Statement relating to the NSW Online Registry Website data breach
The Privacy Commissioner is aware of recent media reports regarding a data breach affecting the NSW Online Registry Website.
The NSW Department of Communities and Justice have advised the Commissioner of the incident and the Commissioner is engaged with them about the incident.
The IPC does not comment on the details of individual matters. Investigations of incidents are undertaken independently by the agency involved.
The NSW Mandatory Notification of Data Breach (MNDB) Scheme requires reporting obligations for NSW public sector agencies. This includes informing the Privacy Commissioner as well as taking steps to notify affected individuals as soon as practicable if a data breach is likely to result in serious harm to individuals whose personal information is involved.
Privacy Commissioner Sonia Minutillo said, “As the data breach is investigated and responded to, ensuring that affected individuals are appropriately informed and supported so that they can take steps to protect themselves from any further risk to their personal information should be a priority.”
Reports about this incident may be understandably distressing to those who may be affected. If a data breach causes distress, there are support and resources available. Anyone concerned for their safety should contact NSW Police.
Further information about the MNDB Scheme and agency requirements can be found on the IPC website.
ENDS
For further information, please contact:
The Manager, Communications and Corporate Affairs on 0435 961 691 or email communications@ipc.nsw.gov.au
About the Information and Privacy Commission:
The Information and Privacy Commission NSW (IPC) is an independent integrity agency that supports the NSW Information Commissioner and the NSW Privacy Commissioner. Its vision is that privacy and access to government information are valued and protected in NSW. The Information Commissioner is the chief executive of the Commission.
About the NSW Privacy Commissioner
Ms Sonia Minutillo was appointed as the Privacy Commissioner in March 2025. As Privacy Commissioner, her role includes the promotion of public awareness and understanding of privacy rights in NSW, as well as providing information, support, advice and assistance to agencies and the public.
The Privacy Commissioner administers the Privacy and Personal Information Protection Act 1998 (PPIP Act) and the Health Records and Information Privacy Act 2002 (HRIP Act).
For further information about the IPC visit our website at www.ipc.nsw.gov.au
