{"id":"privacy-and-responsible-information-sharing-privacy-regulations-2025","name":"Privacy and Responsible Information Sharing (Privacy) Regulations 2025","slug":"privacy-and-responsible-information-sharing-privacy-regulations-2025","collection":"regulation","jurisdiction":"wa","status":"in_force","isInForce":true,"actNumber":null,"makingDate":null,"administeringDepartment":null,"currentVersion":{"id":181677,"registerId":"wa-privacy-and-responsible-information-sharing-privacy-regulations-2025-current","compilationNumber":null,"startDate":"2026-04-05","status":"InForce","reasons":null,"registeredAt":null},"sections":[{"sectionNumber":"1","sectionType":"section","heading":"Privacy and Responsible Information Sharing (Privacy) Regulations 2025","content":"![Crest]()Western Australia\n\nPrivacy and Responsible Information Sharing Act 2024\n\nPrivacy and Responsible Information Sharing (Privacy) Regulations 2025\n\nWestern Australia\n\nPrivacy and Responsible Information Sharing (Privacy) Regulations 2025\n\nContents\n\n1. Citation 1\n\n2. Commencement 1\n\n3. Making privacy guidelines publicly available 1\n\n4. Information not required to be included in annual report before relevant Act provisions commence 1\n\nNotes\n\nCompilation table 3\n\nDefined terms\n\n  \n\nPrivacy and Responsible Information Sharing Act 2024\n\nPrivacy and Responsible Information Sharing (Privacy) Regulations 2025\n\n##### 1. Citation\n\n\t\tThese regulations are the *Privacy and Responsible Information Sharing (Privacy) Regulations 2025*.\n\n##### 2. Commencement\n\nThese regulations come into operation on 1 July 2025.\n\n##### 3. Making privacy guidelines publicly available\n\nFor the purposes of section 148(4) of the Act, privacy guidelines must be made publicly available by —\n\n(a) publishing the guidelines on a website maintained by, or on behalf of, the Information Commissioner; and\n\n(b) making a hard copy of the guidelines available for inspection during business hours at the principal office of the Information Commissioner.\n\n##### 4. Information not required to be included in annual report before relevant Act provisions commence\n\n(1) In this regulation —\n\nannual report means a report required under the *Information Commissioner Act 2024* section 32.\n\n(2) Section 146 of the Act does not require an annual report for a financial year to include any information about a matter relating to a provision of the Act if the provision has not come into operation before the end of that financial year.\n\nNote for this regulation:\n\nFor example, the annual report for a financial year is not required to include information about the number of privacy complaints made in the financial year if section 82 of the Act has not come into operation before the end of the financial year.\n\n![]()\n\nNotes\n\nThis is a compilation of the *Privacy and Responsible Information Sharing (Privacy) Regulations 2025*. For provisions that have come into operation see the compilation table.\n\nCompilation table\n\n| **Citation** | **Published** | **Commencement** |\n| --- | --- | --- |\n| *Privacy and Responsible Information Sharing (Privacy) Regulations 2025* | SL 2025/119 25 Jun 2025 | 1 Jul 2025 (see r. 2) |\n\n\nDefined terms\n\n*[This is a list of terms defined and the provisions where they are defined. The list is not part of the law.]*\n\n**Defined term Provision(s)**\n\nannual report 4(1)\n\n© State of Western Australia 2025.\n\nThis work is licensed under a Creative Commons Attribution 4.0 International Licence (CC BY 4.0). To view relevant information and for a link to a copy of the licence, visit www.legislation.wa.gov.au.\n\nAttribute work as: © State of Western Australia 2025.\n\nBy Authority: GEOFF O. LAWN, Government Printer\n","sortOrder":0}],"analysis":{"flash_summary_failed":{"failed":true,"reason":"Unauthenticated. Configure AI_GATEWAY_API_KEY or use a provider module. Learn more: https://ai-sdk.dev/unauthenticated-ai-gateway","source":"analysis-cron"},"flash_summary":{"complexity_score":2,"scope_assessment":{"changed":true,"description":"Regulation 4(2) narrows the operational scope of the Act’s reporting requirement (section 146) by excluding from an annual report any information about Act provisions that have not commenced by the end of the financial year. This modifies the Act’s reporting reach for periods when provisions remain uncommenced (see reg 4(2))."},"complexity_factors":["Very short instrument: only four regulations, straightforward operative text.","Clear administrative obligations on the Information Commissioner to publish and make available guidelines (reg 3).","A transitional reporting exemption that prevents retrospective reporting requirements for uncommenced provisions (reg 4(2)).","Cross-references to the Act and other sections (s148(4), s146, example referencing s82) require reading across instruments.","Minimal defined terms and limited discretionary decision-making; primary complexity is procedural compliance."],"plain_english_summary":"From 1 July 2025, the Information Commissioner must publish the Act’s privacy guidelines on a website and keep a hard copy available for inspection at the Commissioner’s principal office (regs 2–3). The regulations also say annual reports do not have to include information about any provision of the Act that had not commenced by the end of the financial year, reducing reporting duties for agencies where parts of the Act remain uncommenced (reg 4(2))."},"issue_detection":{"absurdities":[],"contradictions":[]},"summary":{"complexity_score":1,"scope_assessment":{"changed":false,"description":"Scope cannot be assessed as the legislative text was not available for review. The page returned only a system error message and an Acknowledgement of Country. No comparison between original intent and enacted provisions is possible."},"complexity_factors":["No legislative text was retrievable — the page returned a 'no longer available' error message rather than actual legislation","Cannot assess true complexity without access to the substantive content","Score of 1 reflects absence of content to analyse, not simplicity of the underlying law"],"plain_english_summary":"The Privacy and Responsible Information Sharing (Privacy) Regulations 2025 likely set rules for how personal information is collected, used, stored and shared in Western Australia under the Privacy and Responsible Information Sharing Act 2024. They would affect government agencies, businesses and individuals who handle personal data, establishing legal limits and safeguards for responsible information sharing and privacy protection."},"kimi_summary":{"content_quality":"ok","complexity_score":1,"scope_assessment":{"changed":false,"description":"The regulations remain tightly scoped to their original purpose: operational details for guideline publication and annual report content. No scope creep detected."},"complexity_factors":["Only 4 regulations total, spanning 3 substantive pages","Single defined term ('annual report') in a one-sentence definition","No cross-references to other legislation beyond the parent Act and Information Commissioner Act","No conditional logic, exceptions, or nested provisions","Straightforward command-and-control style drafting ('must be made publicly available by')"],"plain_english_summary":"**What this legislation does:**\n\nThese regulations are a short, technical companion to Western Australia's new *Privacy and Responsible Information Sharing Act 2024*. They fill in two practical details that the main Act left blank:\n\n1. **How privacy guidelines must be published** — The Information Commissioner (the watchdog who oversees privacy law) must make their official privacy guidelines available both online (on a website) and in hard copy at their main office during business hours.\n\n2. **What goes in annual reports before the Act fully kicks in** — The Information Commissioner has to produce annual reports, but they don't have to include statistics or information about parts of the Privacy Act that haven't started operating yet. For example, if the section dealing with privacy complaints hasn't begun, the annual report for that year can skip complaint numbers.\n\n**Who it affects:**\n- The **Information Commissioner** — tells them how to publish guidelines and what they can leave out of early annual reports.\n- **Government agencies and the public** — ensures privacy guidelines are accessible both online and in person.\n\n**Why it matters:**\nThese are housekeeping rules. They ensure the privacy watchdog can operate transparently (by publishing guidance properly) while avoiding the absurdity of reporting on laws that haven't started yet. It's the nuts-and-bolts machinery that makes the bigger Privacy Act work smoothly."}},"importantCases":[],"_links":{"self":"/api/acts/privacy-and-responsible-information-sharing-privacy-regulations-2025","history":"/api/acts/privacy-and-responsible-information-sharing-privacy-regulations-2025/history","analysis":"/api/acts/privacy-and-responsible-information-sharing-privacy-regulations-2025/analysis","conflicts":"/api/acts/privacy-and-responsible-information-sharing-privacy-regulations-2025/conflicts","importantCases":"/api/acts/privacy-and-responsible-information-sharing-privacy-regulations-2025/important-cases","documents":"/api/acts/privacy-and-responsible-information-sharing-privacy-regulations-2025/documents"}}