Western Australia. Comprehensive data protection. Act

PRIS ActPrivacy and Responsible Information Sharing Act 2024 (WA)

In force
Partly verifiedMedium confidence. OAIC lists title as 'Privacy and Information Sharing Act 2024'. Assent date not confirmed. [Link: WA Legislation consolidated home page (Act 51 of 2024)]

§1Summary

Synopsis

WA's first statutory privacy regime for public entities, adding Information Privacy Principles, a responsible information sharing framework and mandatory reporting of serious breaches.

Key themes
  • IPPs
  • information sharing
  • Chief Data Officer
  • breach notification
  • contracted service providers
Unique features

Combines privacy with a government data sharing framework overseen by a Chief Data Officer.

SaaS relevance

Relevant where SaaS acts as a contracted service provider to state agencies, which typically flow down these obligations by contract or statute.

§2Obligations

Breach notification
Serious data breaches to Information Commissioner and individuals from 2027-01-01

§3Dates

Key dates
  • Adopted
  • In force
  • Officeholders from 2025-07-01; privacy and sharing rules from 2026-07-01; serious breach reporting from 2027-01-01

§4Text and authority

Text
Authority
Information Commissioner (WA) with Privacy Deputy Commissioner; Chief Data Officer

§5Where it applies

Domestic law of
Western Australia

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. OAIC lists title as 'Privacy and Information Sharing Act 2024'. Assent date not confirmed. [Link: WA Legislation consolidated home page (Act 51 of 2024)]