Draft Policy Data Breach Mandatory Reporting

Have your say on Council's draft Policy Data Beach Mandatory Reporting.


Changes to the Privacy and Personal Information Protection Act 1998 (PPIP Act) requires local government agencies to provide a publicly available data breach policy. We have developed a draft policy and are now seeking feedback on it.

Summary of changes to the PPIA Act

  • The Privacy Commissioner is creating a Mandatory Notification of Data Breach (MNDB) Scheme which will require us to notify the Privacy Commissioner and affected individuals of data breaches involving personal or health information likely to result in serious harm.
  • If there is a suspected data breach we will be required to:
    • Make all reasonable efforts to contain the breach
    • Assess whether there has been unauthorised access, disclosure or loss of personal information held by the agency within a 30-day period.
    • Assess if there is a likelihood of serious harm to any affected individual within a 30-day period.
    • Make all reasonable attempts to mitigate the harm done by the suspected breach.
  • We must maintain a public register on the website of data breach notifications. Each notification must be made available for at least 12-months and must contain specified information.

Council resolved on 21 February 2024 to endorse placing Policy 6.27 Data Breach Mandatory Reporting on public exhibition. A copy of councils resolution can be found here.

Have Your Say

Please submit your feedback using the form below, or alternatively:

  • By email: council@begavalley.nsw.gov.au with “submission on draft Policy 6.27 Data Breach Mandatory Reporting”  in the subject line
  • By post: Chief Executive Officer, Bega Valley Shire Council, PO Box 492, Bega NSW 2550

If you have any questions please get in touch with us. Call  6499 2222 or email council@begavalley.nsw.gov.au for assistance.

 

 

Who's listing

Gemma Stewart

Manager Information Technology
Bega Valley Shire Council

Phone: (02) 6499 2222
Email: council@begavalley.nsw.gov.au

 

Please submit your feedback by: Midnight Sunday 21 April 2024.

 

Online feedback form

 

 

Was this helpful?


Contact Us