There was a bit of confusion last week when the full Federal Court dismissed an appeal by the Privacy Commissioner over former Fairfax journalist Ben Grubb’s metadata, gathered from his mobile phone (we covered the hearing here). Some had suggested that the decision had “gutted” the Privacy Act, or that metadata was now not considered personal information under the act.
The judgment was published on Austlii this week, and Anna Johnston from Salinger Privacy’s post on the matter gives a much clearer view of the judgment. Essentially the court wasn’t asked to decide whether mobile phone metadata was “about” Grubb or whether the information was personal information, but rather whether metadata was “about an individual” based on an old privacy principle that changed in 2014.
The case started so long ago that law has now changed, so data kept under the mandatory data retention regime is considered to be personal information. If the case were re-run today with someone seeking the data Telstra is required to hold as part of the mandatory data retention regime, the outcome could be very different.