Cabonne Council maintains a Data Breach Policy and Procedure in alignment with the Privacy and Personal Information Protection Act 1998. Per Section 59P of the Act, this page lists details of any data breaches that meet the required criteria or where it is not practicable to notify any or all affected individuals directly, a public notice about the breach will be posted here.
What is the Mandatory Notification of Data Breach Scheme?
The Mandatory Notification of Data Breach Scheme (MNDB Scheme) requires NSW public sector agencies (including Councils), to notify affected individuals and the NSW Privacy Commissioner when there has been an eligible data breach of personal or health information.
For more information about the MNDB Scheme please refer to section Part 6A of the Privacy and Personal Information Act 1998 or the NSW Information and Privacy Commission website.
What information is published?
This register will record the following details for a period of 12 months, unless they contain personal information or would be prejudice Council's functions:
- Date of breach
- Description of breach
- How the breach occurred
- The type of breach (unauthorised disclosure, access or loss of information)
- The kind of information involved
- How long the information was disclosed for
- Action taken or planned to contain or mitigate any harm to individuals or secure the data
- Any recommended actions that affected individuals take themselves (if any)
- How to make a privacy complaint
- The name of the agency responsible for the breach
- The name of any other NSW government agency involved in the breach (if any)
- Contact details to speak to someone about the breach
Making a privacy complaint
Any data breach published on this register has already been reported to the NSW Privacy Commissioner. However should you wish to make a complaint to Council you may do so using our online complaints form. If you wish to make a complaint to the NSW Privacy Commissioner, please visit the Information and Privacy Commission's website.