NSW Privacy Commissioner encourages agencies and citizens to work together to build Privacy: the Foundation of Trust this Privacy Awareness Week NSW 2022
Today, the NSW Privacy Commissioner, Samantha Gavel, launched Privacy Awareness Week NSW 2022.
Privacy Awareness Week NSW takes place this year from 2 – 8 May 2022 and involves both public sector agencies and citizens to improve understanding and awareness of NSW privacy legislation, and to raise awareness of a person’s privacy rights and agency obligations.
The Information and Privacy Commission NSW (IPC) hosts the campaign in NSW and this year marks the twelfth year of celebrating Privacy Awareness Week NSW. The 2022 theme is ‘Privacy: The foundation of trust – we all have a role to play’.
The Privacy Commissioner, Samantha Gavel, said, “This year’s theme encompasses the shared responsibility of citizens and agencies in ensuring that citizens are actively taking measures to review their privacy settings and keep their information secure, and agencies continue to proactively build on their privacy practices to effectively handle and protect citizens’ personal information.”
To celebrate Privacy Awareness Week NSW 2022, the Privacy Commissioner is hosting the event Insights and lessons – Preparing for MNDB to assist NSW public sector agencies to prepare for the upcoming Mandatory Notification Data Breach Scheme (MNDB).
The event will be opened by the Attorney General, the Hon. Mark Speakman SC MP, and feature a range of public and private sector speakers, including; Prof. Lyria Bennett Moses, UNSW; Dr David Lacey, IDCARE; Scott Johnston, Deputy Secretary Revenue NSW; Kate Watts, Transport for NSW; Sonia Minutillo, IPC; and facilitated by Martin Stewart-Weeks, Public Purpose.
The Commissioner said, “With the introduction of the MNDB Scheme, it is important that agencies are aware of the unique challenges that may arise and begin to consider the implications of the scheme for their privacy practices. It is encouraging that there has been high interest in this event and that agencies are taking a proactive approach to their preparation. I am looking forward to hearing from our speakers who will share their diverse insights to assist agencies in preparing for the upcoming MNDB Scheme.”
This year, the IPC has released easy to understand resources for citizens to learn more about their rights under NSW privacy legislation. The resources include an animation about the 12 Information Protection Principles under the Privacy and Personal Information Protection Act 1998 (PPIP Act), and an animation on the 15 Health Privacy Principles under the Health Records Information Privacy Act 2002 (HRIP Act).
For agencies, the IPC has launched a new Privacy Impact Assessment (PIA) Questionnaire. This tool is intended to assist with considering the privacy impacts of any website that involves the handling of personal information or de-identified information. It is a collaboration between the IPC and elevenM, to support NSW public sector agencies in assessing their websites for privacy risks and identifying remediation actions. The tool has been developed to bring best-practice approaches and methodologies to NSW public sector agencies but does not replace a complete PIA. It should only be used to assist in identifying the privacy risks and areas for remedial action.
The Commissioner said, “The public expects that organisations that collect their personal information use it appropriately and keep it secure. The Privacy Impact Assessment (PIA) Questionnaire helps agencies to embed a privacy-by-design approach and assess whether their websites comply with NSW privacy legislation. It can be used in conjunction with a PIA to identify key privacy risks and areas for remedial action.
“The IPC’s new citizen resources will enable the public to learn more about how their personal and health information should be handled by NSW public sector agencies, and encourage them to report privacy breaches to the agency. This will also assist agencies in reporting and managing these breaches, and minimising harm to individuals.
“Every individual has a right to privacy and the IPC can help citizens understand privacy laws in NSW and provide information on how to protect their personal information and assert their privacy rights.”
More information, including activities and resources on privacy rights in NSW, are available on the Privacy Awareness Week NSW 2022 website.
ENDS
For further information, please contact:
The Manager, Communications and Corporate Affairs on 0435 961 691 or email communications@ipc.nsw.gov.au
About the Information and Privacy Commission:
The Information and Privacy Commission NSW (IPC) is an independent statutory authority that administers New South Wales’ legislation dealing with privacy and access to government information. The IPC supports the Information Commissioner and the Privacy Commissioner in fulfilling their legislative responsibilities and functions and to ensure individuals and agencies can access consistent information, guidance and coordinated training about information access and privacy matters.
About the NSW Privacy Commissioner
Samantha Gavel was appointed as NSW Privacy Commissioner on 4 September 2017. Her role is to promote public awareness and understanding of privacy rights in NSW, as well as provide information, support, advice and assistance to agencies and the general public.
About NSW privacy legislation
The Privacy and Personal Information Protection Act 1998 (PPIP Act) outlines how NSW public sector agencies, including government agencies, local councils and universities, manage and protect personal information.
The Health Records Information Privacy Act 2002 (HRIP Act) promotes fair and responsible handling of health information. The HRIP Act applies to an organisation in NSW that is a health service provider or that collects, holds or uses health information. This includes both public and private sector organisations.
All NSW citizens have a right to have their personal information protected. If you are concerned a NSW agency has breached your privacy, you can request the agency to conduct an internal privacy review. The Privacy Commissioner has an oversight role in relation to the internal review.
The IPC can help citizens understand privacy laws in NSW and provide information on to protect personal information and assert their privacy rights.
IPC resources
- Animation on the 12 Information Protection Principles
- Animation on the 15 Health Privacy Principles
- Privacy Impact Assessment Questionnaire for Assessing Websites
For further information, visit our website at www.ipc.nsw.gov.au
