Public Exhibition of Council Governance and Risk Policies
Council is inviting community members to view and comment on Council’s Draft Privacy Management Plan, Draft Public Interest Disclosure Policy and Draft Data Breach Policy which is on public exhibition at www.yourhawkesbury-yoursay.com.au from Monday, 9 December 2024 until Wednesday, 15 January 2025.
Draft Data Breach Policy
The Privacy and Personal Information Protection Amendment Bill 2022 passed the NSW Parliament on 16 November 2022 and came into effect on 28 November 2023. The Bill amends the Privacy and Personal Information Protection (PPIP) Act 1998 to say that Council is required to notify the NSW Privacy Commissioner and effected individuals of eligible data breaches involving personal or health information under the Mandatory Notification of Data Breach Scheme and that Council must prepare and publish a data breach policy. In accordance with the requirements of the legislation, the Draft Data Breach Policy has been developed.
Draft Public Interest Disclosure Policy
Under Section 42 and Section 47 of the Public Interest Disclosure Act 2022 (PID Act), Council is required to develop and publish a public interest disclosure policy. The PID Act underwent major amendments and commenced on 1 October 2023. The amendments include:
- Increasing the scope of people who public officials can report serious wrongdoing to
- Enhancing the protections for whistleblowers
- Clarifying how agencies should respond to public interest disclosures
- Clarifying an agency’s obligations for managing confidentiality, providing support and undertaking risk mitigation strategies.
The Draft Public Interest Disclosure Policy has been reviewed in response to the amendments and it replaces the current ‘Internal Reporting Policy (Public Interest Disclosures Act)’.
Draft Privacy Management Plan
Under Section 33 of the Privacy and Personal Information Protection (PPIP) Act 1998, Council is required to develop and publish a privacy management plan. The Privacy and Personal Information Protection Amendment Bill 2022 came into effect on 28 November 2023. The Bill amends the PPIP Act to say that Council is required to add to its Privacy Management Plan the procedures and practices used to ensure compliance with the obligations under the Mandatory Notification Data Breach Scheme. Council’s Privacy Management Plan has been reviewed and amended to reflect this and to make it current.
Further details are available in the Business Paper of the Ordinary meeting of 26 November 2024 which is available on Council’s website: www.hawkesbury.nsw.gov.au/your-council/council-meetings-and-agendas/business-papers
A hard copy of the Draft Policies can also be viewed at Council’s Administration Building, 366 George Street, Windsor, Monday to Friday from 9am to 4pm during the exhibition period.
Council will receive online submissions via www.yourhawkesbury-yoursay.com.au or in writing addressed to the General Manager by mail to Hawkesbury City Council, PO Box 146 WINDSOR NSW 2756, or email council@hawkesbury.nsw.gov.au up to close of business on Wednesday, 15 January 2025.
All submissions will be considered and may be included in a future Council Meeting Business Paper. Your submission, and any personal information, is accessible by any person upon written application, subject to Council’s Privacy Management Plan and the Government Information (Public Access) Act, 2009. The inclusion of personal information in your submission is voluntary. The information will ultimately be stored in Council’s records system.
For any enquiries regarding this matter, contact Patricia Krzeminski, Manager Governance and Risk on 4560 4444 or by email to council@hawkesbury.nsw.gov.au with reference to Council’s Draft Privacy Management Plan, Draft Public Interest Disclosure Policy and Draft Data Breach Policy.
