Documents Relating to the Sharing of DVA Client Information
Dear FOI Officer,
I am making this request for access to documents under the Freedom of Information Act 1982 (Cth).
I seek access to any and all documents, records, data, and supporting material held by [Name of Agency] concerning the sharing of personal information originating from the Department of Veterans’ Affairs (DVA) over the last ten years. This includes any data transfers from or to the DVA, whether they were one-off exchanges or ongoing, systematic transfers of DVA client information, including personal, medical, financial, or service-related details concerning veterans or their dependents.
I am interested in obtaining a comprehensive understanding of what DVA client information [Authority name] has received or accessed and for what purposes. Specifically, I request:
All records of data sharing arrangements between DVA and [Authority name], including but not limited to memoranda of understanding, service-level agreements, emails, letters, meeting minutes, file transfer logs, internal reports, and instructions that outline what data was shared, when it was shared, and the format or system used for the transfer.
Any policies, procedures, guidelines, or frameworks that govern how [Authority name] requests, obtains, stores, handles, or uses DVA client information. This includes documents that detail the criteria for approving access to such data, any consent or authorization processes, security controls, and retention or destruction policies.
Copies of any ethics committee approvals, privacy impact assessments, internal review board decisions, or other documents that reflect deliberations or authorizations for obtaining DVA client information. This includes records that show the agency considered the ethical, legal, or privacy implications of receiving or using DVA client data.
Documents that outline the intended uses or practical applications of the DVA client data, such as project proposals, business cases, internal strategy papers, or briefings that explain why [Authority name] sought access to this information, how it was intended to be integrated into the agency’s operations, and any expected outcomes or benefits.
A representative sample (in a suitably de-identified or redacted form) of the data or data fields received, so long as providing this sample does not breach any exemption under the FOI Act. The purpose is to understand the nature and granularity of the information shared, without disclosing identifiable personal details.
If the only data [Authority name] received pertains solely to data linked to the Centrelink Confirmation eServices (CCeS) arrangements as described at https://www.servicesaustralia.gov.au/cen..., and there were no other forms of DVA data shared, then no CCeS-related data needs to be provided under this request.
I emphasize that I am not authorizing the transfer of this FOI request to the Department of Veterans’ Affairs or any other agency. If [Authority name] holds the requested information, it should provide it directly. If there are parts of this request that [Name of Agency] does not understand or believes are not held, I invite you to contact me to clarify or refine the scope under section 24AB of the FOI Act, rather than initiating a transfer. However, I do not consent to the transfer of this request to another entity. The FOI Act places the onus on agencies to process requests for documents they hold, and I expect [Authority name] to meet its responsibilities in this regard.
I note that the statutory timeframe for processing FOI requests is 30 days from the date of receipt. I do not consent to any extension of time due to internal reduced activity periods, holiday stand-down periods, or other internal operational issues. If [Authority name] considers that it cannot meet the 30-day timeframe, it may seek an extension from the Office of the Australian Information Commissioner as provided under section 15AB of the FOI Act. I request to be notified if such an application is made.
If you consider any part of this request too broad or complex, please contact me promptly to discuss refining its scope. I remain willing to consider adjustments that will assist efficient processing, provided that they occur within the statutory timeframe and do not undermine the substance of what I am seeking.
I believe that disclosure of these documents is in the public interest, as it promotes transparency and accountability in how government agencies access and use sensitive personal information about veterans. Should you consider charges applicable, I request that you exercise your discretion to reduce or waive them, given the importance of the matter and its alignment with the principles of open government and public accountability.
I look forward to receiving your acknowledgment and decision within the statutory timeframe. Please contact me at the details below if you require further clarification.
Yours sincerely,
Nosey
OFFICIAL
Dear NoseyRosey
The Department of Industry, Science and Resources (the department) has
received your Freedom of Information (FOI) request for access to:
…any and all documents, records, data, and supporting material held by
[Name of Agency] concerning the sharing of personal information
originating from the Department of Veterans’ Affairs (DVA) over the last
ten years. This includes any data transfers from or to the DVA, whether
they were one-off exchanges or ongoing, systematic transfers of DVA client
information, including personal, medical, financial, or service-related
details concerning veterans or their dependents.
I am interested in obtaining a comprehensive understanding of what DVA
client information [Authority name] has received or accessed and for what
purposes. Specifically, I request:
All records of data sharing arrangements between DVA and [Authority name],
including but not limited to memoranda of understanding, service-level
agreements, emails, letters, meeting minutes, file transfer logs, internal
reports, and instructions that outline what data was shared, when it was
shared, and the format or system used for the transfer.
Any policies, procedures, guidelines, or frameworks that govern how
[Authority name] requests, obtains, stores, handles, or uses DVA client
information. This includes documents that detail the criteria for
approving access to such data, any consent or authorization processes,
security controls, and retention or destruction policies.
Copies of any ethics committee approvals, privacy impact assessments,
internal review board decisions, or other documents that reflect
deliberations or authorizations for obtaining DVA client information. This
includes records that show the agency considered the ethical, legal, or
privacy implications of receiving or using DVA client data.
Documents that outline the intended uses or practical applications of the
DVA client data, such as project proposals, business cases, internal
strategy papers, or briefings that explain why [Authority name] sought
access to this information, how it was intended to be integrated into the
agency’s operations, and any expected outcomes or benefits.
A representative sample (in a suitably de-identified or redacted form) of
the data or data fields received, so long as providing this sample does
not breach any exemption under the FOI Act. The purpose is to understand
the nature and granularity of the information shared, without disclosing
identifiable personal details.
This email is to acknowledge receipt of your request.
Your reference is FOI 76309.
A decision is currently due to you by 13 January 2025. This due date may
be affected by the requirement to undertake consultation with third
parties or if it is determined that you are liable to pay a charge in
relation to your request. You will be notified by the department if this
happens.
If you have any questions, please contact the FOI team.
Kind regards
Freedom of Information Team
Chief Counsel & Integrity Division | Corporate & information Law Branch |
Information Law Team
Department of Industry, Science and Resources
[1][email address]
OFFICIAL
References
Visible links
1. mailto:[email address]
OFFICIAL
Dear NoseyRosey
The Department of Industry, Science and Resources (the department) has
received your Freedom of Information (FOI) request for access to:
…any and all documents, records, data, and supporting material held by
[Name of Agency] concerning the sharing of personal information
originating from the Department of Veterans’ Affairs (DVA) over the last
ten years. This includes any data transfers from or to the DVA, whether
they were one-off exchanges or ongoing, systematic transfers of DVA client
information, including personal, medical, financial, or service-related
details concerning veterans or their dependents.
I am interested in obtaining a comprehensive understanding of what DVA
client information [Authority name] has received or accessed and for what
purposes. Specifically, I request:
All records of data sharing arrangements between DVA and [Authority name],
including but not limited to memoranda of understanding, service-level
agreements, emails, letters, meeting minutes, file transfer logs, internal
reports, and instructions that outline what data was shared, when it was
shared, and the format or system used for the transfer.
Any policies, procedures, guidelines, or frameworks that govern how
[Authority name] requests, obtains, stores, handles, or uses DVA client
information. This includes documents that detail the criteria for
approving access to such data, any consent or authorization processes,
security controls, and retention or destruction policies.
Copies of any ethics committee approvals, privacy impact assessments,
internal review board decisions, or other documents that reflect
deliberations or authorizations for obtaining DVA client information. This
includes records that show the agency considered the ethical, legal, or
privacy implications of receiving or using DVA client data.
Documents that outline the intended uses or practical applications of the
DVA client data, such as project proposals, business cases, internal
strategy papers, or briefings that explain why [Authority name] sought
access to this information, how it was intended to be integrated into the
agency’s operations, and any expected outcomes or benefits.
A representative sample (in a suitably de-identified or redacted form) of
the data or data fields received, so long as providing this sample does
not breach any exemption under the FOI Act. The purpose is to understand
the nature and granularity of the information shared, without disclosing
identifiable personal details.
This email is to acknowledge receipt of your request.
Your reference is FOI 76309.
A decision is currently due to you by 13 January 2025. This due date may
be affected by the requirement to undertake consultation with third
parties or if it is determined that you are liable to pay a charge in
relation to your request. You will be notified by the department if this
happens.
If you have any questions, please contact the FOI team.
Kind regards
Freedom of Information Team
Chief Counsel & Integrity Division | Corporate & information Law Branch |
Information Law Team
Department of Industry, Science and Resources
[1][email address]
OFFICIAL
References
Visible links
1. mailto:[email address]
Dear Brooke King,
Thank you for your letter dated December 2024 regarding your notice of intention to refuse my FOI request under section 24AB of the Freedom of Information Act 1982 (Cth) (FOI Act). I do not accept the assertion that my request fails to meet the requirements of section 15(2)(b) or that it provides insufficient information for DFAT to identify the documents sought.
Clarity of Scope
My request explicitly outlines the types of documents sought, the subject matter (systematic sharing of personal information originating from the Department of Veterans’ Affairs [DVA]), and the timeframe (ten years). To reiterate, I seek:
Formal Agreements
Memoranda of understanding (MOUs), service-level agreements (SLAs), or other formal agreements governing the sharing of DVA client data.
Governance Documents
Policies, procedures, guidelines, or frameworks that govern how DFAT accesses, uses, stores, or disposes of DVA client data.
Privacy and Ethical Deliberations
Privacy impact assessments, internal reviews, or documents reflecting ethical, legal, or privacy considerations for handling DVA data.
Intended Uses
Internal strategy papers, briefings, or project proposals outlining the purpose and application of DVA data received or shared by DFAT.
Sample Data Fields
A de-identified or redacted sample of data fields shared, unless limited to Centrelink Confirmation eServices (CCeS) data, which can be excluded.
This scope is sufficiently precise to enable DFAT to identify the relevant business areas and document types.
Departmental Responsibility
It is DFAT’s responsibility under section 15(2)(b) of the FOI Act to make reasonable efforts to locate documents that meet the described parameters. The suggestion to consult the department’s organisational chart and identify the relevant branch or area misplaces the responsibility for identifying line areas onto the applicant. It is not my role to undertake DFAT’s internal processes.
If DFAT is unable to identify a specific branch or team responsible for the data-sharing arrangements described, it is reasonable to expect DFAT to conduct an internal consultation with appropriate divisions, including those responsible for data governance, legal compliance, or inter-agency agreements.
Rejection of Practical Refusal Reason
The cited basis for practical refusal under section 24AB(2) is invalid. My request clearly identifies:
The type of documents sought;
The timeframe (ten years); and
The subject matter (systematic data-sharing arrangements involving DVA data).
DFAT has not demonstrated that fulfilling this request would involve an unreasonable diversion of resources or that the scope is overly vague.
Request Not to Withdraw
I do not consent to withdraw or substantially revise the scope of my request, as it already meets the statutory requirements under the FOI Act. Should DFAT proceed with a formal refusal decision, I expect a detailed explanation of why the request cannot be processed, including evidence supporting claims of excessive resource diversion or vagueness.
Processing Expectations
I request that DFAT fulfills its obligations under the FOI Act and processes my request without further unnecessary delay. If any genuine processing challenges arise, I expect DFAT to engage with me promptly to refine the request in a way that preserves its substance.
Thank you for your attention to this matter. I look forward to your response within the statutory timeframe.
Yours sincerely,
Nosey
OFFICIAL
Dear Noseyrosey
I refer to your below email received by the Department of Industry, Science and Resources (DISR) on 30 December 2024, in which you appear to respond to a notice of intention to refuse your FOI request.
It appears your email is intended for the Department of Foreign Affairs and Trade (DFAT), not DISR.
Please resend the below email to DFAT so that their FOI Team can consider your response. DISR will take no further action in relation to your response to DFAT's notice of intention to refuse.
Kind regards
Rebecca
A/g Senior Freedom of Information Officer Chief Counsel & Integrity Division | Corporate & information Law Branch | Information Law Team Department of Industry, Science and Resources [email address]
Acknowledgement of Country
Our department recognises the First Peoples of this nation and their ongoing connection to culture and country. We acknowledge First Nations Peoples as the Traditional Owners, Custodians and Lore Keepers of the world's oldest living culture and pay respects to their Elders past, present and emerging.
OFFICIAL
OFFICIAL
-----Original Message-----
From: noseyrosey <[FOI #12603 email]>
Sent: Monday, 30 December 2024 6:09 PM
To: Freedom of Information <[Department of Industry, Science, Energy & Resources request email]>
Subject: Re: FOI acknowledgement of request 76309 [SEC=OFFICIAL]
CAUTION - This email originated from outside of the organisation. Do not click links or open attachments unless you recognise the sender and know the content is safe.
Dear Brooke King,
Thank you for your letter dated December 2024 regarding your notice of intention to refuse my FOI request under section 24AB of the Freedom of Information Act 1982 (Cth) (FOI Act). I do not accept the assertion that my request fails to meet the requirements of section 15(2)(b) or that it provides insufficient information for DFAT to identify the documents sought.
Clarity of Scope
My request explicitly outlines the types of documents sought, the subject matter (systematic sharing of personal information originating from the Department of Veterans’ Affairs [DVA]), and the timeframe (ten years). To reiterate, I seek:
Formal Agreements
Memoranda of understanding (MOUs), service-level agreements (SLAs), or other formal agreements governing the sharing of DVA client data.
Governance Documents
Policies, procedures, guidelines, or frameworks that govern how DFAT accesses, uses, stores, or disposes of DVA client data.
Privacy and Ethical Deliberations
Privacy impact assessments, internal reviews, or documents reflecting ethical, legal, or privacy considerations for handling DVA data.
Intended Uses
Internal strategy papers, briefings, or project proposals outlining the purpose and application of DVA data received or shared by DFAT.
Sample Data Fields
A de-identified or redacted sample of data fields shared, unless limited to Centrelink Confirmation eServices (CCeS) data, which can be excluded.
This scope is sufficiently precise to enable DFAT to identify the relevant business areas and document types.
Departmental Responsibility
It is DFAT’s responsibility under section 15(2)(b) of the FOI Act to make reasonable efforts to locate documents that meet the described parameters. The suggestion to consult the department’s organisational chart and identify the relevant branch or area misplaces the responsibility for identifying line areas onto the applicant. It is not my role to undertake DFAT’s internal processes.
If DFAT is unable to identify a specific branch or team responsible for the data-sharing arrangements described, it is reasonable to expect DFAT to conduct an internal consultation with appropriate divisions, including those responsible for data governance, legal compliance, or inter-agency agreements.
Rejection of Practical Refusal Reason
The cited basis for practical refusal under section 24AB(2) is invalid. My request clearly identifies:
The type of documents sought;
The timeframe (ten years); and
The subject matter (systematic data-sharing arrangements involving DVA data).
DFAT has not demonstrated that fulfilling this request would involve an unreasonable diversion of resources or that the scope is overly vague.
Request Not to Withdraw
I do not consent to withdraw or substantially revise the scope of my request, as it already meets the statutory requirements under the FOI Act. Should DFAT proceed with a formal refusal decision, I expect a detailed explanation of why the request cannot be processed, including evidence supporting claims of excessive resource diversion or vagueness.
Processing Expectations
I request that DFAT fulfills its obligations under the FOI Act and processes my request without further unnecessary delay. If any genuine processing challenges arise, I expect DFAT to engage with me promptly to refine the request in a way that preserves its substance.
Thank you for your attention to this matter. I look forward to your response within the statutory timeframe.
Yours sincerely,
Nosey
-----Original Message-----
OFFICIAL
Dear NoseyRosey
The Department of Industry, Science and Resources (the department) has
received your Freedom of Information (FOI) request for access to:
…any and all documents, records, data, and supporting material held by
[Name of Agency] concerning the sharing of personal information
originating from the Department of Veterans’ Affairs (DVA) over the last
ten years. This includes any data transfers from or to the DVA, whether
they were one-off exchanges or ongoing, systematic transfers of DVA client
information, including personal, medical, financial, or service-related
details concerning veterans or their dependents.
I am interested in obtaining a comprehensive understanding of what DVA
client information [Authority name] has received or accessed and for what
purposes. Specifically, I request:
All records of data sharing arrangements between DVA and [Authority name],
including but not limited to memoranda of understanding, service-level
agreements, emails, letters, meeting minutes, file transfer logs, internal
reports, and instructions that outline what data was shared, when it was
shared, and the format or system used for the transfer.
Any policies, procedures, guidelines, or frameworks that govern how
[Authority name] requests, obtains, stores, handles, or uses DVA client
information. This includes documents that detail the criteria for
approving access to such data, any consent or authorization processes,
security controls, and retention or destruction policies.
Copies of any ethics committee approvals, privacy impact assessments,
internal review board decisions, or other documents that reflect
deliberations or authorizations for obtaining DVA client information. This
includes records that show the agency considered the ethical, legal, or
privacy implications of receiving or using DVA client data.
Documents that outline the intended uses or practical applications of the
DVA client data, such as project proposals, business cases, internal
strategy papers, or briefings that explain why [Authority name] sought
access to this information, how it was intended to be integrated into the
agency’s operations, and any expected outcomes or benefits.
A representative sample (in a suitably de-identified or redacted form) of
the data or data fields received, so long as providing this sample does
not breach any exemption under the FOI Act. The purpose is to understand
the nature and granularity of the information shared, without disclosing
identifiable personal details.
This email is to acknowledge receipt of your request.
Your reference is FOI 76309.
A decision is currently due to you by 13 January 2025. This due date may
be affected by the requirement to undertake consultation with third
parties or if it is determined that you are liable to pay a charge in
relation to your request. You will be notified by the department if this
happens.
If you have any questions, please contact the FOI team.
Kind regards
Freedom of Information Team
Chief Counsel & Integrity Division | Corporate & information Law Branch |
Information Law Team
Department of Industry, Science and Resources
[1][email address]
OFFICIAL
References
Visible links
1. mailto:[email address]
-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #12603 email]
This request has been made by an individual using Right to Know. This message and any reply that you make will be published on the internet. More information on how Right to Know works can be found at:
https://www.righttoknow.org.au/help/offi...
Please note that in some cases publication of requests and responses will be delayed.
If you find this service useful as an FOI officer, please ask your web manager to link to us from your organisation's FOI page.
-------------------------------------------------------------------
OFFICIAL
Dear Noseyrosey
Please find attached correspondence in relation to your FOI request,
reference 76309.
A response is required by 17 January 2025.
Should you have any queries regarding this matter, please contact me on
[1][email address].
Kind regards
Rebecca
A/g Senior Freedom of Information Officer
Chief Counsel & Integrity Division | Corporate & information Law Branch |
Information Law Team
Department of Industry, Science and Resources
[2][email address]
Acknowledgement of Country
[3]Meeting
place icon Our department recognises the First Peoples of this nation and
by Amy their ongoing connection to culture and country. We acknowledge
Huggins First Nations Peoples as the Traditional Owners, Custodians and
Lore Keepers of the world's oldest living culture and pay
respects to their Elders past, present and emerging.
[4]Connection to Country, 2021 Shaenice Allan
OFFICIAL
References
Visible links
1. mailto:[email address]
2. mailto:[email address]