Privacy Impact Assessments (PIAs)

A privacy impact assessment (PIA) is a scalable tool for identifying, assessing and mitigating privacy risks.
Last updated:

The Privacy and Responsible Information Sharing Act 2024 (WA) (PRIS Act) requires Western Australian public sector entities and their contracted service providers to undertake a PIA in certain circumstances. 

The Office of the Information Commissioner WA has produced a suite of three resources designed to help IPP entities understand why, whether and how to conduct a PIA. 

Why - Introduction to PIAs
Whether - Do I need to do a PIA
How - How to do a PIA

These three resources are designed to be read together in order. 

  1. WHY: Introduction to PIAs
  2. WHETHER: Do I need to do a PIA?
  3. HOW: How to do a PIA 

Have a question or want to report a problem?

Fill in the form to get assistance or tell us about a problem with this information or service.

Send feedback