For Government
The IPC provides guidance and resources for NSW government agencies, including local councils, NSW universities and state-owned corporations seeking information about privacy and information access in NSW.
Information access
The Information and Privacy Commission NSW (IPC) administers the Government Information (Public Access) Act 2009 (GIPA Act) and the Government Information (Information Commissioner) Act 2009 (GIIC Act), which together establish a framework for promoting transparency, accountability, and public trust in the NSW public sector. These laws provide individuals with a legally enforceable right to access government information, unless there is an overriding public interest against disclosure.
NSW public sector agencies have a responsibility to actively support the objectives of the GIPA Act by making information publicly available wherever possible, including through mandatory and proactive release, informal access, and formal applications. Agencies must also ensure compliance with statutory obligations, including applying the public interest test appropriately when deciding to release information and maintaining clear, accessible pathways for information access.
Under the GIIC Act, the Information Commissioner monitors agency performance, provides guidance, and investigates complaints to ensure agencies meet their responsibilities under the GIPA Act.
Privacy
The Information and Privacy Commission NSW (IPC) administers two laws that govern how NSW public sector agencies must manage individuals' personal and health information: the Privacy and Personal Information Protection Act 1998 (PPIP Act) and the Health Records and Information Privacy Act 2002 (HRIP Act). These Acts establish legal obligations for agencies to collect, store, use, and disclose personal and health information in accordance with the Information Protection Principles (IPPs) and Health Privacy Principles (HPPs). Agencies must ensure that individuals are informed about how their information is handled, and that appropriate safeguards are in place to protect privacy and prevent misuse.
Under these laws, individuals have the right to access and request correction of their personal and health information and can make a complaint. Agencies are required to maintain Privacy Management Plans, comply with statutory guidelines, and respond to complaints and internal reviews in line with the Acts.
The Privacy Commissioner monitors agency compliance, provides guidance, and investigates privacy breaches. Agencies must embed privacy protections into their systems, policies, and culture to meet their legal responsibilities and uphold public trust.
Information access: I want to know about...
NSW Information Access Laws
The IPC oversees laws concerning access to government information.
Essential Guidance Toolkit on information access and privacy fundamentals
This toolkit includes fundamental regulatory guidance to ensure that agencies are able to meet their requirements under NSW information access and privacy legislation.
Information Governance Agency Self-assessment Tools
The IPC has produced innovative Information Governance Agency Self-assessment Tools for use by all agencies within New South Wales.
IPC GIPA Tool
The IPC GIPA Tool is a free application to assist all agencies and organisations regulated by the GIPA Act to comply with the legislation when processing and reporting on government information access applications.
Informal release of information
‘Informal release’ occurs when an agency gives out information in response to a request, without requiring the person requesting it to lodge a formal access application under Part 4 of the GIPA Act.
Searches for information under the GIPA Act
Searching for information under the GIPA Act is a part of the process of managing a formal request to access government information.
Government contractors and the GIPA Act
The Government Information Public Access Act 2009 (GIPA Act) applies to New South Wales (NSW) public
GIPA Compliance Reports
The IPC publishes reports about NSW public sector agencies' compliance with the GIPA Act.
Resources for Public Interest Disclosures
The Public Interest Disclosures Act 2022 (PID Act) provides a system to encourage public officials to report wrongdoings about government information contraventions.
Information access case notes
The Information and Privacy Commission NSW (IPC) publishes case notes to highlight significant and interesting cases from the IPC's jurisdictions.
IPC e-Learning
The IPC's e-Learning portal contains a number of online training modules to provide training across privacy and government information access legislation.
Privacy: I want to know about...
NSW Privacy Laws
The IPC oversees a number of laws that protect and promote the protection of personal and health information in NSW.
Essential Guidance Toolkit on information access and privacy fundamentals
This toolkit includes fundamental regulatory guidance to ensure that agencies are able to meet their requirements under NSW information access and privacy legislation.
MNDB Scheme - Information for agencies
The Mandatory Notification of Data Breach (MNDB) Scheme requires agencies to notify the Privacy Commissioner and provide notifications to affected individuals in the event of an 'eligible data breach'.
Privacy Governance Framework
The IPC's Privacy Governance Framework is a dynamic tool designed to assist New South Wales public sector agencies implement robust privacy governance throughout their organisation to manage personal and health information.
Implementing Technology - Privacy Toolkit
The Privacy Commissioner has collated the key pieces of guidance into a Privacy Toolkit to assist agencies when using, implementing and commencing projects involving technology.
The role of Privacy Contact Officers
The Information and Privacy Commission NSW (IPC) encourages all public sector agencies to appoint a Privacy Contact Officer.
How to handle an Internal Review
An internal review is an internal investigation that the agency conducts into a complaint.
Privacy Management Plans
A Privacy Management Plan is a mandatory document in which each public sector agency describes the measures it proposes to take to ensure compliance with the PPIP and HRIP Act.
PPIP & HRIP Compliance Reports
The IPC monitors the compliance of NSW public sector agencies with the PPIP and HRIP Act.
Resources for Public Interest Disclosures
The Public Interest Disclosures Act 2022 (PID Act) provides a system to encourage public officials to report wrongdoings about privacy contraventions.
Privacy case notes
The Information and Privacy Commission NSW (IPC) publishes case notes to highlight significant and interesting cases from the IPC's jurisdictions.
IPC e-Learning
The IPC's e-Learning portal contains a number of online training modules to provide training across privacy and government information access legislation.
