Stephen Jones (Throsby, Australian Labor Party, Shadow Parliamentary Secretary for Regional Development and Infrastructure) Share this | Hansard source

The member for Melbourne Ports reminds me that this was something that occurred at the Bankstown City Council, where I believe that they were using access to metadata to find out whether people were dropping their McDonald's wrappers and other litter around the streets of the municipality. I am sure a lot of people would look at those sorts of examples, scratch their heads and say, 'Is this the intention? Where is the national security imperative in allowing access to data for these sorts of purposes?'

The completely cack-handed mishandling of this debate has allowed a misunderstanding to occur, and it has also meant that the focus has been on the wrong issue. I have had a long history of dealing with telecommunications companies in this country in many different capacities. I know that for billing reasons, for example, and for resolving disputes between wholesalers and retailers and between customers and the telecommunications companies, they do keep this data, sometimes for two years; sometimes for much in excess of two years. Much of that data is kept, not always in a standard form. The inability of the government to clearly articulate these issues and what it was trying to do and then put a proper set of constraints around its proposal has meant the debate has completely gone off the rails. Labor has had to do the right thing by the country and the parliament to try and bring the debate back and the legislation back to a sensible proposition. We have put in a lot of effort, through the PJC process amongst other processes, to ensure that the obvious defects in this legislation have been remedied. I have to say that that is consistent with the approach that we have taken in this place with the foreign fighters bill when that was brought before the House and the counterterrorism legislation amendment bill—an approach that we have continued to follow.

If I take you through some of the concerns that we had had with the original bill and the action that has been taken by Labor members, both in the PJC process and in our discussions with the government, you will see where the obvious deficiencies in the bill have, in some part, been remedied and why more work is yet to be done. For example, in its original form, the bill left the definition of metadata and the datasets to be retained in regulation, setting very loose parameters on the matters which were to be prescribed. We thought that this was not good enough and that there needed to be a definition of metadata—what was metadata and what was not metadata—in the bill itself, and that has to some extent been remedied by the legislation before the House today. In its original form, the bill limited access to retained data to a list of agencies. The government have made a lot of noise about this change, saying that access was not going to be granted willy-nilly to a whole range of agencies—and we reflect upon the Bankstown City Council example that the member for Melbourne Ports reminded me of just now—but it left a huge back door by allowing the Attorney-General a broad discretion to add to that list of agencies or individuals who may have access to that metadata. We thought that that was not good enough. If the data is to be stored in a mandated form, this is an opportunity for us to put more protections into the existing deficient regime around who and under what circumstances a person can have access to that metadata.

A third deficiency was that the government's bill did not prevent retained data from being accessed in ordinary civil litigation. If the purpose of this bill is to provide our law enforcement agencies, and particularly our national security agencies, with another arrow in their quiver, then we must put some fences around this, and that does not extend to every civil litigant or defendant in this country having access to metadata for God knows what purposes in whatever litigation. That is not a proper purpose for accessing this sort of information.

The original bill did not provide for individuals to access their own data. It has been a consistent principle of privacy legislation since it was first introduced into Australia that citizens have a right to know the information that is being recorded and is being stored when that information pertains to them. That is an issue that has been remedied by amendments pursued by Labor members. In particular, I want to point out the importance of ensuring that individual citizens are notified if there has been a breach that affects their data. If there has been a security breach and their data has been impacted, the very least obligation that the government has in this respect is to ensure that the individual is notified of such a breach.

The original bill made no provision for encryption of data, even though it had been recommended in an earlier inquiry. The bill was silent on who would bear the costs of the regime—that needs to be remedied—and the government's bill provided no sufficient oversight and no guarantees that the ombudsmen having an oversight role would be sufficiently funded to perform that oversight function.

Many who have followed the national security debates and the relationship between national security agencies and this parliament would know that, on the Labor side of parliament, we have long advocated for a greater role in scrutiny by parliament and the committees of this parliament of national security agencies. We take the opportunity of this matter being before the parliament to say that we will introduce a bill to enhance the oversight powers of the PJCIS in respect of operational matters, because we think it is right and proper that the citizens of Australia, through their elected representatives, have oversight of our security agencies.

In the time left to me I want point to two issues that are of continuing concern. Firstly, press freedom. In the last parliament we saw the champions of the free press, in response to the Finkelstein report, thick on the ground from the coalition parties. They have been absent in defending the freedom of the press. Labor takes a different view: if there is to be metadata mandatorily stored, access to a journalist's metadata must be by warrant. That must be a feature of the legislation if we are to support it in the Senate.

As the former Director-General of Security, David Irvine, said last year: unless you deal with the issue of where it is stored, we do not have confidence that this regime can protect the data that we are requiring to be stored. (Time expired)

See this speech in context