(1) The Information Commissioner has the function of doing both of the following within 6 months of the end of each financial year ending after the commencement of this section:
(a) assessing the approved identity verification facilities in relation to any act or practice of the Department during the financial year;
(b) giving the Secretary a written report on the assessment.
(2) For the purposes of the Privacy Act 1988 , an assessment under subsection (1) of this section is taken to be an assessment under paragraph 33C(1)(a) of that Act.