Media Release - NSW Privacy Commissioner supports introduction of Privacy and Personal Information Protection Amendment Bill into NSW Parliament


The NSW Privacy Commissioner, Samantha Gavel, welcomes the decision by the NSW Government to introduce the Privacy and Personal Information Protection Amendment Bill into NSW Parliament today.

Key changes in the amendment bill include the creation of a Mandatory Notification of Data Breaches (MNDB) Scheme in which public sector agencies bound by the Privacy and Personal Information Protection Act 1998 (PPIP Act) will need to notify the Privacy Commissioner and affected individuals of data breaches involving personal or health information likely to result in serious harm.

The amendments also aim to apply the PPIP Act to all NSW state-owned corporations that are not regulated by the Commonwealth Privacy Act 1988.

Mandatory notification schemes are considered best practice across the world, and are in place in the EU, Commonwealth and New Zealand.

The Privacy Commissioner, Samantha Gavel, said, “The Information and Privacy Commission NSW (IPC) has consulted with the Department of Communities and Justice (DCJ), the lead agency for the amendment bill, as well as the Department of Customer Service and NSW Health in the development of the bill, and will continue to work with NSW public sector agencies to assist them to comply with the requirements of the new Scheme, should the bill be approved by the Parliament.”

More information on the Privacy and Personal Information Protection (PPIP) Amendment Bill can be found on the DCJ website and the NSW Parliament website.


For further information, please contact:

The Manager, Communications and Corporate Affairs on 0435 961 691 or email

About the Information and Privacy Commission:

The Information and Privacy Commission NSW (IPC) is an independent statutory authority that administers New South Wales’ legislation dealing with privacy and access to government information. The IPC supports the Information Commissioner and the Privacy Commissioner in fulfilling their legislative responsibilities and functions and to ensure individuals and agencies can access consistent information, guidance and coordinated training about information access and privacy matters.

About the NSW Privacy Commissioner

Samantha Gavel was appointed as NSW Privacy Commissioner on 4 September 2017. Her role is to promote public awareness and understanding of privacy rights in NSW, as well as provide information, support, advice and assistance to agencies and the general public.

For further information about the IPC visit our website at

Download a copy of this Media Release here.