The PRIS Act covers two main areas: privacy and responsible information sharing.
Privacy
The privacy provisions of the PRIS Act:
- Establish the IPPs which guide how IPP entities handle personal information and de-identified information.
- Establish rights for individuals, including complaint mechanisms if their privacy is interfered with.
- Establish a notifiable information breach scheme that outlines what happens when personal information is lost, disclosed, or accessed without authorisation which could lead to serious harm.
- Require an IPP entity to undertake a privacy impact assessment if it is performing a function or activity that involves the handling of personal information and is likely to have a significant impact on the privacy of individuals.
- Set out the privacy functions of the Information Commissioner and Privacy Deputy Commissioner under the PRIS Act.
Responsible information sharing
The responsible information sharing provisions provide a framework for public entities to share government information responsibly.
The Chief Data Officer is responsible for the administration of this part of the PRIS Act.
Print this page
