Public Notifications
The Privacy Commissioner is required to maintain a register of Public Notifications made by NSW public sector agencies following an eligible data breach. This register helps the public to find information about Public Notifications and provides the following information:
- the date the data breach occurred,
- the date the notification was published,
- the name of the agency that made the notification, and
- a link to access the notification.
Information provided about how to access the notification will be made available from this page and will be published for at least 12 months after the date the notification is published by the relevant agency. This register is regularly updated as the IPC receives new notifications.
| Agency Public Notification Date | Agency Date of Incident | Agency Name | Agency Public Notification Link |
|---|---|---|---|
| 31 October 2024 | 14 August 2024 | Western Sydney University | Privacy Breaches | Western Sydney University |
| 30 October 2024 | 13 September 2024 | Department of Primary Industries and Regional Development - Tocal College | DPIRD Data Breach Public Notification Register | NSW Government |
| 29 September 2024 | 11 July 2024 | Liverpool City Council |
Main webpage - Public Access to Information | Liverpool City Council (nsw.gov.au) Public Notification - Liverpool City Council data breach notification |
| 31 July 2024 | 9 July 2023 | Western Sydney University | Privacy Breaches | Western Sydney University |
| 9 July 2024 | 19 April 2024 | Inner West Council | Mandatory notification of data breach register - Inner West Council (nsw.gov.au) |
| 4 July 2024 | 1 November 2023 | NSW Department of Customer Service | DCS Data Breach Public Notification Register | NSW Government |
| 3 May 2024 | 26 April 2024 | Liverpool City Council |
Main webpage - Public Access to Information | Liverpool City Council (nsw.gov.au) Public Notification - Liverpool City Council data breach notification |
Expired Public Notifications
| Agency Public Notification Date | Agency date of incident | Agency Name |
|---|---|---|
| There are currently no expired public notifications. |
The Privacy Commissioner is required to publish on the Privacy Commissioner’s website information about how to access the information published by a public sector agency in its public notification register under section 59P(5) of the Privacy and Personal Information Protection Act 1998 (PPIP Act). Current as at 12 November 2024.
