NSWIn ForceAct
Privacy and Personal Information Protection Act 1998
59ZIPrivacy Commissioner may make guidelines
Start here
Get a plain-English read of 59ZI
Turn the raw legal text into a practical explanation grounded in Privacy and Personal Information Protection Act 1998.
#### 59ZI Privacy Commissioner may make guidelines
59ZI Privacy Commissioner may make guidelines
> > (1) The Privacy Commissioner may make guidelines for the purpose of exercising the Privacy Commissioner’s functions under this Part.
>
> > (2) Without limiting subsection (1), the Privacy Commissioner may make guidelines about the following—
> >
> > > (a) whether access, disclosure or loss that occurs as a result of a data breach would be likely, or would not be likely, to result in serious harm to an individual,
> >
> > > (b) deciding whether to exempt a public sector agency for the following—
> > >
> > > > (i) reasons relating to serious risk of harm to health or safety,
> > >
> > > > (ii) cyber security reasons.
>
> > (3) The Privacy Commissioner must consult with the Minister responsible for this Act before publishing guidelines.
>
> > (4) Guidelines must be published on the Information and Privacy Commission’s website.
>
> **s 59ZI:** Ins 2022 No 74, Sch 1\[11\].