Victoria · FOI Act 1982 and the Privacy and Data Protection Act 2014

Victorian FOI, privacy, and health records on one platform

For Victorian departments, councils, universities, and public hospitals — AccessPoint runs FOI requests on the 30-day clock with OVIC review, alongside the PDP Act information privacy principles and the Health Records Act 2001.

Start Free Trial Request a Demo

Australia — Victoria at a glance

Decision deadline
30 days, extendable where the Act permits
Application fee
The statutory application fee, with access charges beyond it
Review
OVIC review, then VCAT
Professional standards
OVIC standards binding on agency FOI practice
Privacy
PDP Act IPPs and the Health Records Act health privacy principles
Languages
English

Built for Australia — Victoria

One platform for the whole access-and-privacy mandate, pre-configured for this regime and running in your own Microsoft 365 tenant.

The 30-day clock

Computed on receipt over the Victorian public-holiday calendar, with extensions and any agreed variation recorded — and the notification duties that attach to them tracked as steps.

Built around the professional standards

OVIC's standards govern how Victorian agencies handle FOI, not merely what they decide. Acknowledgement, consultation, notification, and decision-making run as tracked steps, so compliance is evidenced rather than assumed.

Exemptions cited line by line

Each FOI Act exemption ships as a citable ground applied to specific passages, carried onto the redaction and into the decision letter.

Third-party consultation

Where a document concerns another person's interests, run the consultation as a tracked stage with its own deadline, response, and effect on the decision.

Privacy and health records too

Run PDP Act privacy complaints and Health Records Act matters on the same platform as FOI, with one audit ledger across all three.

In your own tenant

Documents, requests, and audit history stay inside your own Microsoft 365 and Azure tenant — no third-party cloud and no vendor access.

Standards with teeth

Victoria regulates how you run FOI, not just what you decide.

Most access regimes review outcomes: was the exemption available, was the document releasable. Victoria goes further. OVIC issues professional standards that bind agency FOI practice — covering how requests are received and acknowledged, how applicants are dealt with, how consultation is conducted, and how decisions are made and communicated. That means an agency can reach a defensible decision and still fall short, because the path to it did not meet the standard. Process compliance of that kind cannot be demonstrated from a decision letter; it needs a record showing each step occurred and when. AccessPoint's workflow produces that record as a by-product of the work, which is why it suits Victoria particularly well.

Steps evidenced Acknowledgement, consultation, and notification tracked.
30 days, computed Over Victorian holidays, with extensions recorded.
OVIC-ready A record built for a binding review decision.

Configured out of the box

Installing the au-vic jurisdiction pack seeds your tenant with everything this regime needs — a starting point you can adjust, not a lock-in.

Related guide: FOI Workflow Quick Check
  • The Victorian FOI Act 1982 as the legal-authority spine, with the PDP Act and Health Records Act alongside
  • The 30-day decision clock with Victorian public holidays and the Act's extensions
  • The FOI Act exemptions, colour-coded for redaction and citable line by line
  • Third-party consultation as a tracked stage with its own deadlines
  • Application fees and access charges on the statutory basis
  • OVIC review and VCAT tracking with grounds and outcomes
  • PDP Act information privacy principles and privacy complaint handling
  • Health Records Act 2001 health privacy handling on the same platform

Australia — Victoria Questions

What is the Victorian FOI deadline?
30 days from receipt of a valid request, with extensions available where the Act permits, including by agreement with the applicant. AccessPoint computes the date over the Victorian public-holiday calendar and records any extension with its ground and the notice given.

How does the pack support OVIC's professional standards?
By making the steps the standards govern into tracked workflow stages — acknowledgement, applicant contact, third-party consultation, decision-making, and notification — each with its own date and record. That converts process compliance from something an agency asserts into something it can show.

Does it handle privacy and health records as well as FOI?
Yes. The pack covers the PDP Act information privacy principles and the Health Records Act 2001 health privacy principles alongside FOI, which suits Victorian agencies where the same small team carries all three responsibilities and OVIC oversees them together.

Where do documents reside?
Entirely within your own Microsoft 365 and Azure tenant, in the Australian region you choose. Requests, documents, redactions, and audit history never leave your control — no third-party cloud and no cross-border data transfers.

Run Victorian FOI in Your Own Tenant

Try AccessPoint free for 30 days, configured for Victoria. No credit card required.

Start Free Trial