Penalties

9.132   The final section of this chapter discusses two issues relating to penalties for the breach of specific secrecy offences: inconsistencies in current penalties for secrecy offences and the development of benchmark penalties for secrecy offences that include a requirement of harm.

Inconsistencies between specific secrecy offences

9.133   Penalties in specific secrecy offences vary widely, from a fine of $110^[157] to imprisonment for 25 years.^[158] The following table provides a breakdown of the maximum penalties applicable to specific secrecy offences, by percentage of offences identified by the ALRC.^[159]

9.134   The House of Representatives Standing Committee on Legal and Constitutional Affairs has expressed the view that ‘consistency in the range and expression of penalties in criminal secrecy provisions is desirable’, but acknowledged that ‘there may need to be some flexibility depending on the sensitivity of the information to be protected’.^[161]

9.135   In the course of this Inquiry, a number of stakeholders highlighted inconsistencies in the penalties for the unauthorised disclosure of similar kinds of information in similar contexts.^[162] For example, ACLEI noted that inconsistent penalty provisions apply to employees of the ACC and the AFP.^[163] These offences provide that:

• the maximum penalty that applies to members and staff of the ACC for recording, divulging or communicating information acquired in the performance of their duties or functions is a term of imprisonment for one year and a $5,500 fine;^[164] while

• the maximum penalty applying to members, employees and persons engaged by the AFP for engaging in similar conduct is a term of imprisonment for two years and $13,200 fine.^[165]

9.136   ACLEI submitted that the penalty in the Australian Crime Commission Act 2002 (Cth) should be made consistent with that under the Australian Federal Police Act 1979 (Cth).^[166]

9.137   The DHS also noted that penalties vary across its portfolio legislation:

For example, the penalty for an employee disclosing (however termed) protected information ranges from $500 (Health Insurance Act) to 2 years imprisonment and 120 penalty units ($13,200 at the time of writing) (Dental Benefits Act [2008 (Cth)]). Medicare Australia advises that the information protected under the Health Insurance Act and the Dental Benefits Act is essentially the same.^[167]

9.138   The DHS stated that these anomalies are even more noticeable within agencies that are subject to more than one secrecy provision. For example, an officer of Medicare Australia who discloses information protected under the National Health Act faces a maximum fine 10 times that of an officer committing the same offence under the Health Insurance Act, and only the former attracts a sentence of imprisonment.^[168]

Even within the same Act there are apparent inconsistencies. Under the Health Insurance Act a person who offers to supply protected information can be imprisoned for 2 years, whereas the maximum penalty for actually doing so is $500.^[169]

Inconsistencies with the Crimes Act

9.139   Part IA of the Crimes Act contains a number of provisions relevant to determining penalties for breach of a federal offence, which apply unless the specific offence provides otherwise. These provisions set out default rules regarding pecuniary penalty to imprisonment ratios;^[170] penalties for corporations;^[171] and different penalties for summary and indictable proceedings.^[172]

9.140   The ALRC has identified a number of specific secrecy offences which are inconsistent with the approach set out under the Crimes Act, including that:

• the fine to imprisonment ratio provided by some secrecy offences differs—to varying degrees—from the standard ratio of five penalty units to one month of imprisonment (5:1 ratio) set out in s 4B of the Crimes Act;^[173]

• the maximum fines applicable to bodies corporate provided under some secrecy offences differ from the ‘times five’ multiplier provided by s 4B(3) of the Crimes Act;^[174]

• some indictable secrecy offences provide for penalties where the offence is dealt with summarily that differ from those provided by s 4J(3) of the Crimes Act;^[175] and

• some secrecy provisions provide that they are summary offences, but include penalties which, under s 4H of the Crimes Act, would make the offence an indictable offence.^[176]

9.141   In DP 74, the ALRC proposed that, in order to ensure consistency, specific secrecy offences should not stipulate:

• fines for individuals and corporations different from those that would apply if the formulas set out in the Crimes Act were adopted;

• penalties different from those that would apply if the alternative penalties for proceeding summarily on an indictable offence set out in the Crimes Act were adopted; or

• a penalty punishable on summary conviction when, under the Crimes Act, an offence carrying that maximum penalty would otherwise be tried before a jury on indictment.^[177]

Penalty benchmarks

9.142   The Guide to Framing Commonwealth Offences sets out principles for setting penalties in Commonwealth criminal offences. As a general principle, the Guide states that:

A maximum penalty should be adequate and appropriate to act as an effective deterrent to commission of the offence to which it applies, and should reflect the seriousness of the offence in the relevant legislative scheme. A heavier penalty will be appropriate where there are strong incentives to commit the offence, or where the consequences of the commission of the offence are particularly dangerous or damaging.^[178]

9.143   The Guide also sets out penalty benchmarks for certain classes of offences.^[179] It specifies a maximum penalty benchmark of two years imprisonment or 120 penalty units for breach of secrecy provisions—citing as examples provisions which relate to both initial^[180] and subsequent^[181] unauthorised disclosure of Commonwealth information.

9.144   The exercise of judicial discretion in sentencing allows the imposition of a lower penalty if justified by the nature and circumstances of the offence and any injury, loss or damage resulting from the offence.^[182]

9.145   The Guide directs those framing offences to ‘ensure [the] penalty fits with other penalties in Commonwealth law’:

Penalties should be framed to maximise consistency with penalties for existing offences of a similar kind or of similar seriousness. Penalties within a given legislative regime should reflect the relative seriousness of the offences within that scheme.^[183]

9.146   Therefore, the penalties for contravention of specific secrecy offences—which, in the ALRC’s view, should generally include a requirement that the disclosure cause, or be likely or intended to cause harm to an essential public interest^[184]—should be comparable to penalties for conduct that causes similar kinds of harm and consistent with the culpability of the offender, which will be determined by a number of factors including the fault elements that apply to the offence.

9.147   Other benchmarks specified in the Guide to Framing Commonwealth Offences are relevant in gauging the relative criminality of conduct that results in harm to public interests. For example, the Guide includes the following penalty benchmarks:

• six months imprisonment, or 30 penalty units, for offences by witnesses;

• 50 to 60 penalty units for failure to lodge reports or returns;

• 12 months imprisonment, or 60 penalty units, for making false statements in notices or applications or failing to provide information that is required;

• two years imprisonment, or 120 penalty units, for breaching confidentiality requirements and for making false statements in applications for warrants;

• five years imprisonment, or 300 penalty units, for corruption and abuse of public office; and

• life imprisonment for treason, certain war crimes and terrorist acts.^[185]

9.148   Other federal offences that result in harm to public interests may also provide a guide for developing penalties for the breach of secrecy offences. For example, it is an offence for any person to disclose information about the identity or location of a person in the National Witness Protection Program, or information which compromises the security of such a person.^[186] Because of the serious harm that is likely to be caused by disclosure in breach of this provision, a maximum penalty of 10 years is prescribed.

9.149   In DP 74, the ALRC proposed that specific secrecy offences should generally provide for a maximum penalty of two years imprisonment, or a pecuniary penalty not exceeding 120 penalty units, or both.^[187] The ALRC also proposed that where an offence includes a requirement that the disclosure causes, or is likely or intended to cause, harm to an essential public interest, the penalty should be consistent with those proposed in the general secrecy offence. For example, where a person knows, is reckless as to whether, or intends the disclosure of Commonwealth information to damage, for example, national security the penalty should be a maximum of seven years imprisonment, or a pecuniary penalty not exceeding 420 penalty units, or both.^[188]

9.150   Finally, the ALRC has identified seven secrecy offences that specify maximum terms of imprisonment of three months.^[189] Such penalties are contrary to the advice contained in the Guide to Framing Commonwealth Offences,which directs those framing Commonwealth offences to refrain from imposing terms of imprisonment of less than six months:

Avoiding provision for short term prison terms underlines the message that imprisonment is reserved for serious offences and also avoids the potential for burdening State/Territory correctional systems with minor offenders.^[190]

9.151   In DP 74, the ALRC proposed that specific secrecy offences that provide for maximum penalties of imprisonment for less than six months, or by pecuniary penalties only, should be reviewed and considered for repeal.^[191]

Submissions and consultations

9.152   While only a few stakeholders commented on the proposals in DP 74 relating to penalties for specific secrecy offences, the common theme was support for consistency and the legal principle that similar offences should have similar penalties.

9.153   Liberty Victoria and CLA both supported a review of penalties to ensure consistency.^[192] The ACC expressed support for the general principle that penalties for secrecy offences should be consistent, but noted that in some circumstances there may be legitimate reasons why some penalties are higher or lower than others. For example, the ACC submitted that some penalties in the Australian Crime Commission Act are high because of difficulties experienced in achieving compliance with coercive powers exercised by ACC examiners.^[193]

9.154   In response to the discussion of appropriate penalties in IP 34,^[194] the AGD noted that currently most secrecy offences carry a maximum penalty of two years imprisonment and that this ‘seems to be an appropriate penalty for the majority of secrecy offences’, adding that:

Generally, those secrecy offences involving particularly sensitive or national security information impose higher maximum penalties. The underlying principle for the imposition of higher maximum penalties in this latter category of offences is that there are certain types of Commonwealth information, the unauthorised disclosure of which could cause significant harm to the public interest and as such require additional protection. By its nature, the unauthorised disclosure of national security information will carry a higher likelihood of harm to the public interest. For example, national security information that has been received from sensitive sources such as foreign governments could not only damage international relations with that government but also jeopardise the security or defence of Australia.^[195]

9.155   The AGD noted that maximum penalties can be set by reference to the fault elements that apply, as well as to the potential harm that could be caused by the relevant conduct.^[196]

9.156   The Law Council of Australia submitted that maximum penalties for secrecy offences should be ‘identified and set by reference to the kind of information protected’.^[197] The Public Interest Advocacy Centre submitted that:

the preferred approach should be to seek consistency in maximum penalties based on the following factors: the nature and volume of the material in question; the nature and extent of any harm or potential harm to identified public interests; the intent and motive of the defendant; the level of seniority and office held by the defendant; and any countervailing public interest factors.^[198]

9.157   A number of stakeholders submitted that secrecy offences should provide penalties that are consistent with the general provisions of Part IA of the Crimes Act.^[199]

ALRC’s views

9.158   In this Report, the ALRC recommends that specific secrecy offences should be used only where they are necessary to protect an essential public interest of sufficient importance to justify criminal sanction.^[200] Criminal penalties for disclosure of Commonwealth information should be reserved for disclosures that cause, or are likely or intended to cause, harm to essential public interests.^[201]

9.159   The penalty stated in a specific secrecy offence will therefore depend on the nature of the harm arising from the unauthorised disclosure of the information and the fault elements that apply to the particular offence.

9.160   In some cases, a higher maximum penalty will be appropriate: for example, where the fault element attaching to the harm, or the seriousness of the harm caused, or likely to be caused, by the disclosure, indicate a higher level of culpability.

9.161   In relation to the general secrecy offence, the ALRC recommends that a maximum penalty of seven years imprisonment is appropriate where a Commonwealth officer knows, or is reckless as to whether, or intends the disclosure of Commonwealth information to cause harm to:

• national security, defence or the international relations of the Commonwealth;

• the prevention, detection, investigation, prosecution or punishment of criminal offences;

• the life or physical safety of any person; or

• the protection of public safety.^[202]

9.162   The higher maximum penalty recommended in the general secrecy offence is intended to reflect the higher culpability of the offender—indicated by the fault element attaching to the harm and the seriousness of the harm that is likely to be caused.

9.163   As discussed in Chapter 8, there may be a need for specific secrecy offences to address harms not included in the general secrecy offence. For example, regulatory agencies, such as taxation and social security agencies and corporate regulators, need to strictly control sensitive personal and commercial information provided to them by the public. In these cases, the ALRC considers that the unauthorised disclosure of this information has the potential to harm the relationship of trust between the government and individuals, and compromise the effective functioning of these regulatory agencies—harms not included in the recommended general secrecy offence. In such cases, the ALRC considers that a maximum penalty of two years imprisonment, or 120 penalty units would reflect the nature of the harm arising from the disclosure and would be consistent with other similar offences.

9.164   In some cases, the ALRC’s recommended approach will mean that specific secrecy offences include tiers of offences that attract different penalties. The secrecy offences in the Surveillance Devices Act 2004 (Cth), which make it an offence to disclose protected information, take this approach. Protected information includes any information obtained from the use of a surveillance device, information relating to an application for, or existence of, a warrant, or any information that is likely to enable the identification of a person, object or premises specified in a warrant.^[203] The offence of unauthorised use, recording or disclosure of protected information carries a maximum penalty of two years imprisonment^[204]—which seems appropriate, given the need to protect information about, or obtained by covert surveillance.^[205] However, where the same conduct ‘endangers the health or safety of any person or prejudices the effective conduct of an investigation into a relevant offence’—both serious harms commensurate with those in the general secrecy offence—the offence provides for a higher penalty of 10 years imprisonment.^[206]

9.165   In the ALRC’s view, a particularly low penalty suggests that the specific secrecy offence is not directed to preventing disclosures that are likely to cause harm of sufficient seriousness to warrant a criminal offence. Given that there are a range of other mechanisms in place to protect government information—including administrative sanctions, contractual obligations and the general law—secrecy offences that are currently punishable by imprisonment for less than six months, or by pecuniary penalties only, should be reviewed and considered for repeal.^[207]

9.166   In the ALRC’s view, there appears to be no justification for inconsistency between the penalties in specific secrecy offences and the approach prescribed by the Crimes Act in relation to the fine to imprisonment ratio and penalties for summary and indictable offences. Such provisions should be reviewed with a view to bringing them into line with the criteria in the Crimes Act.