These guidelines assist agencies with understanding exemptions under section 59X regarding the exemption to notify affected individuals due to cyber security.
These guidelines assist agencies with understanding exemptions under section 59W regarding the exemption to notify affected individuals due to risk of serious harm or health or safety.
These guidelines advise agencies on the process of undertaking an assessment to determine whether an eligible data breach has occurred the factors to consider when assessing serious harm.
The PPIP Act s 19(2) sets out requirements when agencies are disclosing non-health ‘personal information’ to a recipient who is a Commonwealth agency, or who is outside the NSW jurisdiction.
This Guideline is part of a suite of information access resources provided by the Information Commissioner to facilitate informal access to information.