Privacy Commissioner - Executed Instrument of Delegation

Read the document below or download it here Privacy Commissioner - Executed Instrument of Delegation July 2021

 

Instrument of Delegation
Privacy and Personal Information Protection Act 1998 (NSW)
Health Records and Information Privacy Act 2002 (NSW)

I, Samantha Gavel, Privacy Commissioner, under section 35H of the Privacy and Personal Information Protection Act 1998 (PPIP Act), do, by this instrument, revoke all previous delegations made under that Act and delegate the exercise and performance of matters arising under, or incidental to the functions, authorities, duties and powers set out in Schedule 1 and Schedule 2 to this instrument, to the officers set out in those schedules.

The Privacy Commissioner has such functions as may be conferred or imposed on the Commissioner under the PPIP Act or any other Act: section 36(1), PPIP Act.

This instrument delegates the functions, authorities, duties and powers of the Privacy Commissioner under:

  • the PPIP Act
  • the Health Records and Information Privacy Act 2002 (HRIP Act)

The delegates may not sub-delegate.

This instrument takes effect from the date it is executed. It consists of this page and 14 pages containing Schedule 1 and Schedule 2.

This delegation will continue until revoked notwithstanding the termination of my office as Privacy Commissioner.

 

Samantha Gavel                                           

Privacy Commissioner

Date:   27 July 2021

 

Instrument of Delegation – Schedule 1

Privacy and Personal Information Protection Act 1998 (NSW)

Section

Description of Function/ Power

Officer

Section 36(2)(a)

Promoting the adoption and monitoring compliance with the information protection principles.

Director Business Improvement

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 36(2)(b)

Preparing and publishing guidelines relating to the protection of personal information and other privacy matters, and promoting the adoption of such guidelines.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Manager, Communications and Corporate Affairs

Section 36(2)(c)

Initiating and recommending the making of privacy codes of practice.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Section 36(2)(d)

Providing assistance to public sector agencies in adopting and complying with the information protection principles and privacy codes of practice.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Regulatory Support Officer

Section 36(2)(e)

Providing assistance to public sector agencies in preparing and implementing privacy management plans in accordance with section 33 of the PPIP Act.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 36(2)(f)

Conducting research and collecting and collating information about any matter relating to the protection of personal information and the privacy of individuals.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 36(2)(g)

Providing advice on matters relating to the protection of personal information and the privacy of individuals.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 36(2)(i)

Conducting education programs and disseminating information for the purpose of promoting the protection of the privacy of individuals.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Manager, Communications and Corporate Affairs

Senior Project Officer

Senior Regulatory Officer

Section 36(2)(k)

Receiving, investigating and conciliating complaints about privacy related matters (including conduct to which Part 5 applies).

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Regulatory Support Officer

Section 36(2)(l)

Conducting inquiries and investigating privacy related matters as the Privacy Commissioner thinks appropriate.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 36(3)

Consulting with Information Commissioner before preparing guidelines concerning limits on disclosure of personal information.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Section 37

Requiring a person or agency to provide information or produce a document/ thing or copy of a document.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Director Business Improvement

Section 38

Conducting inquiries and investigations.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 39

Determining the procedure for inquiries and investigations.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Section 40

Preparing and publishing information digest and requiring information from agencies.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Section 42

Requiring agencies to provide information about compliance arrangements.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Director Business Improvement

Section 45

Receiving and dealing with privacy related complaints and requiring information about a complaint.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Regulatory Support Officer

Section 46(1)

Conducting a preliminary assessment of privacy related complaint.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Director Business Improvement

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 46(2)

Informing complainant of review process.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Director Business Improvement

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Regulatory Support Officer

Section 46(3)

Deciding not to deal with complaint if satisfied of certain matters.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Section 47

Referring complaints for investigation or other action.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 48

Dealing with privacy related complaints.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 49

Resolving complaints by conciliation.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 51

Conducting an inquiry or investigation into general issues or matters raised in connection with the complaint even though the complaint referred or declined.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 54(3)

Receiving an application for internal review.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Regulatory Support Officer

Section 54(2)

Making submissions on internal review.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 54(3)

Undertaking internal review on behalf of agency and making a report to agency in relation to application for review.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Section 55(6)

Appearing and making submissions in Tribunal proceedings.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Instrument of Delegation – Schedule 2
Health Records and Information Privacy Act 2002 (NSW)

 

Section

Description of Function/ Power

Officer

Section 24

Issuing guidelines in respect to access to and retention and amendment of health information held by private sector persons for the specified purposes.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Section 42

Receiving privacy related complaints and allowing an extension of time for making a complaint.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Regulatory Support Officer

Section 43(1)

Making a preliminary assessment of a complaint.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 43(2), (3)

Deciding not to deal with a complaint if satisfied of certain matters and advising complainant of reasons for not dealing with complaint.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Section 44(1)

Assessing of complaints, including making inquiries and investigations to determine prima facie case of breach.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 44(2), (3)

If no prima facie case, ceasing to deal with complaint and advising complainant of reasons for ceasing to deal with complaint.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 45

Dealing with complaints, considering certain matters and notifying complainant and respondent of outcome.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 46

Resolving complaint by conciliation.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 50(2)

Appearing and making submissions in Tribunal proceedings.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Section 58(a)

Promoting the adoption and monitoring compliance with the Health Privacy Principles and the provisions of Part 4 of the HRIP Act.

Director Business Improvement

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Regulatory Support Officer

Section 58(b)

Preparing and publishing guidelines relating to the protection of health information and other privacy matters, and to promote the adoption of such guidelines.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Section 58(c)

Providing assistance to organisations in adopting and complying with the Health Privacy Principles and the provisions of Part 4 of the HRIP Act.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Regulatory Support Officer

Section 58(d)

Conducting research, and collecting and collating information about any matter relating to the protection of health information and the privacy of individuals.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Section 58(e)

Providing advice on matters relating to the protection of health information and the privacy of individuals.

 

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 58(f)

Receiving, investigating and conciliating complaints about alleged contraventions of the Health Privacy Principles, the provisions of Part 4 or any health privacy code of practice.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Regulatory Support Officer

Section 59

Requiring a person or organisation to give information, produce a document/thing or a copy of a document.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Section 60

Conducting inquiries and investigations.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Section 61

Determining procedures for inquiries and investigations.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Section 63

Requiring information about compliance arrangements.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Section 64

Issuing, amending and replacing guidelines.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Section 65

Referring privacy related complaint to Health Care Complaints Commission.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Section 66

Referring privacy related complaint to Commonwealth Privacy Commissioner.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Director Business Improvement

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Section 67

Referring privacy related complaint to other persons or bodies.

Director Investigation and Reporting

Director, Legal Counsel and Regulatory Advice

Manager Investigation and Review

Manager, Complaints and Proactive Compliance

Senior Project Officer

Senior Regulatory Officer

Legal Officer

Regulatory Officer

Regulatory Support Officer