You hold senior decision makers accountable for decisions on policy. Andrews et al will and should not be held responsible because some operational beurocrat 10 levels of management below them didn't update a manual. Which looks like the kinda stuff reported to be in the worksafe charges.
I'd suggest reading the link in full:
Details of months-long battle over Victorian contact tracing data made public
The details of a protracted legal battle between the Victorian health department and workplace safety watchdog over citizens' personal contact tracing information are made public after a failed government bid to suppress the proceedings.
www.abc.net.au
'The back-and-forth between the agencies and their lawyers also included a WorkSafe investigator issuing directions in person at the department's offices.
When the issue made it to court in June of this year, an interlocutory suppression order was put in place.
The notices to produce the contact tracing information were withdrawn in September, when WorkSafe charged the department with 58 breaches of the Occupational Health and Safety Act in the hotel quarantine system.
The department's failure to produce the documents was set to go to trial in mid-October, but the court date was replaced with a WorkSafe application for a suppression order covering the matter to be lifted and for a summary judgment from the court.
WorkSafe and the Herald Sun newspaper, which first reported the details of the case today, wanted the suppression order lifted.
The department argued for the suppression order to remain in place for five years, saying if details of the summary judgment were made public, it would lead to uncertainty in the community.'