Exhibition Item

The Amended Draft Privacy Management Plan (PMP) has been updated to reflect Maitland City Council’s commitment to safeguarding personal and health information. It ensures compliance with the Privacy and Personal Information Protection Act 1998 (PPIP Act), the Health Records and Information Privacy Act 2002 (HRIP Act), and the Privacy Code of Practice for Local Government.

This plan establishes practices and procedures for managing privacy, specifies handling of data breaches under the Mandatory Notification of Data Breach (MNDB) Scheme, and provides updated guidance on responsibilities for Council staff, contractors, and volunteers.

Key areas of the PMP include:

• Roles and Responsibilities: Defined duties for the General Manager, Privacy Officer, and all staff in safeguarding information and managing data breaches.
• Information Protection Principles and Health Privacy Principles: Compliance with statutory requirements for data collection, storage, access, and disclosure.
• Data Breach Response Plan: Clear steps for identifying, containing, assessing, and managing data breaches, including notification to the NSW Privacy Commissioner and affected individuals.

Notable Amendments in This Draft:

• Integration of the Data Breach Response Plan into the main document, emphasising holistic privacy and breach management.
• Updated contact details for the Privacy Officer and inclusion of a dedicated privacy email address.
• Enhanced provisions for public registers, data breach reporting, and the suppression of personal information to ensure individual safety.

This amended draft aims to uphold high standards of privacy governance and invites public feedback during the exhibition period to refine and strengthen its framework.