Overview
The PRIS Act is a landmark legislation aimed at protecting personal information handled by Western Australian government agencies, departments, and other public sector entities. It introduces 11 Information Privacy Principles (IPPs) dealing with the handling, security, and disposal of personal information. Starting from 1 July 2026, public entities will need to comply with these principles, designate privacy officers, and publish privacy policies. A notifiable information breach scheme requiring public entities to notify affected individuals and the Information Commissioner about breaches will commence on 1 January 2027. The Act empowers the Information Commissioner and a Deputy Commissioner to investigate and enforce compliance.