also include material lawfully obtained pursuant to an IPO. For the purpose of subclause 153(7), amendment to section 25A of the International War Crimes Tribunals Act 1995 was not considered necessary as lawfully obtained protected information as defined under the Bill is 'material lawfully obtained in Australia' for the purposes of section 25A of that Act.

Disclosure to Ministers

602. Clause 154 allows protected information to be communicated to the Minister for the purposes of the performance of the Minister's functions, or the exercise of the Minister's powers. This is intended to include the communication of protected information to the Minister that relates, or appears to relate, to any of the Minister's functions or exercise of any of the Minister's powers across all subject matters that the Minister is responsible for.

603. Clause 155 allows protected information to be communicated to the Attorney-General for the purposes of the performance of the Attorney-General's functions, or the exercise of the Attorney-General's powers. This is intended to include the communication of protected information to the Attorney-General that relates or appears to relate to any of the Attorney-General's functions or exercise of any of the Attorney-General's powers across any subject matters that the Attorney-General is responsible for. Disclosures to the Attorney-General are permitted under this clause in recognition of the Australian Designated Authority being the Secretary of the Attorney-General's Department, and the Attorney-General's functions and responsibilities as the First Law Officer of the Commonwealth.

Disclosure of statistical information by prescribed communications providers

604. Clause 156 allows prescribed communications providers to disclose the total number of IPOs that they have been given by the Australian Designated Authority during a period of at least six months. A note is inserted into this clause to clarify that the clause only permits the disclosure of aggregate statistical information that cannot be broken down by agency that obtained the order or in any other way, for example by the type of order or type of data requested. This clause is intended to balance the interests of prescribed communications providers in reporting on their activities to shareholders and publicly for transparency reasons, with the need to limit public disclosure of highly sensitive information pertaining to law enforcement and national security investigations that could prejudice investigations or otherwise compromise law enforcement and national security outcomes.

Specific exceptions relating to International Production Orders for interception

605. Clause 157(1) provides additional exceptions to the prohibition in clause 152 in relation to the use, recording, communication, publication and admission in evidence of protected information that was obtained under, or relates to, an IPO relating to interception. These exceptions include use and disclosure for purposes in connection with a range of Commonwealth, state and territory proceedings and eligible purposes of a range of Commonwealth, state and territory agencies. Eligible purpose is defined in subclause 157(2).

606. These exceptions are intended to be consistent with the exceptions in sections 5 and 5B of the TIA Act.

Specific exceptions relating to International Production Orders for stored communications

607. Clause 158 provides additional exceptions to the prohibition in clause 152 in relation to the use, recording, communication, publication and admission in evidence of protected information that was obtained under, or relates to, an IPO relating to stored communications. These exceptions include use and disclosure for purposes in connection with a range of Commonwealth, state and territory proceedings.

608. These exceptions are intended to be consistent with the exceptions in section 5B insofar as they apply to Chapter 3 of the TIA Act, and sections 134-146 of the TIA Act.

Specific exceptions relating to telecommunications data

609. Clause 159 provides additional exceptions to the prohibition in clause 152 in relation to the use, recording, communication, publication and admission in evidence of protected information that consists of telecommunications data obtained under an IPO or which relates to such an IPO.

610. Subclause 159(1) allows use and disclosure of protected information covered by subclauses 159(1)(a) and (b) for purposes in connection with enforcement of a criminal law or law imposing a pecuniary penalty or the protection of the public revenue. This is intended to include a law or the public revenue of the Commonwealth, a state or territory.

611. Subclause 159(2) allows protected information covered by subclause (1)(a) and (b) to be used or disclosed for the purpose of finding a missing person, or disclosed to the person who notified the AFP or state police force in certain circumstances set out in subclause 159(2)(b).

612. These exceptions are intended to be consistent with the exceptions in sections 181A-182B of the TIA Act.

Part 12 - Evidentiary certificates

613. Clause 160 provides a simplified outline of Part 12 of Schedule 1, as introduced by the Bill.

Evidentiary certificates - compliance with International Production Orders

614. Subclause 161(1) and (2) provide that a provider or a manager of the prescribed communications provider, may issue a signed written certificate setting out facts detailing acts or things done by the provider in order to comply with the IPO. A manager may include any individual who is involved in the management of the provider and is able to authorise evidentiary certificates for that particular prescribed communications provider.

615. Subclause 161(3) permits a certificate issued under subclause 161(1) or (2) to be received in evidence in a proceeding in Australia without further proof, and the certificate is to be conclusive evidence of the matters stated in the document in those proceedings.

616. Consistent with existing provisions in the TIA Act, evidentiary certificates issued by designated communication providers are to be received into evidence in proceedings as conclusive evidence of the matters stated in the certificate. This provision accords with best practice set out in the Guide to Framing Commonwealth Offences, Infringement Notices and Enforcement Powers as these evidentiary certificates will not cover matters in dispute or matters that go to questions of legality. The provision of conclusive evidentiary certificates that apply to the technical or formal matters will ensure that courts have complete information before them to assist in the administration of justice.

617. Taking the prescribed communications provider's evidentiary certificate as conclusive evidence of the matters stated in the document ensures that employees of the provider are not required to testify in each proceeding where evidence obtained under an IPO is adduced. Current practices within the TIA Act for domestic interception, access to stored communications and telecommunications data allow for evidentiary certificates. The use of evidentiary certificates for IPOs is of significant utility as requiring the appearance of employees of foreign prescribed communications providers to court proceedings held in Australia will be complex and, at times, impractical. This also recognises the novel fact that whilst it will be easier to obtain information by virtue of the new order framework, Australian prosecutorial and law enforcement bodies will not be able to compel foreign provider employees to attend court to give evidence.

Voluntary provision of associated information by prescribed communications providers

618. Clause 162 allows prescribed communications providers to issue a signed written certificate in relation to information voluntarily provided in connection with an IPO.

619. Subclause 162(7) permits a certificate issued under clause 162 to be received in evidence in a proceeding in Australia without further proof, and the certificate is to be prima facie evidence of the matters stated in the document in those proceedings, so long as the information obtained in accordance with the IPO is admissible in those proceedings.

620. This provision seeks to provide agencies the ability to adduce as evidence in a proceeding, information or material voluntarily provided by a prescribed communications provider in addition to the material or information provided to comply with an IPO. This provision ensures where a prescribed communications provider wishes to provide additional information voluntarily in response to an IPO, the voluntarily provided information is also able to be adduced in court proceedings in the event it is admissible. This evidentiary certificate ensures that where a prescribed communications provider discloses information voluntarily, or explanatory material to assist in the understanding of information obtained under an IPO, there is a mechanism to allow for the evidence to be received as prima facie evidence in a proceeding. The voluntary disclosure or the explanatory material must be in connection with the IPO.

621. The reference to in connection under clause 162 is intended to operate flexibly. For example, if the prescribed communications provider receives an order and has identified other services associated with the person of interest identified in the order, the prescribed communications provider may disclose subscriber information or other non-content data to the law enforcement agency.

Evidentiary certificates - Interception

622. Clause 163 provides that a certifying officer of an interception agency, control order IPO agency, and the Organisation may issue a written certificate signed by the officer setting out such facts as the officer considers relevant with respect to the receipt by the agency of intercepted material or information pursuant to Parts 2, 3 and 4 of item 43 of the Bill. This clause also provides for the receipt of telecommunications data disclosed in accordance with an IPO seeking interception activities.

623. Certificates issued under this clause are to be received in evidence in a proceeding in Australia without further proof, and are prima facie evidence of the matters stated in the document. This ensures that employees or officers of the agency are not required to testify in each proceeding that the material or information was lawfully obtained.

Evidentiary certificates - Stored communications

624. Clause 164 provides that a certifying officer of a criminal law-enforcement agency, control order IPO agency, and the Organisation may issue a written certificate signed by the officer setting out such facts as the officer considers relevant with respect to the receipt by the agency of stored communications pursuant to Parts 2, 3 and 4 of item 43 of the Bill. This clause also provides for the receipt of telecommunications data disclosed in accordance with an IPO seeking stored communications.

625. Certificates issued under this clause are to be received in evidence in a proceeding in Australia without further proof, and are prima facie evidence of the matters stated in the document. This ensures that employees or officers of the agency are not required to testify in each proceeding that the material or information was lawfully obtained.

Evidentiary certificates - Telecommunications data

626. Clause 165 provides that a certifying officer of enforcement agency, control order IPO agency, and the Organisation may issue a written certificate signed by the officer setting out such facts as the officer considers relevant with respect to the receipt by the agency of stored communications pursuant to Parts 2, 3 and 4 of item 43 of the Bill.

627. Certificates issued under this clause are to be received in evidence in a proceeding in Australia without further proof, and are prima facie evidence of the matters stated in the document. This ensures that employees or officers of the agency are not required to testify in each proceeding that the material or information was lawfully obtained.

Evidentiary certificates - Australian Designated Authority

628. Subclause 166(1) provides for the Australian Designated Authority to issue a signed written certificate relating to the Australian Designated Authority giving an IPO, or giving an instrument of revocation, or giving an instrument of cancellation to a prescribed communications provider.

629. Subclauses 166(2)-(4) provides for the Australian Designated Authority to issue a signed written certificate relating to the Australian Designated Authority receiving material or information obtained under Parts 2, 3 and 4 of item 43 of the Bill from a prescribed communications provider, or things done by the Australian Designated Authority for ensuring the material or information was passed to the relevant agency which requested the information.

630. Certificates issued under this clause are to be received in evidence in a proceeding in Australia without further proof, and are prima facie evidence of the matters stated in the document. This ensures that employees or officers of the Australian Designated Authority are not required to testify in each proceeding that the material or information was lawfully dealt with.

Part 13 - Incoming orders and requests

631. Part 13 of the Bill provides for exemptions from prohibitions on intercepting, accessing and disclosing information for acts done in compliance with an incoming order or request, or the issue of an order or making of a request, or information obtained in accordance with an order or request, issued by a competent authority of a foreign country with which Australia has a designated international agreement.

632. Clause 167 provides a simplified outline of Part 13 of Schedule 1, as introduced by the Bill.

633. Clause 168 provides details of the relevant exemptions, namely from:

•

Subsections 7(1) and 108(1) of the TIA Act, which relate to the prohibition on interception of telecommunications and access to stored communications (respectively);

•

Subsections 63(1) and 133(1) of the TIA Act, which relate to the prohibition on dealing with intercepted information and interception warrant information, and accessed information (respectively); and

•

Sections 276, 277 and 278 of the Telecommunications Act 1997, which deal with the prohibition on, and offences relating to, the disclosure or use of certain information by current or former eligible persons, eligible number-database persons or emergency call persons (respectively).

634. Noting foreign orders and requests subject to agreements designated under clause 3 of Schedule 1 will seek Australian communications service providers to lawfully access and disclose information, considerable parliamentary and public scrutiny will be afforded to agreements prior to their designation. The scrutiny process will include:

•

The Australian Government will conduct a thorough assessment of the privacy regime of the foreign country before entering into, and during, any agreement negotiations. This will be supported by a range of safeguards and restrictions in those agreements to reflect Australian values, such as rule of law, privacy considerations and that electronic surveillance powers be exercised under a purported agreement where it is necessary, proportionate and reasonable.

•

The Attorney-General and the Minister for Foreign Affairs will approve any proposed agreement before it is signed. Both Ministers have unique responsibilities for both domestic and international privacy matters.

•

Copies of the agreement text will be tabled in Parliament. The Department of Home Affairs will prepare a National Interest Analysis.

•

Any agreement will be referred to the Joint Standing Committee on Treaties (JSCOT) for consideration. Stakeholders and members of the public will be able to make submissions to JSCOT indicating any privacy concerns that JSCOT will take into account before providing its recommendations.

•

Before Australia can ratify an Agreement, Regulations will be made under the TIA Act to declare the agreement as a 'designated international agreement'. Such Regulations will be subject to the normal disallowance periods in Parliament, and to oversight by parliamentary committees such as the Parliamentary Joint Committee on Human Rights.

•

Any disallowable legislative instruments will also be accompanied by a Statement of Compatibility with Human Rights and be scrutinised by the PJCHR.

635. Notes in the Part indicate that in a prosecution for an offence against the blocking provisions in the TIA Act, and the Telecommunications Act 1997, the defendant bears the evidential burden in accordance with section 13.3(3) of the Criminal Code Act 1995. This means the defendant will bear the burden of adducing evidence that suggests a reasonable possibility that the accessing and disclosure of communications and information was for a purpose that is authorised by the Bill. If the defendant discharges an evidential burden, the prosecution must disprove those matters beyond reasonable doubt. ^[3]

636. This burden is placed on the defendant in these circumstances as the person acting in accordance with an order or request has the knowledge to address the matter, and it would be significantly more difficult and costly for the prosecution to disprove than for the defendant to establish the matter. This position is supported by the Guide to Framing Commonwealth Offences, Infringement Notices and Enforcement Powers. ^[4]

637. Clause 169 relates to the interaction between provisions in the Bill and relevant provisions in the Privacy Act 1988, and in particular in relation to the disclosure of personal information in compliance with an order or request issued by a competent authority of a foreign country with a designated international agreement with Australia. It provides, in these circumstances, the disclosure of information is taken to be authorised by the TIA Act. This will ensure that Australian providers will not be in breach of the Privacy Act 1988 if they disclose information in response to an order or request issued or made by a foreign country where there is a relevant designated international agreement. In practice, it is expected that consideration of protections and safeguards related to privacy will also be a consideration when developing international agreements.

638. The phrasing of orders and requests ensures that Australian providers can lawfully respond to orders and requests for information permitted to be disclosed under a designated international agreement. For example, a request may be a lawful request for the disclosure of subscriber information, whilst an order may be a court order requiring the disclosure of content data.

Part 14 - Miscellaneous

639. Clause 170 provides a simplified outline of Part 14 of Schedule 1, as introduced by the Bill, including the electronic service of documents; certified copies of IPOs; and delegations.

Electronic service of documents

640. Clause 171 provides for the electronic service of particular documents between the Australian Designated Authority, prescribed communications providers, agencies, and the Organisation. However, this can only be done where the Australian Designated Authority or person has nominated an electronic address for service. The order, copy or instrument is taken to have been given to the person if sent to that nominated electronic address for service.

641. The service of documents to an electronic address is now a routine method for delivering documents. Documents submitted electronically can be sent and received faster than traditional postal methods, reducing turn-around times. The provision for electronic service of documents is consistent with the overall objectives of the Schedule to provide data effectively and efficiently across borders. A requirement that that the recipient must have nominated an electronic address for service will ensure that service is properly effected on the intended recipient.

International Production Order issued in response to a telephone application

642. Clause 172 sets out the action required by an applicant after an IPO is issued on a telephone application. This clause applies if an IPO is issued in response to a telephone application made on behalf of a relevant agency or the Organisation.

Required action

643. Subclause 172(2) provides that within one day of the IPO being issued, the applicant must cause each person who gave information to the issuing person for the application, to swear or affirm an affidavit setting out the information given, and give the affidavit or affidavits to the issuing person. If the applicant was authorised to make the application by telephone as a result of an authorisation under the relevant provisions, the applicant must also give the issuing person a copy of the authorisation.

644. This clause is designed to assign an appropriate level of accountability to an applicant for an IPO made by way of telephone application. While urgent circumstances may necessitate the application to be made by telephone, it is appropriate that within a period of one day, the applicant be required to provide the information given by way of affidavit.

Cancellation if required action not taken

645. Subclause 172(3) provides that the issuing person may cancel the order if satisfied that subclause 172(2) has not been complied with. Subclause 172(4) provides the cancellation must be set out in a written instrument.

646. The ability for the issuing person to be able to cancel the order on non-compliance with subclause 172(2) is an appropriate measure. While the flexibility of a telephone application is afforded for circumstances of urgency, it is necessary for transparency and accountability that the grounds for the application be provided in writing shortly after the order has been issued by such means.

647. Under subclause 172(5), if the IPO is so cancelled by the issuing person, the issuing person must give the instrument of cancellation to the Australian Designated Authority as soon as practicable after the order is cancelled. If the telephone application was made on behalf of a relevant agency, the Australian Designated Authority must inform the chief officer of the relevant agency of the cancellation as soon as practicable after the instrument of cancellation is given to the Australian Designated Authority. If the telephone application was made on behalf of the Organisation, the Australian Designated Authority must inform the Organisation of the cancellation as soon as practicable after the instrument of cancellation is given to the Australian Designated Authority.

648. Subclause 172(6) provides that if the Australian Designated Authority has already given the subsequently-cancelled IPO to the relevant prescribed communications provider, the Australian Designated Authority must give the instrument of cancellation to the prescribed communications provider as soon as practicable after that instrument is given to the Australian Designated Authority. This will ensure that the relevant prescribed communications provider is informed of the cancellation as soon as practicable, and will not invest time, resources, or further time or resources, towards compliance with the order.

649. Subclause 172(7) provides that if the instrument of cancellation is required to be given to the prescribed communications provider, the cancellation takes effect when the instrument is given. In all other cases, the cancellation takes effect when the cancellation is made.

650. Subclause 172(8) provides that if an IPO is cancelled under clause 172, and the Australian Designated Authority has not made a decision about giving the order under clause 111 or 112, that decision ceases to be available once the cancellation takes effect.

Duty of nominated AAT Security Division member

651. Clause 173 provides that a nominated AAT Security Division member has a duty to ensure, so far as possible, that in or in connection with actions under this Schedule, information is not communicated or made available to a person contrary to the requirements of security. This is consistent with the duty of the Tribunal in section 39B(11) of the AAT Act.

Certified copies of International Production Orders

652. Clauses 174 to 178 ensure that a document certified in writing by a relevant certifying officer or certifying person to be a true copy of an IPO, is to be received in evidence in mentioned proceedings as if it were the original IPO.

Delegation by the Australian Designated Authority

653. Subclause 179(1) permits the Australian Designated Authority to delegate by writing any or all of the Australian Designated Authority's functions or powers under this Schedule to an SES/EL2/EL1 employee (including those acting in those positions) in the Attorney-General's Department. For clarity, a note is included that references section 2B of the Acts Interpretation Act 1901.

654. The ability to delegate, to an appropriately senior employee such as an executive or senior executive level employee, the functions or the powers of the Australian Designated Authority is important to streamline the day-to-day operations of the Australian Designated Authority, and is consistent with the approach taken in international crime cooperation more broadly.

655. Subclause 179(2) requires that a delegate must comply with any directions of the Australian Designated Authority when performing functions, or exercising powers under a delegation under subclause 179(1).

Minor defects in connection with International Production Order

656. Clause 180 provides that where information is purportedly obtained in accordance with an IPO, and there is a defect or irregularity in relation to the IPO, the information is taken to have been obtained in accordance with the IPO. It must be the case that apart from that defect or irregularity, the information would have been obtained in accordance with that IPO.

657. A defect or irregularity in relation to an IPO means one that is not a substantial defect or irregularity, and is in connection with the issue of a document purporting to be the IPO, or in connection with compliance with the IPO, or in connection with purported compliance with a document purporting to be the IPO. The intention is to minimise evidence being excluded solely on the basis of a defect or irregularity.

Protection of persons - control order declared to be void

658. Subclause 181(1) provides a safeguard to protect from criminal proceedings a person acting in good faith in purported compliance with an IPO issued on the basis of an interim control order, where a court subsequently declares the interim control order on which the IPO was issued, to be void.

Subclause 181(2) provides subclause (1) does not apply if, at that time, the person knew, or ought reasonably to have known, of the declaration.

Specification of international agreements

659. Clause 182 provides for the specification of international agreements. It establishes that where there is an agreement between Australia and one or more foreign countries, and the name of the agreement is specified in one of the items listed under subclause 182(1)(b)(i)-(iv), a reference in the regulations, application, order or other instrument (as the case may be) to the agreement is a reference to the agreement as amended and in force for Australia from time to time.

660. Subclause 182(1) is included for the avoidance of any doubt as to whether a reference to an agreement is both current and intended to refer to the instrument as in force from time to time. This will make the agreement material that can be looked to in ascertaining any policy intention or meaning underlying the Bill, and this will further ensure that both section 14 of the Legislation Act 2003 and section 46AA of the Acts Interpretation Act 1901 do not place limits on the way an agreement can be incorporated into legislation by reference.

661. Subclause 182(2) reflects the requirements in clause 3 that an agreement as affected by an amendment only becomes a designated international agreement where a copy of the English text of the amendment is set out in the regulations. As such, a reference to the name of an agreement in any of the instruments referred to in subclause 182(1) can only refer to the agreement as amended if the amendment is set out in regulations made for the purposes of subclause 3(1) or (3).

Operation of the Mutual Assistance in Criminal Matters Act 1987 not limited

662. Clause 183 ensures that the Schedule is not taken to limit the operation of the Mutual Assistance in Criminal Matters Act 1987. The framework set up in the Schedule is separate and does not derogate from the mutual legal assistance processes.

Other functions or powers not limited

663. Clause 184 provides the Schedule is not intended to limit the powers or functions of relevant agencies, the Organisation, or any other body or person, in requesting or obtaining assistance or information from a prescribed communications provider or any other body or person. A body or person may, outside the IPO regime, request or obtain, or continue to request or obtain, information or assistance via any alternate means. The request for or obtaining of assistance or information does not need to be in response to the application of powers by that body or person, and may include voluntary disclosures or assistance.

Part 2 - Application and Transitional Provisions

Item 44 Application - declaration of eligible Judges

664. This item provides the amendment of subsection 6D(3) of the TIA Act made by this Schedule (see items 14 and 15 above) applies in relation to a declaration made after the commencement of this item.

Part 3 - Amendment contingent on the commencement of the Federal Circuit and Family Court of Australia

Telecommunications (Interception and Access) Act 1979

Item 45 Subclause 126(3) of Schedule 1

665. Item 45 is a contingency amendment relating to the relationship between clause 126 of Schedule 1, as introduced by the Bill, and the Federal Circuit and Family Court of Australia (Consequential Amendments and Transitional Provisions) Bill 2019. This item provides, on commencement of the Federal Circuit and Family Court of Australia Act 2020, the reference in subclause 126(3) to the Federal Circuit Court of Australia is to be omitted and substituted with a reference to the Federal Circuit and Family Court of Australia.

666. Subclause 126(3) of Schedule 1, as introduced by the Bill, relates to the relevant courts in relation to a civil penalty provision in Part 6 of Schedule 1, for the purposes of Part 4 of the Regulatory Powers (Standard Provisions) Act 2014.

Part 4 - Minor amendments

Surveillance Devices Act 2004

Item 46 Subsection 42(6)

667. Item 46 amends subsection 42(6) of the Surveillance Devices Act 2004 to provide that, in circumstances where evidence in writing is required that certain surveillance has been agreed to by an appropriate consenting foreign official, that evidence must be given by the chief officer of the law enforcement agency which applied for a warrant authorising the surveillance to the Minister for Home Affairs, and not to the Attorney-General. This is a minor amendment correcting an earlier drafting error.

Telecommunications (Interception and Access) Act 1979

Item 47 Subsection 6DA(1)

668. This item removes the ability for nominated AAT members to issue warrants under Part 3-3 of the TIA Act.

Item 48 Subsection 6DA(4)

669. This item removes reference to '3-3', as it becomes redundant from the removal in item 47.

Item 49 Transitional - nomination of AAT member

670. Sub-items (1) and (2) clarify that the amendments made under items 47 and 48 apply to nominations under section 6DA in force immediately before the commencement of the Bill. This also ensures endurance of existing nominations whilst removing redundant references. This does not change what current nominated AAT members can authorise, as the reference to Part 3-3 was redundant and did not permit AAT members to authorise stored communications warrants. Only issuing authorities are permitted to do so.