Form: Data Breach Notification to the Privacy Commissioner

Data Breach Notification to the Privacy Commissioner

Section 59M of the Privacy and Personal Information Protection Act 1998 (PPIP Act) requires the head of a public sector agency to immediately notify the Privacy Commissioner of an eligible data breach using an approved form.

This online form has been approved by the Privacy Commissioner for use by agencies for the purpose of notification under section 59M of the PPIP Act.

The form sets out the information that agencies must supply to the Privacy Commissioner when making a notification of an eligible data breach, unless it is not reasonably practicable to provide that information.

Upon completion of the webform, agencies will receive an acknowledgment email with a copy of the submission and the date and time it was submitted to the Privacy Commissioner, to enable agencies to retain a copy of the submission for their record keeping system. Should you NOT receive an acknowledgement email from the IPC within 2 hours, please contact the IPC on 1800 472 679 or via ipcinfo@ipc.nsw.gov.au.