Decision letter

Written by Claude Haiku 4.5 from the extracted text on 10 Jul 2026. It can miss or misread redacted and scanned pages. Check the source before relying on it.

The ATO refused a Freedom of Information request seeking Software Bill of Material (SBOM) artifacts for the myID Android application as it existed on 4 June 2026, deciding under section 24A of the FOI Act that the requested documents do not exist. Following consultation with the ATO's Digital Identity Services business area, the agency determined that while it maintains current-state platform information, it does not preserve historical point-in-time snapshots of SBOM data in consolidated form. The ATO concluded that all reasonable steps were taken to locate the documents through searches of relevant systems, but the specific historical version requested cannot be retrieved or reconstructed from existing records.