The NSWPF takes its obligations to have reasonable security safeguards and mechanisms in place to protect personal and health information seriously. We maintain a robust framework for privacy and data breach management that guides:

  • all NSWPF permanent full time, part time, trainee, and temporary employees (which, for the avoidance of doubt, includes including all sworn and unsworn members of the NSWPF) and approved users of NSWPF information systems and assets
  • any person or organisation authorised to administer, develop, manage and support NSWPF information systems and assets
  • third party suppliers, vendors, contingent labour contractors, and hosted/managed service providers.

    • Privacy Management Plan

    The NSWPF Privacy Management Plan (PDF) explains the NSWPF’s plan to ensure compliance with privacy obligations under the Privacy and Personal Information Protection Act 1998 (PPIP Act) and the Health Records and Information Privacy Act 2002 (HRIP Act).