I wish I had found this case[*] before the hearing:
http://www.austlii.edu.au/cgi-bin/viewdoc/au/cases/nsw/NSWCA/2016/334.html
"(2) The word “necessary” in s 99(3) carries its ordinary meaning of
“needed to be done” or “required” in the sense of “requisite” or
something “that cannot be dispensed with” and does not import any
qualification to this ordinary meaning."
It may not have changed the outcome, but at least then the Tribunal
would have had to address the fact that "necessary" can have a meaning
other than "reasonably appropriate and adapted." I have to wonder why
the Tribunal did not find that case for itself, and whether Service
NSW's lawyers knew about the case.
Mind you, I might still have lost based on the argument that I had
consented to Service NSW's terms and conditions which included consent
to their privacy policy.
Interestingly, they seem to have stopped requiring consent to the
privacy policy, since that is no longer present in their terms and
conditions. Perhaps they have quietly conceded my point that they're
meant to abide by the rules established by the legislation, and not make
up their own.
There is a current review of the Commonwealth Privacy Act, which also
uses the word "necessary" in an almost identical context.
https://www.ag.gov.au/integrity/consultations/review-privacy-act-1988
I'll be making a submission about the need to define the word
"necessary" to make it clearer what level of protection the legislation
provides. That legislation also binds Service NSW.
Sylvia.
[*] BTW, Mr Robinson had two separate cases regarding false arrest on
different occasions. He's won one, and lost one.