Overview

The NSW Mandatory Notification Data Breach (MNDB) Scheme comes into effect on Tuesday 28 November 2023, which Council is obligated to adhere to, in accordance with the Privacy and Personal Information Protection Act 1998 (NSW) (PPIP Act).

• The MNDB scheme applies to breaches, identified as ‘eligible data breaches’ of:‘Personal information, as defined by the PPIP Act, meaning information or an opinion about an individual whose identity is apparent or can reasonably be ascertained from the information or opinion; and
• ‘Health information’ as defined by the Health Records and Information Privacy Act 2002 (NSW) (HRIP Act), meaning information about an individual’s physical or mental health, disability, and personal information connected to the provision of a health service.

In response to the MNDB scheme, we have developed the draft policy below, and are seeking feedback on it.