🇦🇺 Australian Government Intelligence & Advisory Platform
YourGov.com.au
Federal
Non-corporate Commonwealth Entity
Justice and Law Enforcement

Office of the Australian Information Commissioner

Portfolio: Attorney-General's

http://www.oaic.gov.au

Annual Budget

$37M

2026-27 Budget (Budget Paper No. 4)
-8.0%vs prior year ($40M)
Total Revenue

$25M

2024-25 Total Revenue
Staff

200

Headcount (2024-25)
Budget Commentary

Material downward shift in 2026-27 funding (-8.0%, $3M change). 2025-26 estimated actual $40M → 2026-27 budget $37M. Source: Budget Paper No. 4, Agency Resourcing tables.

Major Digital Projects
3

Case Management Solution (CMS) Program

Administrative Review Tribunal

Tier 2
DCA: Medium-Low
Active

Total Budget

$29.6M

Digital Budget

$29.6M

January 2022June 2027

This project will establish a new single case management system for the Administrative Review Tribunal (ART), replacing multiple outdated legacy systems that the ART currently relies on. The new, whole-of-agency case management system will improve ART users' digital experience and staff productivity to support the ART’s statutory objectives.

Evidence Management Modernisation Program (EMM or EMMP), formerly Digital Litigation Solutions

Commonwealth Director of Public Prosecutions

Tier 3
Closed

Total Budget

$22.7M

Digital Budget

$3.6M

January 2023June 2025

This investment is modernising how digital evidentiary material is managed by the Office of the Director of Public Prosecutions (Commonwealth) by introducing a digital solution and establishing an internal digital evidence capability to more effectively manage large volumes of digital evidence. This involves transitioning from legacy systems and establishing optimum support arrangements for an efficient prosecution service.

Secure Court Information Management System (SCIMS)

Attorney-General’s Department

Tier 3
Active

Total Budget

$15.1M

Digital Budget

$15.1M

July 2024June 2028

The Australian Government requires the development and delivery of a digital, remote-access court information management system that is secure, accredited and highly available. SCIMS is necessary to support the electronic presentation and protection of classified material (up to and including SECRET) for legal matters that deal with national security information materials in the lead up to, and during court proceedings.

Ideas relevant to this department

8 tagged

Reform proposals on YourGov that name this department as a delivery partner — drawn from citizen voice, government strategy, research, international examples and gap analysis.

STRATEGY SUMMARY

To promote and uphold privacy and information access rights.

PURPOSE

To promote and uphold privacy and information access rights.

Corporate Plan 2025-26 · p.9

Strategic priorities

· 6

1

Rights preservation in new and emerging technologies

Corporate Plan 2025-26 · p.16
2

Rebalancing power and information asymmetries

Corporate Plan 2025-26 · p.16
3

Ensuring timely access to government information

Corporate Plan 2025-26 · p.16
4

Excessive collection and retention of personal information

Corporate Plan 2025-26 · p.16
5

Systemic failures to enable timely access to government information

Corporate Plan 2025-26 · p.16
6

Advertising technology (Ad tech) such as pixel tracking

Corporate Plan 2025-26 · p.16

Outcomes

· 1

Outcome 1: Provision of public access to Commonwealth Government information, protection of individuals’ personal information, and performance of Information Commissioner, freedom of information and privacy functions

The OAIC’s activities support the effective regulation of the Consumer Data Right (CDR) and the advancement of online privacy protections.

KEY ACTIVITIES

  • Influence and uphold privacy and information access rights frameworks
  • Advance online privacy protections for Australians
  • Encourage and support proactive release of government information
  • Take a contemporary, harms-based approach to regulation

Values

· 5

Independent

Agile

Engaged

Targeted

Expert

Performance measures

· 4

CodeMeasureTarget 2025-26Latest resultStatus

PRI01

Effectiveness of the OAIC’s contribution to the regulation of the Consumer Data Right (CDR) as measured by stakeholder feedback

Baseline to be set

Corporate Plan 2025-26 · p.26

71

Annual Report 2023-24 · p.23
Achieved

PRI02

Percentage of regulated entities that report satisfaction with OAIC guidance and resources

Baseline to be set

Corporate Plan 2025-26 · p.28

78%

Annual Report 2023-24 · p.23
Not achieved

FOI01

Percentage of OAIC recommendations accepted by agencies following FOI complaint investigations

90%

Corporate Plan 2025-26 · p.30

65%

Annual Report 2023-24 · p.26
Not achieved

FOI02

Initial assessments are completed and recorded on all proactive regulatory activities to ensure appropriate and proportionate regulatory responses

100%

Corporate Plan 2025-26 · p.31

97%

Annual Report 2023-24 · p.26
Achieved

Ideas distilled from this entity's strategy & evidence

· 8

Case Processing

Reduce FOI complaint finalization time

Implement a targeted review and feedback loop for FOI complaints to reduce the time taken to finalise complaints.

Impact: High
Effort: High
Medium

2023-24.pdf [AR p.23]

Regulation & Policy

Adopt EU’s Privacy Checklist

Adopt and adapt the EU’s Privacy Checklist to guide regulated entities in complying with Australian privacy laws.

Impact: Very High
Effort: High
Large

association-worldbank.org-governance.txt

Case Processing

Increase acceptance of OAIC recommendations

Launch a targeted outreach and education program to increase the acceptance rate of OAIC recommendations following FOI complaint investigations.

Impact: High
Effort: High
Large

2025-26.pdf [CP p.30]

Data & Performance

Build public dashboard for FOI statistics

Create a public dashboard showing weekly active-compliance-monitoring counts by FOI Act decision class.

Impact: Medium
Effort: Medium
Small

2023-24.pdf [AR p.26]

Case Processing

Implement complaint triage system

Develop a triage system to categorize and prioritize privacy and FOI complaints for faster resolution.

Impact: High
Effort: Medium
Small

2023-24.pdf [AR p.23]

Data & Performance

Generate monthly FOI response report

Generate a monthly report detailing the status of FOI complaint investigations and resolutions.

Impact: Medium
Effort: Low
Small

2023-24.pdf [AR p.26]

Regulation & Policy

Conduct annual review of privacy policies

Conduct an annual comprehensive review and update of privacy policies to ensure they align with current laws and best practices.

Impact: High
Effort: High
Large

2025-26.pdf [CP p.10]

Risk & Assurance

Create data breach dashboard

Develop a real-time dashboard to display data breach incidents and OAIC’s response actions.

Impact: High
Effort: Medium
Small

annual-reports-index__03.html

Case Processing

Reduce FOI complaint finalization time

Implement a targeted review and feedback loop for FOI complaints to reduce the time taken to finalise complaints.

Impact: High
Effort: High
Medium

2023-24.pdf [AR p.23]

Regulation & Policy

Adopt EU’s Privacy Checklist

Adopt and adapt the EU’s Privacy Checklist to guide regulated entities in complying with Australian privacy laws.

Impact: Very High
Effort: High
Large

association-worldbank.org-governance.txt

Case Processing

Increase acceptance of OAIC recommendations

Launch a targeted outreach and education program to increase the acceptance rate of OAIC recommendations following FOI complaint investigations.

Impact: High
Effort: High
Large

2025-26.pdf [CP p.30]

Data & Performance

Build public dashboard for FOI statistics

Create a public dashboard showing weekly active-compliance-monitoring counts by FOI Act decision class.

Impact: Medium
Effort: Medium
Small

2023-24.pdf [AR p.26]

Case Processing

Implement complaint triage system

Develop a triage system to categorize and prioritize privacy and FOI complaints for faster resolution.

Impact: High
Effort: Medium
Small

2023-24.pdf [AR p.23]

Data & Performance

Generate monthly FOI response report

Generate a monthly report detailing the status of FOI complaint investigations and resolutions.

Impact: Medium
Effort: Low
Small

2023-24.pdf [AR p.26]

Regulation & Policy

Conduct annual review of privacy policies

Conduct an annual comprehensive review and update of privacy policies to ensure they align with current laws and best practices.

Impact: High
Effort: High
Large

2025-26.pdf [CP p.10]

Risk & Assurance

Create data breach dashboard

Develop a real-time dashboard to display data breach incidents and OAIC’s response actions.

Impact: High
Effort: Medium
Small

annual-reports-index__03.html

Legislation administered

· 9

Act

2010

Australian Information Commissioner Act 2010

The OAIC administers this Act to promote and uphold privacy and information access rights.

Act

1982

Freedom of Information Act 1982

The OAIC administers this Act to protect and uphold the public’s right of access to documents.

Act

1988

Privacy Act 1988

The OAIC administers this Act to protect individuals’ personal information.

Instrument

2019

Consumer Data Right (Authorised Deposit-Taking Institutions) Designation 2019

The OAIC administers this instrument to regulate the Consumer Data Right.

Instrument

2020

Consumer Data Right (Energy Sector) Designation 2020

The OAIC administers this instrument to regulate the Consumer Data Right in the energy sector.

Act

2012

My Health Records Act 2012

The OAIC administers this Act to regulate My Health Record system.

Instrument

2016

My Health Records Rules 2016

The OAIC administers these rules to regulate My Health Record system.

Act

2024

Digital ID Act 2024

The OAIC administers this Act to regulate the Digital ID system.

Act

2023

Identity Verification Services Act 2023

The OAIC administers this Act to regulate identity verification services.

Want the full analysis?

Download this month's report covering Office of the Australian Information Commissioner