Increasing concern for data privacy highlighted as Acting NSW Privacy Commissioner releases results for 2024 Community Attitudes Survey into privacy
Today, the acting NSW Privacy Commissioner, Sonia Minutillo published the results of the Information and Privacy Commission’s (IPC) latest two-yearly survey of NSW community attitudes towards privacy.
The results provide a broad and indicative sense of the public’s view of how privacy is regarded in areas such as data breaches by NSW government agencies, citizens’ awareness of their right to access their personal information, where to go to report the misuse of personal information, and how to make a privacy complaint.
Privacy
The results indicate that over 95% of respondents in 2024 felt that it was quite important or very important for their personal information to be protected.
Increasing from previous years, concern over data being shared or released inappropriately grew by 5% from 2022, with 85% of respondents showing high levels of concern.
Acting Privacy Commissioner, Sonia Minutillo, said, “The research consistently shows that the people of New South Wales greatly value their rights, are concerned about how their personal information is handled, and expect that government will in turn safeguard their personal information.”
Despite the high levels of concern reported, 30% of respondents indicated that they were unsure of who to report the misuse of their personal information.
Ms Minutillo said, “While almost two thirds of respondents were unsure of who to turn to if they needed to report misuse of their information, encouragingly over two thirds (68%) were aware of their right to access their personal or health information.
“The survey results point to the need for a greater and more concerted effort to promote the pathways available to citizens to address concerns of misuse.”
Privacy breaches
In the 2024 Survey, the IPC included questions relating to data breaches for the second time. The survey showed that almost one third (31%) of respondents indicated being affected by a data breach, a 14% increase from 2022.
Only half of respondents (51%) were provided advice by agencies on what to do next, however almost one quarter of respondents (22%) affected by a data breach indicated that they were not offered advice or assistance, an increase of 14% from the previous reporting period. Overwhelming 89% of respondents agreed that they should be provided assistance when their data is breached.
Ms Minutillo said, “The significant increase in those reported to be affected by a data breach is a stark reminder of the risks presented and the need to only collect the personal information necessary, take steps to safeguard it and not retain it for longer than is required.
“The introduction of the Mandatory Notification of Data Breach Scheme in November 2023, provides that agencies must notify individuals affected by an eligible data breach and they must also meet several requirements for notification, including providing recommendations about steps an individual should take in response. The IPC will use the findings to inform its activities and in particular the notification of data breaches to those affected.”
Acting Commissioner Minutillo said, “The research reinforces that the public expects that agencies that collect their personal information use it appropriately and keep it secure.
“Agencies that quickly identify and proactively act on and report data breaches demonstrate that they have effective processes in place to manage data breaches, minimise harm and protect citizens’ privacy. Having robust privacy practices and systems is in place will lead to better outcomes for all NSW citizens and I look forward to working with agencies to improve upon future results.”
The full results from the Community Attitudes Survey can be downloaded via the IPC website.
ENDS
For further information, please contact:
The Manager, Communications and Corporate Affairs on 0435 961 691 or email communications@ipc.nsw.gov.au
About the Information and Privacy Commission:
The Information and Privacy Commission NSW (IPC) is an independent statutory authority that administers New South Wales’ legislation dealing with privacy and access to government information. The IPC supports the Information Commissioner and the Privacy Commissioner in fulfilling their legislative responsibilities and functions and to ensure individuals and agencies can access consistent information, guidance and coordinated training about information access and privacy matters.
About the NSW Privacy Commissioner
Ms Sonia Minutillo was appointed as the Acting Privacy Commissioner in February 2024. As Acting Privacy Commissioner, her role includes the promotion of public awareness and understanding of privacy rights in NSW, as well as providing information, support, advice and assistance to agencies and the public.
The Privacy Commissioner administers the Privacy and Personal Information Protection Act 1998 (PPIP Act) and the Health Records and Information Privacy Act 2002 (HRIP Act).
For further information about the IPC visit our website at www.ipc.nsw.gov.au
Community Attitudes Study 2024 Results
Read the full results for the Community Attitudes Study 2024 into Privacy.
Read the full results for the Community Attitudes Study 2024 into Privacy Breaches.
