The Department of Communities and Justice and the Department of Customer Service are determining whether a mandatory reporting scheme for data breaches should be adopted under the Privacy and Personal Information Protection Act 1998. The Department of Communities and Justice published a discussion paper in July 2019 and invited submissions from the public.
The Privacy and Personal Information Protection Act 1998 governs how NSW public sector agencies manage personal information.
The Department of Communities and Justice is seeking feedback on:
Mandatory Notification of Data Breaches by NSW Public Sector Agencies Discussion Paper includes specific questions for consideration.
Submissions closed on 23 August 2019. We received 23 submissions in response to our Discussion paper.