Legislative Council Fifty-Fifth Parliament, First Session (55-1) 55 1 Parliament of South Australia Legislative Council published Bills Bills Statutes Amendment (Identity Theft) Bill Statutes Amendment (Identity Theft) Bill Statutes Amendment (Identity Theft) Bill Introduction and First Reading Introduction and First Reading The Hon. K.J. MAHER Legislative Council Minister for Aboriginal Affairs Attorney-General Minister for Industrial Relations and Public Sector The Hon. K.J. MAHER (Minister for Aboriginal Affairs, Attorney-General, Minister for Industrial Relations and Public Sector) (11:02): Obtained leave and introduced a bill for an act to amend the Criminal Law Consolidation Act 1935, the Criminal Procedure Act 1921, the Sentencing Act 2017 and the Youth Court Act 1993. Read a first time. Second Reading Second Reading The Hon. K.J. MAHER Legislative Council Minister for Aboriginal Affairs Attorney-General Minister for Industrial Relations and Public Sector The Hon. K.J. MAHER (Minister for Aboriginal Affairs, Attorney-General, Minister for Industrial Relations and Public Sector) (11:03): I move: That this bill be now read a second time. The bill I introduce today is the Statutes Amendment (Identity Theft) Bill 2023. In doing so I acknowledge that a version of this bill was introduced by the former government, and I acknowledge the work of the former Attorney-General in the development of this bill; however, there are significant changes in what we have before us today. This bill updates the laws that apply to identity theft by making amendments to the Criminal Law Consolidation Act 1935, the Criminal Procedure Act 1921, the Sentencing Act 2017 and the Youth Court Act 1993. South Australia was the first jurisdiction to introduce identity theft provisions back in 2003. Since then, the world we live in has almost changed beyond recognition in terms of technological advancements and the role the internet plays in our lives. The first iPhone was announced by Apple in 2007 and the first Android smartphones in 2008. Online shopping is now a way of life and the use of smartphones and tablets in our everyday life is all encompassing. Unfortunately, as technology has improved the criminals have also taken advantage of it. We have seen the recent large-scale cyber attacks where millions of Australians have had their data stolen and put up for sale on the dark web for the use of other criminals who then use it to commit identity theft and other crimes. Such amendments are needed to our criminal laws to ensure laws keep pace with society and to enable our law enforcement agencies to effectively respond to identity theft crimes. This bill updates the provisions in part 5A of the Criminal Law Consolidation Act to make it easier to prosecute identity theft and to increase penalties associated with the crime. It changes the law so as to support victims by making it easier to quickly obtain verification from a court that they have been the victim of identity theft, which will assist the victims to restore their creditworthiness. The bill inserts a new offence into the Criminal Law Consolidation Act of possessing or using another person's identification information without reasonable excuse. The new offence, in section 144DA, places the onus of proof on the defendant to show that they have a reasonable excuse for possessing another person's personal identity information. This offence is a summary-level offence carrying a maximum penalty of two years' imprisonment. The reverse onus nature of the offence aims to address the fact that identity theft offences are becoming increasingly prevalent and are generally committed remotely from the victim, leaving little physical evidence, and are far harder to track than many other property offences. Varying the burden of proof in this way recognises that the reasonable excuse of possessing another person's identity information relates to the facts which, if they exist, are readily provable by the accused as matters within his or her own knowledge or to which they have ready access. The new offence is limited to possession of personal identification information of natural persons rather than bodies corporate. The new offence does not include the possession of public identification information. This is defined to include name, address or other contact details, date or place of birth, marital status and relatives. These details are often readily available publicly and possession of them does not constitute an offence. When this council last considered a similar bill, I supported amendments aimed at removing some of the reverse onus of proof provisions in this clause. Upon coming into government, I consulted with the police commissioner and inquiries were made about whether this bill could be effective without the reverse onus of proof. The commissioner's response noted his support for the inclusion of these matters in this bill. He noted that it was not uncommon in legislation and is utilised in a number of offence settings, including summary offences of unlawful possession and carry offensive weapon. Given such feedback, we have formed the view that this element should be maintained. However, an additional exemption has been added to the bill beyond what has previously been included. There are a number of exemptions to the reverse onus of proof aspect of the offence, including for the use in the ordinary course of a lawful occupation or activity, where the defendant is a close relative of the victim, where the defendant holds the power of attorney for the victim, where the defendant is a guardian or administrator for the victim, or where the personal identification information consists of a single set of personal identity information that was readily publicly available. Where the defendant falls into one of the above-mentioned categories, the onus is then on the prosecution to prove beyond reasonable doubt that the defendant had possession of the relevant material without reasonable excuse. The existing identity theft offences are very narrow. Currently, sections 144B and 144C require the prosecution to prove that the assumption of the false identity or the misuse of the personal identity information was done to commit a serious criminal offence. A serious criminal offence is defined in section 144A as an indictable offence or one prescribed by regulation. This requirement has meant that the threshold for the prosecution has been unreasonably high and failed to capture many modern identity theft schemes. For instance, 'card not present' fraud, skimming, payWave and other high volume and low value offences are not usually captured. It is proposed in this bill to remove the requirement for intent to commit a serious criminal offence and simply refer to a criminal offence. With this amendment, law enforcement will be able to target a wider spectrum of offending. This bill also increases the penalty for the existing offences of producing or possessing prohibited material in section 144D from three to five years' imprisonment to provide a greater deterrent for this type of behaviour. Finally, the bill modifies existing provisions regarding the issuing of identity theft certificates. An identity theft certificate is a document that can be provided by a court to verify that the victim is a victim of identity theft. Victims then use the certificate to prove to relevant authorities that their identity has been compromised. Under the current framework, many victims are not able to obtain an identity theft certificate. Currently, section 125 of the Sentencing Act requires first, the conviction of the offender, and secondly, an application by the victim to the court that arrived at the finding of guilt for a certificate to be issued. This process presents difficulties for many victims. Many perpetrators are never found or charged, as it is common for them to be located outside of Australia and, even if the perpetrator is found and charged, it can take years for a prosecution to be completed. There is also a low rate of successful prosecutions. In the meantime, victims can spend significant amounts of time and effort convincing government departments, agencies, utilities or credit reporting agencies that their identities have been compromised before it is possible for them to obtain credit services. In cases where there is a prosecution, the long wait for a court outcome exacerbates the financial detriment and emotional stress experienced by victims. The bill inserts a new section 84 in the Criminal Procedure Act 1921 enabling the Magistrates Court or, in the case of minors, the Youth Court to issue a certificate to victims of identity theft where the court is satisfied on the balance of probabilities that they are the victim of identity theft. As the ability to obtain a certificate is no longer contingent on a conviction of the perpetrator, the provision has been moved from the Sentencing Act to the Criminal Procedure Act. The bill also makes consequential amendments to the Youth Court Act to allow the Youth Court to also issue identity theft certificates where the victim is a minor. Finally, I note that the former version of this bill introduced under the former Liberal government included further provisions which rolled back the current exclusions of persons under 18 from the identity theft provision already in the Criminal Law Consolidation Act. Labor, then in opposition, opposed these provisions at the time and we have removed them from the bill that is introduced today. The reintroduced bill represents a timely and sensible modernisation of the criminal law of identity theft, aimed at giving police the tools they need to successfully investigate and prosecute these offences. I commend the bill to the chamber and seek leave to insert the explanation of clauses in Hansard without my reading it. Leave granted. Explanation of Clauses Explanation of Clauses Part 1—Preliminary 1—Short title 2—Commencement These clauses are formal. Part 2—Amendment of Criminal Law Consolidation Act 1935 3—Amendment of section 144A—Interpretation This clause inserts, amends and deletes definitions for the purposes of the measure. 4—Amendment of section 144B—False identity etc This clause amends section 144B(3) so that it will be an offence to make a false pretence to which the section applies intending, by doing so, to commit, or facilitate the commission of, any criminal offence (where now the section refers to a serious criminal offence). 5—Amendment of section 144C—Misuse of personal identification information This clause amends section 144C(1) so that it will be an offence to make use of another person's personal identification information intending, by doing so, to commit, or facilitate the commission of, any criminal offence (where now the section refers to a serious criminal offence). 6—Amendment of section 144D—Prohibited material This clause increases the penalty for an offence against the section from 3 years to 5 years imprisonment. 7—Insertion of section 144DA This clause inserts a new provision as follows: 144DA—Possession of personal identification information This provision makes it an offence to have possession of personal identification information of another person without reasonable excuse. Subsection (2) specifies circumstances in which the offence will not apply and subsection (3) specifies circumstances in which the prosecution will be required to prove that the defendant had possession of the relevant material without reasonable excuse (rather than the burden of establishing reasonable excuse resting with the defendant as is normally the case pursuant to section 5B of the Criminal Law Consolidation Act 1935). Part 3—Amendment of Criminal Procedure Act 1921 8—Insertion of Part 4 Division 6 This clause inserts a new Division as follows: Division 6—Identity theft certificates 84—Certificate for identity theft victims The Magistrates Court may, on application by a person, issue them with a certificate under the proposed provision if satisfied, on the balance of probabilities, that the person is an identity theft victim. Part 4—Amendment of Sentencing Act 2017 9—Amendment of section 125—Certificate for identity theft victims This is consequential to clause 8. Part 5—Amendment of Youth Court Act 1993 10—Amendment of section 7—Jurisdiction This amendment gives the Youth Court the same jurisdiction as the Magistrates Court to issue an identity theft certificate under Part 4 Division 6 of the Criminal Procedure Act 1921 if the applicant for the certificate is a child or youth. Debate adjourned on motion of Hon. L.A. Henderson.