Resources

Every NSW public sector agency that is bound by the PPIP Act must prepare and implement a privacy management plan (plan).

This guide supports agencies in understanding key privacy risks that may arise through the adoption of generative AI tools, as well as suggested mitigations.

This checklist is a useful tool for an agency to assess the content of a PMP once it has already been prepared.

This fact sheet assists you to understand the information protection principles (IPPs) that govern the protection of personal information under the PPIP Act.

This fact sheet helps you to understand the Health Privacy Principles (HPPs) that apply to the protection of health information under the HRIP Act.

This fact sheet assists in understanding how AI involves privacy and can impact the security of personal information.

This fact sheet provides useful tips on ways agencies can reduce the instances of inadvertent disclosures of information when sending emails.

This snapshot provides agencies and the public with key summary MNDB Scheme data for the six-month period between July and December 2025.

This snapshot provides agencies and the public with key summary MNDB Scheme data for the six-month period between January and June 2025.

This fact sheet will assist you in understanding how IP addresses can become personal information.

Use this form if you are applying for an external review by the Information Commissioner of a reviewable decision under the GIPA Act.

Use this form if your complaint concerns the conduct (action or inaction) of an agency in exercising its function under the GIPA Act.

This snapshot is provides agencies and the public with key summary MNDB Scheme data for the six-month period between July and December 2024.

The Information Commissioner and the Privacy Commissioner undertook a desktop review of documented AI or ADM use within AIGs and PMPs.

This fact sheet has been designed to assist health care providers in understanding their obligations and responsibilities under NSW privacy laws.

This fact sheet assists private health care providers and citizens to understand the obligations and responsibilities in retaining and storing health information under NSW privacy laws.

This fact sheet is intended to assist individuals and agencies in understanding the timeframe requirements of the GIPA Act.

When a NSW agency tells you that your personal information has been involved in a data breach, you will need to take steps to help keep yourself safe.

Report on the Operation of the Government Information (Public Access) Act (GIPA Act) 2009 - 2023–24

This fact sheet explains how you can make a complaint about IPC privacy or information access services.