{"id":"nsw:act-2015-060","name":"Data Sharing (Government Sector) Act 2015","slug":"data-sharing-government-sector-act-2015","collection":"act","jurisdiction":"nsw","status":"in_force","isInForce":true,"actNumber":"60 of 2015","makingDate":null,"administeringDepartment":null,"currentVersion":{"id":29640,"registerId":"nsw-act-2015-060-current","compilationNumber":null,"startDate":"2026-04-01","status":"InForce","reasons":null,"registeredAt":null},"sections":[{"sectionNumber":"Part 1","sectionType":"part","heading":"Preliminary","content":"# Part 1 Preliminary\n\nPart 1 Preliminary","sortOrder":0},{"sectionNumber":"1","sectionType":"section","heading":"Name of Act","content":"#### 1 Name of Act\n\n1 Name of Act\n\n> This Act is the [Data Sharing (Government Sector) Act 2015](/view/html/inforce/current/act-2015-060).","sortOrder":1},{"sectionNumber":"2","sectionType":"section","heading":"Commencement","content":"#### 2 Commencement\n\n2 Commencement\n\n> This Act commences on the date of assent to this Act.","sortOrder":2},{"sectionNumber":"3","sectionType":"section","heading":"Objects of Act","content":"#### 3 Objects of Act\n\n3 Objects of Act\n\n> The objects of this Act are—\n> \n> > (a) to promote, in a manner that recognises the protection of privacy as an integral component, the management and use of government sector data as a public resource that supports good Government policy making, program management and service planning and delivery, and\n> \n> > (b) to remove barriers that impede the sharing of government sector data with the DAC or between other government sector agencies, and\n> \n> > (c) to facilitate the expeditious sharing of government sector data with the DAC or between other government sector agencies, and\n> \n> > (d) to provide protections in connection with data sharing under this Act by—\n> > \n> > > (i) specifying the purposes for, and the circumstances in, which data sharing is permitted or required, and\n> > \n> > > (ii) ensuring that data sharing involving health information or personal information continues to be in compliance with the requirements of the privacy legislation concerning the collection, use, disclosure, protection, keeping, retention or disposal of such information, and\n> > \n> > > (iii) requiring compliance with data sharing safeguards in connection with data sharing.","sortOrder":3},{"sectionNumber":"4","sectionType":"section","heading":"Definitions","content":"#### 4 Definitions\n\n4 Definitions\n\n> > (1) In this Act—\n> > \n> > control in relation to data—see subsection (2).\n> > \n> > DAC means that part of the Department known as the Data Analytics Centre or such other government sector agency (or part of a government sector agency) as may be prescribed by the regulations.\n> > \n> > data means any facts, statistics, instructions, concepts or other information in a form that is capable of being communicated, analysed or processed (whether by an individual or by a computer or other automated means).\n> > \n> > data analytics work means the examination and analysis of data for the purpose of drawing conclusions about that data (including, for example, conclusions about the efficacy of Government policies, program management or service planning and delivery by government sector agencies).\n> > \n> > data provider means the government sector agency that controls government sector data that is provided under this Act to a data recipient.\n> > \n> > data recipient means the government sector agency to which government sector data is provided under this Act.\n> > \n> > data sharing safeguards—see Part 3.\n> > \n> > Department means the Department of Finance, Services and Innovation.\n> > \n> > function includes a power, authority or duty, and exercise a function includes perform a duty.\n> > \n> > government sector agency means each of the following—\n> > \n> > > (a) the DAC,\n> > \n> > > (b) a government sector agency within the meaning of the [Government Sector Employment Act 2013](/view/html/inforce/current/act-2013-040),\n> > \n> > > (c) a statutory body representing the Crown,\n> > \n> > > (d) a council, county council or joint organisation within the meaning of the [Local Government Act 1993](/view/html/inforce/current/act-1993-030),\n> > \n> > > (e) a State owned corporation,\n> > \n> > > (f) a body (whether incorporated or unincorporated) established or continued for a public purpose by or under the provisions of an Act or statutory instrument,\n> > \n> > > (g) a wholly-owned subsidiary of the Crown in right of the State or an agency, council, corporation or other body referred to in paragraph (a), (b), (c), (d), (e) or (f),\n> > \n> > > (h) a person or body exercising public official functions declared by the regulations to be a government sector agency for the purposes of this Act.\n> > \n> > government sector data means any data that a government sector agency controls, but does not include data of a kind excluded by the regulations.\n> > \n> > head of a government sector agency means—\n> > \n> > > (a) in the case of a government sector agency within the meaning of the [Government Sector Employment Act 2013](/view/html/inforce/current/act-2013-040)—the head of the agency within the meaning of that Act, and\n> > \n> > > (b) in the case of any other government sector agency—\n> > > \n> > > > (i) the chief executive officer or other principal officer of the agency, or\n> > > \n> > > > (ii) any other person who is declared by the regulations to be the head of the agency for the purposes of this definition.\n> > \n> > health information has the same meaning as in the [Health Records and Information Privacy Act 2002](/view/html/inforce/current/act-2002-071).\n> > \n> > personal information has the same meaning as in the [Privacy and Personal Information Protection Act 1998](/view/html/inforce/current/act-1998-133).\n> > \n> > Note—\n> > \n> > Section 4A of the [Privacy and Personal Information Protection Act 1998](/view/html/inforce/current/act-1998-133) excludes health information from the definition of personal information in section 4 of that Act.\n> > \n> > privacy legislation means—\n> > \n> > > (a) the [Privacy and Personal Information Protection Act 1998](/view/html/inforce/current/act-1998-133) or the [Health Records and Information Privacy Act 2002](/view/html/inforce/current/act-2002-071), and\n> > \n> > > (b) any regulation or code of practice made, and any public interest directions or guidelines issued, under either of those Acts.\n> > \n> > share, in relation to government sector data, means to provide (or be provided with) the data.\n> \n> > (2) For the purposes of this Act, a person or body is taken to have control of data if—\n> > \n> > > (a) the person or body has possession or custody of the data, or\n> > \n> > > (b) the person or body has the data in the possession or custody of some other person or body.\n> > \n> > A person or body is, for example, taken to have control of data held by the person or body in storage with a commercial storage provider (including a storage provider who provides cloud storage facilities).\n> > \n> > Note—\n> > \n> > The [Interpretation Act 1987](/view/html/inforce/current/act-1987-015) contains definitions and other provisions that affect the interpretation and application of this Act.\n> \n> > (3) Notes included in this Act do not form part of this Act.\n> \n> **s 4:** Am 2017 No 65, Sch 2.6.","sortOrder":4},{"sectionNumber":"5","sectionType":"section","heading":"Relationship of Act with other laws","content":"#### 5 Relationship of Act with other laws\n\n5 Relationship of Act with other laws\n\n> > (1) Subject to subsection (2), a disclosure of government sector data by a government sector agency to the DAC or to another government sector agency is lawful for the purposes of any other Act or law that would otherwise operate to prohibit that disclosure (whether or not the prohibition is subject to specified qualifications or exceptions) if—\n> > \n> > > (a) this Act provides that the agency is authorised to share the data with the DAC or other government sector agency, and\n> > \n> > > (b) the agency provides the data to the data recipient only for the purpose to which the authorisation to share relates.\n> \n> > (2) Nothing in this Act authorises, permits or requires the DAC or another government sector agency—\n> > \n> > > (a) to collect, use, disclose, protect, keep, retain or dispose of any government sector data that is health information or personal information otherwise than in compliance with the privacy legislation, or\n> > \n> > > (b) to disclose any government sector data that is—\n> > > \n> > > > (i) excluded information of an agency specified in Schedule 2 to the [Government Information (Public Access) Act 2009](/view/html/inforce/current/act-2009-052) (being any information that relates to any function specified in that Schedule in relation to the agency), or\n> > > \n> > > > (ii) information of a kind described in Schedule 1 to that Act, or\n> > \n> > > (c) to deal with any government sector data to which the [State Records Act 1998](/view/html/inforce/current/act-1998-017) applies after it is shared under this Act otherwise than in compliance with the [State Records Act 1998](/view/html/inforce/current/act-1998-017).\n> \n> > (3) This Act is not intended to prevent or discourage the sharing of government sector data by government sector agencies as permitted or required by or under any Act or other law (apart from this Act).","sortOrder":5},{"sectionNumber":"Part 2","sectionType":"part","heading":"Facilitating government sector data sharing","content":"# Part 2 Facilitating government sector data sharing\n\nPart 2 Facilitating government sector data sharing","sortOrder":6},{"sectionNumber":"6","sectionType":"section","heading":"Voluntary data sharing with DAC or between other government sector agencies","content":"#### 6 Voluntary data sharing with DAC or between other government sector agencies\n\n6 Voluntary data sharing with DAC or between other government sector agencies\n\n> > (1) A government sector agency (other than the DAC) is, subject to section 5 (2), authorised to share government sector data that it controls with the DAC or with another government sector agency for any of the following purposes—\n> > \n> > > (a) to enable data analytics work to be carried out on the data to identify issues and solutions regarding Government policy making, program management and service planning and delivery by the government sector agencies,\n> > \n> > > (b) to enable related government sector agencies (such as branches, offices and other agencies within or otherwise related to a Public Service agency) to develop better Government policy making, program management and service planning and delivery by the agencies,\n> > \n> > > (c) such other purposes as may be prescribed by the regulations.\n> \n> > (2) If government sector data is shared under this section, the data provider and the data recipient must comply with all data sharing safeguards that are applicable to them in connection with the sharing.","sortOrder":7},{"sectionNumber":"7","sectionType":"section","heading":"Minister may give directions for data sharing with DAC","content":"#### 7 Minister may give directions for data sharing with DAC\n\n7 Minister may give directions for data sharing with DAC\n\n> > (1) The Minister may direct a government sector agency in writing to provide specified government sector data that it controls to the DAC within 14 days or such longer period specified in the direction, but only if the Premier has advised the Minister that the data concerned is required to be shared for the purpose of advancing a Government policy.\n> \n> > (2) A copy of a direction given under this section must be provided to the head of the government sector agency to which the direction is given.\n> \n> > (3) If a direction is given under this section—\n> > \n> > > (a) the specified data provider is, subject to section 5 (2), authorised and required to provide the specified government sector data in compliance with the direction, and\n> > \n> > > (b) the specified data provider and the DAC must comply with all data sharing safeguards that are applicable to them in connection with the sharing of the data.\n> \n> > (4) The Premier may certify, in writing, that the Premier has advised the Minister that a specified provision of government sector data by a government sector agency is required for the purpose of advancing a Government policy. The certificate is conclusive evidence of the matter stated in the certificate.\n> \n> > (5) The head of a government sector agency to which a direction is given under this section must ensure that the direction is complied with in accordance with subsection (3).\n> \n> > (6) A direction cannot be given under this section to a government sector agency that is a university.","sortOrder":8},{"sectionNumber":"8","sectionType":"section","heading":"Minister may obtain information for DAC concerning government sector data sets","content":"#### 8 Minister may obtain information for DAC concerning government sector data sets\n\n8 Minister may obtain information for DAC concerning government sector data sets\n\n> > (1) The Minister may direct a government sector agency in writing to provide the DAC with such information concerning the government sector data that it controls as the Minister may require so as to enable the DAC to determine the number and kinds of sets of data that the agency controls and the kind of information collected in those data sets.\n> \n> > (2) A copy of a direction given under this section must be provided to the head of the government sector agency to which the direction is given.\n> \n> > (3) The government sector agency is (subject to section 5 (2)) authorised and required to comply with a direction given to it under this section.\n> \n> > (4) This section does not require a government sector agency to provide government sector data to the DAC.\n> \n> > (5) Nothing in this section affects or limits the functions of the Privacy Commissioner under the privacy legislation.","sortOrder":9},{"sectionNumber":"9","sectionType":"section","heading":"Sharing of results of data analytics work carried out by the DAC","content":"#### 9 Sharing of results of data analytics work carried out by the DAC\n\n9 Sharing of results of data analytics work carried out by the DAC\n\n> The DAC is, subject to section 5 (2), authorised to share with government sector agencies the results of data analytics work that it has carried out on data provided to it by a government sector agency under this Act, but is not authorised to share that data with any other agency, person or body.","sortOrder":10},{"sectionNumber":"10","sectionType":"section","heading":"Directions to State owned corporations","content":"#### 10 Directions to State owned corporations\n\n10 Directions to State owned corporations\n\n> > (1) A direction may be given under this Part to a State owned corporation only if—\n> > \n> > > (a) the direction is given with the approval of the Premier, and\n> > \n> > > (b) where the portfolio Minister of the State owned corporation is neither the Premier nor the Minister administering this Act—the Minister administering this Act has consulted the portfolio Minister about the direction before it is given.\n> \n> > (2) If the direction to provide the government sector data is given in circumstances where the board of the State owned corporation considers that it is not in the commercial interests of the State owned corporation to provide the data, a State owned corporation is entitled to be reimbursed for the activity of providing the data in accordance with the provisions of section 20N (3)–(5) of the [State Owned Corporations Act 1989](/view/html/inforce/current/act-1989-134).\n> \n> > (3) In this section—\n> > \n> > portfolio Minister, in relation to a State owned corporation, has the same meaning as in the [State Owned Corporations Act 1989](/view/html/inforce/current/act-1989-134).","sortOrder":11},{"sectionNumber":"Part 3","sectionType":"part","heading":"Data sharing safeguards","content":"# Part 3 Data sharing safeguards\n\nPart 3 Data sharing safeguards","sortOrder":12},{"sectionNumber":"11","sectionType":"section","heading":"The data sharing safeguards","content":"#### 11 The data sharing safeguards\n\n11 The data sharing safeguards\n\n> This Part sets out the data sharing safeguards for the purposes of this Act that are applicable to the sharing of government sector data under this Act with the DAC or between other government sector agencies.","sortOrder":13},{"sectionNumber":"12","sectionType":"section","heading":"Privacy safeguards","content":"#### 12 Privacy safeguards\n\n12 Privacy safeguards\n\n> > (1) Without limiting section 5 (2), a data provider and data recipient must ensure that health information or personal information contained in government sector data that is shared is not collected, used, disclosed, protected, kept, retained or disposed of otherwise than in compliance with the privacy legislation.\n> \n> > (2) If a data recipient that is provided with government sector data that contains health information or personal information becomes aware that the privacy legislation has been (or is likely to have been) contravened in relation to that information while in the recipient’s control, the data recipient must, as soon as is practicable after becoming aware of it, inform the data provider and the Privacy Commissioner of the contravention or likely contravention.","sortOrder":14},{"sectionNumber":"13","sectionType":"section","heading":"Confidentiality and commercial-in-confidence","content":"#### 13 Confidentiality and commercial-in-confidence\n\n13 Confidentiality and commercial-in-confidence\n\n> > (1) A data recipient that is provided with government sector data that contains confidential or commercially sensitive information must ensure that the information is dealt with in a way that complies with any contractual or equitable obligations of the data provider concerning how it is to be dealt with.\n> \n> > (2) In this section—\n> > \n> > confidential or commercially sensitive information means—\n> > \n> > > (a) information a person or body controls that the person or body is required to keep confidential because of a contractual or equitable obligation, or\n> > \n> > > (b) without limiting paragraph (a), information about commercial-in-confidence provisions of a contract (within the meaning of the [Government Information (Public Access) Act 2009](/view/html/inforce/current/act-2009-052)), or\n> > \n> > > (c) any other information the disclosure of which would prejudice any person’s legitimate business, commercial, professional or financial interests.","sortOrder":15},{"sectionNumber":"14","sectionType":"section","heading":"Data custody and control safeguards","content":"#### 14 Data custody and control safeguards\n\n14 Data custody and control safeguards\n\n> > (1) A data provider and data recipient must ensure that the government sector data that is shared is maintained and managed in compliance with any legal requirements concerning its custody and control (including, for example, requirements under the [Government Information (Public Access) Act 2009](/view/html/inforce/current/act-2009-052) or [State Records Act 1998](/view/html/inforce/current/act-1998-017)) that are applicable to them.\n> \n> > (2) If a data recipient that arranges for a person or body (other than another government sector agency) to conduct data analytics work using government sector data with which it has been provided, the head of the data recipient is to ensure that appropriate contractual arrangements are in place before the data is provided to ensure that the person or body deals with the data in compliance with any requirements of the privacy legislation, the [State Records Act 1998](/view/html/inforce/current/act-1998-017) and any Government data security policies that are applicable to the data recipient.\n> > \n> > Note—\n> > \n> > See, also, the offences in Part 6 of the [Crimes Act 1900](/view/html/inforce/current/act-1900-040) in connection with unauthorised access to, or the modification or impairment of, data held in computers.","sortOrder":16},{"sectionNumber":"15","sectionType":"section","heading":"Other data sharing safeguards","content":"#### 15 Other data sharing safeguards\n\n15 Other data sharing safeguards\n\n> > (1) A data provider and data recipient must comply with such other requirements as may be prescribed by the regulations for the provider or recipient in connection with the sharing of government sector data.\n> \n> > (2) Without limiting subsection (1), a requirement prescribed by the regulations for the purposes of that subsection may require a data provider or data recipient to comply with any of the following in connection with the sharing of government sector data—\n> > \n> > > (a) specified instruments, or specified provisions of instruments, forming part of the privacy legislation (for example, codes of practice, guidelines or directions),\n> > \n> > > (b) any other codes of practice, guidelines, directions or publications specified (or issued, made or published as provided) by the regulations.","sortOrder":17},{"sectionNumber":"Part 4","sectionType":"part","heading":"Miscellaneous","content":"# Part 4 Miscellaneous\n\nPart 4 Miscellaneous","sortOrder":18},{"sectionNumber":"16","sectionType":"section","heading":"Act binds the Crown","content":"#### 16 Act binds the Crown\n\n16 Act binds the Crown\n\n> This Act binds the State and, in so far as the legislative power of the Parliament of New South Wales permits, the other States, the Territories and the Commonwealth.","sortOrder":19},{"sectionNumber":"17","sectionType":"section","heading":"Reports by Secretary of Department about compliance","content":"#### 17 Reports by Secretary of Department about compliance\n\n17 Reports by Secretary of Department about compliance\n\n> > (1) The Secretary of the Department may report to the Minister responsible for a government sector agency or the Public Service Commissioner any failure by the agency to comply with the requirements of this Act or the regulations or any other matter of concern to the Secretary with regard to the agency’s obligations under this Act or the regulations.\n> \n> > (2) The Secretary of the Department can include in the annual reporting information prepared for the Department under the [Government Sector Finance Act 2018](/view/html/inforce/current/act-2018-055) a report of any incidences of failure by government sector agencies to comply with the requirements of this Act or the regulations. A report of any such incident is to include any response provided to the Secretary by the agency concerned about the matter.\n> \n> **s 17:** Am 2018 No 70, Sch 4.23.","sortOrder":20},{"sectionNumber":"18","sectionType":"section","heading":"Delegation","content":"#### 18 Delegation\n\n18 Delegation\n\n> The Minister may delegate to the Secretary of the Department any function of the Minister under this Act, except this power of delegation.","sortOrder":21},{"sectionNumber":"19","sectionType":"section","heading":"Regulations","content":"#### 19 Regulations\n\n19 Regulations\n\n> > (1) The Governor may make regulations, not inconsistent with this Act, for or with respect to any matter that by this Act is required or permitted to be prescribed or that is necessary or convenient to be prescribed for carrying out or giving effect to this Act.\n> \n> > (2) The regulations may apply, adopt or incorporate (with or without changes) any publication (including any guidelines or standards) as in force at a particular time or from time to time.","sortOrder":22},{"sectionNumber":"20","sectionType":"section","heading":"Review of Act","content":"#### 20 Review of Act\n\n20 Review of Act\n\n> > (1) The Minister is to review this Act to determine whether the policy objectives of the Act remain valid and whether the terms of the Act remain appropriate for securing those objectives.\n> \n> > (2) The review is to be undertaken as soon as possible after the period of 5 years from the date of assent to this Act.\n> \n> > (3) A report on the outcome of the review is to be tabled in each House of Parliament within 12 months after the end of the period of 5 years.","sortOrder":23},{"sectionNumber":"Schedule 1","sectionType":"schedule","heading":"Savings, transitional and other provisions","content":"# Schedule 1 Savings, transitional and other provisions\n\nSchedule 1 Savings, transitional and other provisions","sortOrder":24}],"analysis":{"flash_summary_failed":{"failed":true,"reason":"A positive credit balance is required for all requests, including BYOK, so fallback providers remain available. Add credits at https://vercel.com/d?to=%2F%5Bteam%5D%2F%7E%2Fai%3Fmodal%3Dtop-up to continue.","source":"analysis-cron"},"summary":{"complexity_score":4,"scope_assessment":{"changed":true,"description":"Based on the amendment history (2017 and 2023 updates), the scope of the Act appears to have evolved from its original 2015 form. The 2023 amendment in particular — coinciding with machinery-of-government changes placing responsibility with the Minister for Customer Service and Digital Government — suggests the Act's remit may have been broadened or modernised to reflect the NSW Government's expanding digital government agenda. However, without access to the full substantive provisions, a definitive assessment of scope change cannot be made."},"complexity_factors":["Only metadata/status information was provided — the substantive provisions of the Act were not included in the text supplied, limiting full analysis","Data sharing laws typically involve complex definitions of 'public sector agency', 'data', and 'authorised sharing purposes'","Interaction with other NSW and Commonwealth privacy laws (e.g., Privacy and Personal Information Protection Act 1998 NSW, Privacy Act 1988 Cth) adds layers of complexity","Multiple amendments over time (2017 and 2023) suggest the law has evolved, requiring readers to track changes","Regulatory framework likely involves ministerial discretion and delegated authority, which can be difficult to navigate"],"plain_english_summary":"The Data Sharing (Government Sector) Act 2015 (NSW) establishes a legal framework for how NSW government agencies may share data with each other and with authorised external parties. It governs access to government-held information to support better service delivery and policy-making.\n\nIt affects NSW public-sector bodies, businesses and researchers seeking government data, and residents whose personal information is held by agencies — setting rules about when and how that information can be used and shared."},"flash_summary":{"complexity_score":5,"scope_assessment":{"changed":false,"description":"The Act implements its stated objects (s3) by expressly authorising data sharing that might otherwise be prohibited (s5(1)) while preserving limits for health/personal information, excluded GIPA material and State Records obligations (s5(2)). Authorisations (s6) and ministerial directions (s7) expand lawful sharing within those safeguards, and the regulations power (s19) may refine operational scope but does so within the Act’s framework."},"complexity_factors":["Broad, cross-cutting definitions and delegation of control over 'government sector data' (s4) that capture data held directly or in commercial/cloud storage (s4(2)).","Authorisation that can override other statutory prohibitions (s5(1)) but explicit carve-outs preserving privacy, excluded public-access material and State Records obligations (s5(2)).","Dual routes to data provision: voluntary sharing (s6) and mandatory ministerial directions to DAC where the Premier certifies policy need (s7, s7(4)).","Obligations on agency heads to ensure compliance and on data recipients to report privacy breaches to providers and the Privacy Commissioner (s7(5); s12(2)).","Detailed safeguards covering privacy, confidentiality, custody, contractual arrangements for third-party analytics and regulation-made requirements (ss12–15; s14(2); s15).","Interaction and cross-reference with multiple other Acts and external instruments (privacy Acts, Government Information (Public Access) Act 2009, State Records Act 1998, State Owned Corporations Act 1989) increasing legal interdependence (see ss4, 5(2), 10(2)).","Regulation-making power able to add procedural requirements or adopt external publications and standards (s19, s19(2)), creating implementation variability.","Administrative and compliance oversight roles for the Department Secretary, Minister and potential reporting obligations (ss17–18), which concentrate discretion and create governance tasks for agencies."],"plain_english_summary":"This Act creates a legal framework allowing NSW government agencies to share data with a Data Analytics Centre (DAC) or with each other by authorising voluntary sharing (s6), and by permitting ministerial directions to provide data to the DAC (s7). Its stated purpose is to promote use of government-held data for policy, programs and service delivery while protecting privacy; the Act achieves that by authorising disclosures (s5(1)) and imposing privacy, confidentiality, custody and contractual safeguards (ss12–15)."},"kimi_summary":{"content_quality":"ok","complexity_score":4,"scope_assessment":{"changed":false,"description":"The Act appears consistent with its original stated objects. The framework covers voluntary sharing, compelled sharing, and safeguards as originally contemplated. The 2017 and 2018 amendments noted in the text (Sections 4 and 17) appear to be technical or machinery amendments rather than substantial expansions of scope."},"complexity_factors":["Moderate cross-referencing: The Act incorporates definitions and concepts from at least 6 other Acts (Privacy and Personal Information Protection Act 1998, Health Records and Information Privacy Act 2002, Government Sector Employment Act 2013, Local Government Act 1993, State Owned Corporations Act 1989, Government Information (Public Access) Act 2009, State Records Act 1998, Government Sector Finance Act 2018)","Nested conditional logic in Section 5: Creates a general override of secrecy provisions, then immediately qualifies it with three specific exceptions (privacy compliance, excluded information under GIPA Act, and State Records Act compliance)","Dual pathways for data sharing: Distinguishes between voluntary sharing (Section 6) and compelled sharing via ministerial direction (Section 7), each with slightly different safeguard triggers","Special regime for State owned corporations (Section 10): Adds extra procedural requirements (Premier approval, consultation with portfolio Ministers, potential reimbursement) creating a conditional layer not applicable to other agencies","Open-ended regulatory framework: Multiple provisions defer details to regulations (Sections 6(1)(c), 15, 19), meaning the full operational rules are not contained in the Act itself","18 defined terms in Section 4, including recursive definitions (e.g., 'control' defined in subsection (2), 'head' defined through reference to other Acts)"],"plain_english_summary":"**What this law does:**\n\nThis Act creates a legal framework for New South Wales government agencies to share data with each other and with a central body called the **Data Analytics Centre (DAC)**. The goal is to make government data work harder—using it to improve policy-making, program management, and service delivery—while keeping privacy protections front and centre.\n\n**Who it affects:**\n\n* **Government sector agencies**—this is a broad category including public service departments, local councils, state-owned corporations, statutory bodies, and other public entities\n* **The Data Analytics Centre (DAC)**—a unit within the Department of Finance, Services and Innovation that analyses shared data\n* **Individuals whose data is held by government**—the Act imposes safeguards to protect personal and health information\n\n**Key things the law allows:**\n\n* **Voluntary sharing** (Section 6): Agencies can share data with the DAC or each other for data analytics, policy development, or other prescribed purposes\n* **Ministerial directions** (Section 7): The Minister can compel agencies to hand over data to the DAC, but only if the Premier has certified it's needed for government policy (universities are exempt from this power)\n* **Information gathering** (Section 8): The Minister can require agencies to tell the DAC what data sets they hold, without actually sharing the data itself\n\n**Key protections:**\n\n* **Privacy is non-negotiable**—any sharing of personal or health information must still comply with existing privacy laws (Sections 5, 12)\n* **Confidentiality safeguards**—commercially sensitive and confidential information must be handled according to existing obligations (Section 13)\n* **Data security requirements**—agencies must maintain proper custody and control of data, including contractual protections when outsourcing analytics work (Section 14)\n* **Reporting and oversight**—the Secretary of the Department can report compliance failures to responsible Ministers and include them in annual reports (Section 17)\n\n**Why it matters:**\n\nBefore this Act, various secrecy provisions in different laws often blocked legitimate data sharing between agencies—even when it would help deliver better services. This Act overrides those barriers *for specific purposes* while building in mandatory privacy and security safeguards. It essentially says: \"Yes, you can share data to improve government operations, but only if you handle it responsibly.\""},"issue_detection":{"absurdities":[],"contradictions":[]}},"importantCases":[],"_links":{"self":"/api/acts/data-sharing-government-sector-act-2015","history":"/api/acts/data-sharing-government-sector-act-2015/history","analysis":"/api/acts/data-sharing-government-sector-act-2015/analysis","conflicts":"/api/acts/data-sharing-government-sector-act-2015/conflicts","importantCases":"/api/acts/data-sharing-government-sector-act-2015/important-cases","documents":"/api/acts/data-sharing-government-sector-act-2015/documents"}}