Victoria’s IPPs

Purpose: The Act governs how the Victorian government and organizations in the public sector manage and safeguard personal information.

Scope: All public sector organizations in Victoria, including government departments, regional councils, and statutory authorities, are subject to the Act.

Privacy Principles: The Act sets out the Victorian Information Privacy Principles (IPPs), which are a set of 10 principles that govern the handling of personal information by public sector agencies.

Commissioner for Privacy and Data Protection: The Office of the Commissioner for Privacy and Data Protection is tasked with supervising and implementing the Act's requirements. The Information Commissioner may certify that a specified act or practice of an organization is consistent with IAPPs or other information handling provisions under the Act.

Enforcement Mechanisms: The Act includes several enforcement mechanisms, such as the Commissioner's authority to look into privacy violations and take appropriate action, as well as the right of individuals to access and update their personal data that is kept by public sector organizations. It can also serve compliance notices to the organizations and compel the production of specific documents or witnesses for such purposes.

Fees: An organization may charge an individual the prescribed fee (if any) for providing access to personal information under this Act.

International Data Transfers: The Act prohibits the transmission of personal data outside of Victoria unless there are suitable security measures in place.

Penalties: If public sector organizations violate the Act's provisions, they risk fines and penalties and harm to their reputation and public distrust. Any act to obstruct, mislead or provide false information can lead to a penalty of 60 units. Any unlawful disclosure or communication by the personnel responsible for handling personal information during the course of his/her duties can lead to 240 penalty units, or imprisonment for 2 years or both. (As per the Crimes Act 1914, one penalty unit equals 275 AUD).