Exhibition Item

The Amended Draft Data Breach Policy has been updated to align with Maitland City Council’s organisational structure, updated branding, and the mandatory notification provisions under Part 6A of the Privacy and Personal Information Protection Act 1998 (PPIP Act). This policy ensures the effective management and response to data breaches while safeguarding the confidentiality, integrity, and security of personal information.

The policy applies to all Council staff, contractors, councillors, volunteers, and third parties handling personal information on behalf of the Council and outlines the following key elements:

• Mandatory Notification of Data Breaches (MNDB) Scheme: Requirements for reporting eligible data breaches to the NSW Privacy Commissioner and affected individuals.
• Data Breach Response Plan: Steps to respond to and mitigate harm from suspected or confirmed data breaches.
• Roles and Responsibilities: Clearly defined duties for the General Manager, Privacy Officer, and other stakeholders in managing data breaches.
• Record-Keeping and Transparency: Maintenance of internal and public registers of data breaches and accessibility of this policy.

Notable Amendments in This Draft:

• Clarified roles and responsibilities aligned with the Council’s updated organisational structure.
• Inclusion of a dedicated privacy email address for reporting and inquiries.
• Adjustments to data breach reporting and response procedures to reflect evolving legislative and operational requirements.

This amended draft policy reflects the Council’s commitment to robust data governance and invites feedback during the public exhibition period to ensure its effectiveness in addressing community and organisational needs.