41Notification of corresponding data breaches—accredited State or Territory entities that are not APP entities

41 Notification of corresponding data breaches—accredited State or Territory entities that are not APP entities

(1) This section applies to an accredited entity if: (a) the entity is not an APP entity; and (b) the entity is a department or authority of a State or Territory; and (c) the entity is required under a law of the State or Territory to give a statement (however described) that corresponds to section 26WK of the Privacy Act 1988 to another entity (the notified entity); and (d) the statement relates to the accredited services of the entity. (2) The entity must also give a copy of the statement to the Digital ID Regulator and the Information Commissioner at the same time as the statement is given to the notified entity.