THE University of Melbourne breached privacy and data laws when it used its wifi network to spy on students and staff at a pro-Palestine protest, the state of Victoria’s deputy information commissioner has found.

The investigation, whose conclusions were published today, followed media reports that the university had digitally tracked people at a sit-in to uncover misconduct.

It found that the university combined wifi location data, student card photographs and CCTV footage to identify 22 students who refused to leave the Arts West building on May 20.

The use of wifi data was deemed unauthorised, with only “superficial” consideration given to privacy protection.

Staff were also tracked, with email accounts of 10 employees accessed, leading to three formal warnings.

In total, 19 students received “reprimand and caution.”

“The university failed to obtain a social licence for the use of this technology,” the report said, calling the surveillance a “serious breach” of trust.

Although no compliance notice was issued due to remedial steps, the commissioner criticised the university’s “poorly presented” IT and privacy policies that left staff and students misinformed.

University chief operating officer Katerina Kapobassis said the institution accepted it could have provided “clearer active notice” but defended its actions as “reasonable and proportionate.”

Unimelb for Palestine welcomed the findings, but said: “The report does not undo the harm the university has inflicted, through both its past mishandling of misconduct proceedings against Mahmoud’s Hall protesters and its ongoing efforts to expel and suspend other student protesters based on unauthorised and unlawfully obtained data.

“So-called liberal institutions, including the UoM [University of Melbourne], have acted exceptionally to suppress solidarity with Palestine amidst a genocide.”

Lawyer Bernadette Zaydan said the findings would strengthen legal appeals against student expulsions, while National Tertiary Education Union leader David Gonzalez said the ruling confirmed staff concerns about being “misused and gaslit.”