Data breach public notification register
Under the Privacy and Personal Information Protection Act 1998 (the PPIP Act), HealthShare NSW is required to maintain a data breach public notification register. When a privacy breach creates a serious risk of harm, HealthShare NSW is required to notify the public and the individuals impacted by the breach.
When notifying individuals is not possible, or there is potential that our notification won’t cover everyone impacted by the breach, the incident is recorded on the following data breach public notification register for 12 months:
There are currently no eligible data breaches to report.
If you believe that you have been impacted by a privacy breach and wish to make a complaint, you can do so within 6 months of becoming aware of the breach by making a:
- complaint to the NSW Privacy Commissioner
- Privacy Internal Review application.