QLDIn ForceAct
Information Privacy Act 2009
sec.158Compliance notice
Start here
Get a plain-English read of sec.158
Turn the raw legal text into a practical explanation grounded in Information Privacy Act 2009.
### sec.158 Compliance notice
The information commissioner may give a relevant entity a notice (a compliance notice ) if the commissioner is satisfied on reasonable grounds that the entity—
has done an act or engaged in a practice in contravention of a relevant obligation; and
the act or practice—
is a serious or flagrant contravention of the obligation; or
is of a kind that has been done or engaged in by the agency on at least 5 separate occasions within the last 2 years.
A compliance notice may require a relevant entity to take stated action within a stated period for the purpose of ensuring compliance with the obligation.
In this section—
relevant obligation means an obligation to comply with—
the privacy principle requirements; or
for an agency—
chapter 3A , part 2 or 3 ; or
a direction given to the agency under section 61 (2) ; or
section 72 or 73 .
s 158 amd 2023 No. 32 s 41
(sec.158-ssec.1) The information commissioner may give a relevant entity a notice (a compliance notice ) if the commissioner is satisfied on reasonable grounds that the entity— has done an act or engaged in a practice in contravention of a relevant obligation; and the act or practice— is a serious or flagrant contravention of the obligation; or is of a kind that has been done or engaged in by the agency on at least 5 separate occasions within the last 2 years.
(sec.158-ssec.2) A compliance notice may require a relevant entity to take stated action within a stated period for the purpose of ensuring compliance with the obligation.
(sec.158-ssec.3) In this section— relevant obligation means an obligation to comply with— the privacy principle requirements; or for an agency— chapter 3A , part 2 or 3 ; or a direction given to the agency under section 61 (2) ; or section 72 or 73 .
- (a) has done an act or engaged in a practice in contravention of a relevant obligation; and
- (b) the act or practice— (i) is a serious or flagrant contravention of the obligation; or (ii) is of a kind that has been done or engaged in by the agency on at least 5 separate occasions within the last 2 years.
- (i) is a serious or flagrant contravention of the obligation; or
- (ii) is of a kind that has been done or engaged in by the agency on at least 5 separate occasions within the last 2 years.
- (i) is a serious or flagrant contravention of the obligation; or
- (ii) is of a kind that has been done or engaged in by the agency on at least 5 separate occasions within the last 2 years.
- (a) the privacy principle requirements; or
- (b) for an agency— (i) chapter 3A , part 2 or 3 ; or (ii) a direction given to the agency under section 61 (2) ; or (iii) section 72 or 73 .
- (i) chapter 3A , part 2 or 3 ; or
- (ii) a direction given to the agency under section 61 (2) ; or
- (iii) section 72 or 73 .
- (i) chapter 3A , part 2 or 3 ; or
- (ii) a direction given to the agency under section 61 (2) ; or
- (iii) section 72 or 73 .