New South Wales. Comprehensive data protection. Act
PPIP ActPrivacy and Personal Information Protection Act 1998 (NSW)
In force
§1Summary
- Synopsis
Sets 12 Information Protection Principles for NSW public sector agencies, councils and universities, with internal review and tribunal remedies. Includes a mandatory data breach notification scheme for agencies.
- Key themes
- Unique features
NSW MNDB scheme covers councils and state-owned corporations.
- SaaS relevance
Relevant where SaaS acts as a contracted service provider to state agencies, which typically flow down these obligations by contract or statute.
§2Obligations
- Breach notification
- Agencies notify Privacy Commissioner and individuals of eligible breaches (since 2023-11-28)
§3Dates
- Key dates
- Adopted
- In force
- Mandatory Notification of Data Breach scheme from 2023-11-28 (incl. state-owned corporations)
§4Text and authority
- Text
- Authoritative text legislation.nsw.gov.au
- Authority
- Information and Privacy Commission NSW (IPC)
§5Where it applies
- Domestic law of
- New South Wales
§6Sources and verification
- Sources consulted
- Verification
High confidence.
In-force date from general knowledge. [Link: NSW Legislation current in-force version (confirmed via search; site bot-protected)]