Section 223 of the PRIS Act provides that when the IPPs commence, some will apply to personal information and de-identified information that an IPP entity collected before, on or after commencement and some of the IPPs will apply only to personal information collected on or after commencement.
The IPPs will commence on 1 July 2026.
The IPPs that will apply to personal information collected before, on or after 1 July 2026 are:
- IPP 2 – Use and disclosure
- IPP 3 – Information quality
- IPP 4 – Information security
- IPP 5 – Openness and transparency
- IPP 6 – Access and correction
- IPP 9.1 – Disclosure of personal information relating to an individual outside Australia
- IPP 9.2 – Disclosure of de-identified information relating to an individual outside Australia
- IPP 11 – De-identified information
The IPPs that will apply to information collected on or after 1 July 2026 are:
- IPP 1 – Collection
- IPP 7 – Unique identifiers
- IPP 8 – Anonymity
- IPP 10 – Automated decision-making
For more information about the IPPs, see our Information Privacy Principles Summary.
To read the full IPPs in Schedule 1 of the PRIS Act go to the PRIS Act As Passed on the WA Legislation website.
Print this page
