Status and Details

This page contains information about the status, approval and a summary of the changes from the previous version of the document. Please note that the Unit Head listed on this page is the current owner of this policy and may not reflect the University position/staff member who owned this policy at the time of publication.

Privacy Data Breach Response Plan

Show Field Notes

Status	Historic	Indicates if this version of the document is in effect (Current), yet to come into effect (Future), or expired (Historic).
Effective Date	27th November 2023	This is the date on which this version of the document came into effect.
Review Date	27th November 2024	The next review of this document is scheduled to commence on this date.
Approval Authority	Vice-Chancellor and President	The noted authority approved this is version of the document.
Approval Date	27th November 2023	This is the date on which this version of the document was approved by the authorised authority.
Expiry Date	30th October 2024	This is the date on which this version expires. It may still apply, conditionally, after this date.
Unit Head	Sophie Buck Director, Governance Services 45701415	This is the officer generally responsible for day to day administrative matters.
Enquiries Contact	Sebastian Castro Leon Privacy and GIPA Officer s.castroleon@westernsydney.edu.au	General enquiries should be directed to the officer/area listed.

Summary of Changes from Previous Version

This Plan sets out the procedures to be followed by University staff in response to suspected, actual or eligible breaches of University-held data. The Plan also enables the University to meet its statutory obligations under the Mandatory Notification of Data Breach (MNDB) Scheme in Part 6A of the Privacy and Personal Information Protection Act 1998 (NSW) and as a Tax File Number Recipient in Part IIIC of the Privacy Act 1988 (Cth).

Clauses Amended:Policy: All Guidelines: All Procedures: All

7/02/2024: Minor Text Amendment – clause 9e. – fixed typographical error to change “mean” to “meaning”.

28/11/2023: System Administrator Fix – inserted hyperlinks to the associated information ‘Mandatory Notification of Data Breach Scheme’ webpage and the ‘Business Continuity and Crisis Managment Framework’ and other associated information listed under clause 39.

01/01/2024: Position name changed from Executive Director, HR Partnerships and Employment Relations (ED, HRP & ER) to Executive Director, Employment Relations (ED, ER)