The legislation establishes a mandatory reporting framework for ‘notifiable information breaches'
The WA government has enacted new legislation to bolster the protection and secure handling of personal information held by the government.
According to the WA government, the Privacy and Responsible Information Sharing Bill 2024 (PRIS Bill) introduces modern privacy protections while enabling safe and efficient information sharing across public sector agencies and with trusted external organizations.
The WA government emphasised that the PRIS Bill sets out new privacy principles to guide government agencies in managing personal information responsibly. The legislation also establishes a mandatory reporting framework for "notifiable information breaches," requiring agencies to inform both the Information Commissioner and affected individuals in cases of serious data breaches. This measure aims to ensure transparency and maintain public confidence in the handling of sensitive information.
Attorney General John Quigley emphasized the importance of these reforms, stating that Western Australians deserve to know their personal information is managed securely. He noted that the principles incorporated in the PRIS Bill align with privacy standards adopted across Australia, offering residents assurance of the government’s commitment to their data protection.
Complementing the PRIS Bill, the Information Commissioner Bill 2024 (IC Bill) introduces the offices of information commissioner, information access deputy commissioner, and privacy deputy commissioner. These roles are expected to provide robust oversight and handle privacy-related complaints.
Additionally, a chief data officer will be appointed to lead efforts in fostering a culture of transparency and accountability within the public sector. This role will focus on advancing responsible information sharing and ensuring that government-held data is used to improve decision-making, enhance public services, and drive innovation while safeguarding privacy.
In a statement, Innovation and Digital Economy Minister Stephen Dawson highlighted the broader impact of the legislation, describing it as a key step in shaping WA’s digital future. He underscored the dual responsibility of leveraging data for public benefit while maintaining stringent safeguards to protect individuals’ personal information.