Public Notifications
The Privacy Commissioner is required to maintain a register of Public Notifications made by NSW public sector agencies following an eligible data breach. This register helps the public to find information about Public Notifications and provides the following information:
- the date the data breach occurred,
- the date the notification was published,
- the name of the agency that made the notification, and
- a link to access the notification.
Information provided about how to access the notification will be made available from this page and will be published for at least 12 months after the date the notification is published by the relevant agency. This register is regularly updated as the IPC receives new notifications.
| Agency Public Notification Date | Agency Date of Incident | Agency Name | Agency Public Notification Link |
|---|---|---|---|
| 12 January 2026 | October 2024 | Department of Communities and Justice | Public Notification Register | Communities and Justice |
| 23 October 2025 | Incidents on 6 August 2025, 11 August 2025, and between 19 June 2025 and 3 September 2025 | Western Sydney University | Cyber Incident - Public Notification 23 October 2025 | Western Sydney University |
| 13 June 2025 | 2 December 2024 | Muswellbrook Shire Council | Important information regarding the Muswellbrook Shire Council cyber incident : Muswellbrook Shire Council |
| 28 January 2025 | 14 September 2024 | NSW Electoral Commission | Public notification register - NSW Electoral Commission |
Expired Public Notifications
| Agency Public Notification Date | Agency date of incident | Agency Name |
|---|---|---|
| 31 October 2024 | 14 August 2024 | Western Sydney University |
| 30 October 2024 | 13 September 2024 | Department of Primary Industries and Regional Development - Tocal College |
| 29 September 2024 | 11 July 2024 | Liverpool City Council |
| 31 July 2024 | 9 July 2023 | Western Sydney University |
| 9 July 2024 | 19 April 2024 | Inner West Council |
| 4 July 2024 | 1 November 2023 | NSW Department of Customer Service |
| 3 May 2024 | 26 April 2024 | Liverpool City Council |
The Privacy Commissioner is required to publish on the Privacy Commissioner’s website information about how to access the information published by a public sector agency in its public notification register under section 59P(5) of the Privacy and Personal Information Protection Act 1998 (PPIP Act).
