The Information Privacy and Other Legislation Amendment Act 2023 (IPOLA Act) introduces significant reforms to Queensland’s privacy laws, impacting government agencies (state Ministers, state departments, local governments, and public authorities) and their contracted service providers. Most changes are set to commence on 1 July 2025, with some provisions for local governments delayed until 1 July 2026.

Key changes affecting businesses engaged with government agencies

  1. Unified Privacy Principles: The IPOLA Act replaces the existing Information Privacy Principles (IPPs) and National Privacy Principles (NPPs) with a single set of Queensland Privacy Principles (QPPs), aligning more closely with the Australian Privacy Principles under the Commonwealth Privacy Act 1988.
  2. Mandatory Data Breach Notification: Agencies and their service providers must notify the Information Commissioner and affected individuals of eligible data breaches—those likely to result in serious harm—within 30 days of becoming aware of the breach.
  3. Privacy Complaint Handling: Agencies are required to respond to privacy complaints within 45 business days. If unresolved, complainants may escalate the matter to the Information Commissioner.

Action steps for businesses engaged with government agencies

  • Review and Update Privacy Policies: Ensure your privacy policies and collection notices comply with the new QPPs.
  • Develop Data Breach Response Plans: Implement procedures to detect, assess, and respond to data breaches promptly.
  • Train Staff: Educate employees on new privacy obligations and data handling practices.
  • Audit Information Handling Practices: Assess current practices for collecting, storing, and disclosing personal information to identify areas needing improvement.

Businesses engaged with government agencies should obtain legal advice for their specific circumstances and take proactive steps to ensure compliance. For more information refer to the Office of the Information Commissioner Queensland’s resources here.

Please contact QRMC for more information or assistance.