Failing to Comply with a Data Access Order
Being required to provide access to electronic data — such as a mobile phone, computer, or encrypted account — can place a person in a legally precarious position. Failing to comply with a Data Access Order is itself a serious criminal offence, separate from any underlying investigation.
These offences exist under both Western Australian law and Commonwealth law, and carry significant penalties, including imprisonment.
At Perrella Legal, we regularly advise clients who have been served with Data Access Orders and are unsure of their rights, obligations, or potential exposure.
What Is a Data Access Order?
A Data Access Order is a court order requiring a person to provide access to electronic data that is relevant to a criminal investigation. This may include an obligation to:
- Provide passwords, PINs, or passcodes;
- Decrypt encrypted data;
- Unlock a mobile phone, computer, or storage device; or
- Provide access to cloud-based accounts or digital platforms.
The order may be directed at:
- A suspect or accused person; or
- A third party who has control over, or knowledge of, the data.
Western Australia – Failure to Comply with a Data Access Order
Under Western Australian legislation, courts may make orders requiring a person to provide access to electronic data held on a device or system.
The offence
It is an offence to:
- Fail or refuse to comply with a Data Access Order; or
- Knowingly provide false or misleading information in purported compliance.
Penalties
Failure to comply can result in:
- Imprisonment,
- Substantial fines, or
- Both.
Importantly, the offence is separate from the underlying investigation. Even if no charge is ever laid for the original offence, a person can still be prosecuted for non-compliance with the order.
Commonwealth Law – Failure to Comply with a Data Access Order
At the federal level, Data Access Orders are commonly issued under the Crimes Act 1914 (Cth) and related Commonwealth legislation, particularly in investigations involving:
- Drug importation or trafficking;
- Child exploitation material;
- Terrorism;
- Serious fraud or cybercrime.
The offence
Under Commonwealth law, it is an offence to:
- Fail to comply with a lawful order to provide access to data; or
- Obstruct or delay compliance with the order.
Penalties
Commonwealth penalties are severe and may include:
- Significant terms of imprisonment; and
- Heavy fines.
Federal courts take a particularly strict view of non-compliance, especially where encryption or deliberate obstruction is alleged.
For example, under section 3LA of the Crimes Act 1914 (Cth), it is a serious criminal offence to fail to comply with a lawful court order requiring access to electronic data. A person commits an offence under this provision if they:
- Are subject to a Data Access Order;
- Are capable of complying with the order; and
- Fail or refuse to do what the order requires.
Penalties
- Up to 5 years’ imprisonment, a fine of up to 300 penalty units, or both; or
- Up to 10 years’ imprisonment, a fine of up to 600 penalty units, or both if the order relates to a serious offence or a terrorism-related offence.
Importantly, this offence applies even if you are never charged with the underlying offence. The focus is on whether you were legally required and able to comply — not on the outcome of the original investigation.
Because these orders often involve passwords, encryption, or access to digital devices, the question of whether a person was truly “capable” of complying can be highly technical and fact-specific.
Common Issues and Defences
Data Access Order offences raise complex legal issues, including:
- Whether the order was lawfully made;
- Whether the order was sufficiently clear and capable of compliance;
- Whether compliance was technically possible;
- Whether the person genuinely did not know or possess the access information; and
- Whether the order improperly infringes on privilege or procedural fairness.
These matters are highly technical and often require detailed legal and forensic analysis.
What Should You Do If You Receive a Data Access Order?
You should not ignore or delay responding to a Data Access Order — but you should also not attempt to navigate compliance without legal advice.
In some circumstances:
- Immediate compliance may prejudice your defence in the underlying matter; or
- Non-compliance may expose you to additional criminal charges.
Early legal advice is critical to managing this risk lawfully and strategically.
How Perrella Legal Can Help
At Perrella Legal, we can assist by:
- Advising on the validity and scope of the order;
- Assessing whether compliance is legally or technically required;
- Communicating with investigators on your behalf;
- Representing you if charged with a failure to comply; and
- Protecting your rights in any related criminal proceedings.
Speak With a Criminal Defence Lawyer Early
If you have been served with a Data Access Order — or are under investigation and expect one may be issued — early advice can make a critical difference.
Contact Perrella Legal today for confidential advice from an experienced criminal defence lawyer in Perth.
