Queensland. Comprehensive data protection. Act

IP Act (Qld)Information Privacy Act 2009 (Qld)

In force
Partly verifiedMedium confidence. 2025-07-01 and 2026-07-01 commencement dates from general knowledge; OIC pages confirming dates could not be loaded. [Link: Queensland Legislation current in-force version]

§1Summary

Synopsis

Governs personal information handling by Queensland government agencies. The 2023 amendments replaced the old principles with Queensland Privacy Principles modelled on the APPs and added mandatory data breach notification.

Key themes
  • QPPs
  • MNDB
  • bound contracted service providers
  • overseas disclosure
  • OIC complaints
Unique features

Agencies must bind contracted service providers to the QPPs.

SaaS relevance

Relevant where SaaS acts as a contracted service provider to state agencies, which typically flow down these obligations by contract or statute.

§2Obligations

Breach notification
Agencies notify OIC and individuals of eligible data breaches

§3Dates

Key dates
  • Adopted
  • In force
  • Information Privacy and Other Legislation Amendment Act 2023: Queensland Privacy Principles and MNDB scheme from 2025-07-01; local government MNDB from 2026-07-01

§4Text and authority

Text
Authority
Office of the Information Commissioner Queensland (OIC)

§5Where it applies

Domestic law of
Queensland

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. 2025-07-01 and 2026-07-01 commencement dates from general knowledge; OIC pages confirming dates could not be loaded. [Link: Queensland Legislation current in-force version]