Version No. 031
Privacy and Data Protection Act 2014
No. 60 of 2014
Version incorporating amendments as at
11 September 2024
TABLE OF PROVISIONS
Section Page
Part 1—Preliminary
1Purposes
2Commencement
3Definitions
4Interpretation
5Objects
6Relationship of this Act to other laws
7Rights and liabilities
8Act binds the Crown
Part 1A—Functions, powers of Information Commissioner and appointment of Privacy and Data Protection Deputy Commissioner
Division 1—Performance of functions
8AFunctions of Information Commissioner
8BFunctions of Privacy and Data Protection Deputy Commissioner
8CInformation privacy functions
8DProtective data security and law enforcement data security functions
8EPerformance of concurrent functions
8FInformation Commissioner may confer functions on Privacy and Data Protection Deputy Commissioner
8GGeneral powers of Information Commissioner and Privacy and Data Protection Deputy Commissioner
Division 2—Privacy and Data Protection Deputy Commissioner
8HAppointment of Privacy and Data Protection Deputy Commissioner
8ITerms and conditions of appointment of Privacy and Data Protection Deputy Commissioner
8JRemuneration
8KVacancy and resignation of Privacy and Data Protection Deputy Commissioner
8LSuspension and removal from office
8MActing Privacy and Data Protection Deputy Commissioner
8NValidity of acts and decisions
Division 3—General
8ODelegation
8PDirections
Part 2—Application of this Act
9Definition
10Courts, tribunals etc.
10ARoyal Commissions etc.
11Parliamentary Committees
12Publicly-available information
Part 3—Information privacy
Division 1—Application of this Part
13Public sector organisations to which this Part applies
14Exemption—Freedom of Information Act 1982
15Exemption—law enforcement
15AExemption—information sharing under the Family Violence Protection Act 2008
15BExemption—information sharing under the Child Wellbeing and Safety Act 2005
15CExemption—information sharing for quality and safety purposes under the Health Services Act 1988
15DInformation sharing under Division 6 of Part 4A of Terrorism (Community Protection) Act 2003
16What is an interference with privacy of an individual?
17Effect of outsourcing
Division 2—Information Privacy Principles
18Information Privacy Principles
19Application of Information Privacy Principles
20Organisations to comply with Information Privacy Principles
Division 3—Codes of practice
21Codes of practice
22Process for approval of code of practice or code amendment
23Organisations bound by code of practice
24Effect of approved code
25Codes of practice register
26Revocation of approval
27Effect of revocation of approval or amendment or expiry of approved code
Division 4—Capacity to consent or make a request or exercise right of access
28Capacity to consent or make a request or exercise right of access
Division 5—Public interest determinations and temporary public interest determinations
Subdivision 1—Public interest determinations
29Public interest determination
30Application taken to be application for temporary public interest determination on request
31Information Commissioner may make public interest determination
32Effect of public interest determination
33Duration of public interest determination
34Amendment of public interest determination
35Revocation of public interest determination
36Reporting and review
Subdivision 2—Temporary public interest determinations
37Temporary public interest determination
38Application for temporary public interest determination
39Information Commissioner may make temporary public interest determination
40Duration of temporary public interest determination
41Revocation of temporary public interest determination
Subdivision 3—Disallowance of determinations
42Disallowance of determinations
Division 6—Information usage arrangements
43Definitions
44Approval of arrangement not required if information use otherwise permitted
45Meaning of information usage arrangement
46Parties to an information usage arrangement
47Information Commissioner to consider information usage arrangement
48Information Commissioner's report