13Coordination with privacy and other similar authorities

13 Coordination with privacy and other similar authorities

13 Coordination with privacy and other similar authorities

(1) The Secretary may exercise an identity protection function to coordinate with the following authorities (partner authorities) in response to a personal data compromise—

(a) the Privacy Commissioner,

(b) an authority with functions to protect the privacy of individuals under an Act or law of another jurisdiction within Australia,

(c) an authority of another jurisdiction within Australia with functions that are the same as or similar to the identity protection functions,

(d) an authority of the Commonwealth, prescribed by the regulations, with functions under an Act of the Commonwealth to manage cyber security incidents.

(2) The Secretary, in exercising an identity protection function, must act consistently with guidance and advice given by the following in relation to a notifiable data breach—

(a) the Privacy Commissioner,

(b) an authority, prescribed by the regulations, with functions under an Act of the Commonwealth to protect the privacy of individuals.

(3) The Secretary must not act for or on behalf of a person for the purpose of discharging the person’s duties in relation to a notifiable data breach.

(4) In this section—

notifiable data breach means a breach required to be notified under an Act or law of the State or another jurisdiction prescribed by the regulations.