1. Record Keeping and Privacy Governance Record Keepers Workshop, 22 March 2016 Dr Elizabeth Coombs NSW Privacy Commissioner

2. The role of the NSW Privacy Commissioner The Privacy Commissioner is responsible for the privacy functions of the Information and Privacy Commission. This includes promoting the adoption of privacy best practice, overseeing complaint handling, providing statutory advice, preparing guidelines, and oversighting legislation. The current legislation is: Privacy and Personal Information Protection Act 1998 (PPIP Act) Health Records & Information Privacy Act 2002 (HRIP Act) The Commissioner is an independent statutory officer reporting directly to Parliament. The role is separate and independent from the Information Commissioner. Privacy is more than just information – it is a right to ‘be left alone’

3. NSW privacy legislation NSW Privacy Legislation: Privacy & Personal Information Protection Act 1998 (PPIP Act) Health Records & Information Privacy Act 2002 (HRIP Act) Examples of privacy provisions in other NSW Acts:  Children and Young Persons (Care and Protection) Act 1998;  Public Health Act 2010 (disease notification);  Noxious Weeds Act 1993;  Local Government Act 1993; and  Data Sharing (Government Information) Act 2015. Commonwealth Legislation:  The Privacy Act Cth 1988.

4. Good governance and the knock on effect… “Good governance is not just necessary to meet legal requirements… Information is an organisational asset” “Good governance is not just necessary to meet legal requirements… Information is an organisational asset”

5. The information lifecycle Legislation is principle based  12 Information Protection Principle (IPP’s)  15 Health Privacy Principles (HPP’s) Essentially following the life cycle of information from creation through to disposal. Record keeping is closely related to all stages of the information life cycle Record keeping is closely related to all stages of the information life cycle

6. Privacy by design and DAC Internationally accepted standard. Risk management mechanism – Privacy Impact Assessment “The NSW Data Analytics Centre also facilitates data sharing between agencies to inform more efficient, strategic, whole-of-government evidence based decision making…” “The NSW Data Analytics Centre also facilitates data sharing between agencies to inform more efficient, strategic, whole-of-government evidence based decision making…”

7. Privacy Mythbusters: Myth: People don’t care about privacy anymore. Myth: Because of the Privacy Act...

8. Privacy and Best Practice Understand how privacy governance and record keeping go hand in hand Lead! Key Messages: The law is the ‘floor, not the ceiling’

9. Help at a click… Tools we have and tools we need. Privacy Governance Framework Privacy Governance Framework Email Phone Online Email Phone Online

10. Questions ? ? ? ? ? ?

11. Contact Information Dr Elizabeth Coombs | elizabeth.coombs@ipc.nsw.gov.au Website:www.ipc.nsw.gov.au/privacy Email:ipcinfo@ipc.nsw.gov.au Free call:1800 IPC NSW (1800 472 679) Office:Level 3, 47 Bridge Street, Sydney NSW 2000