Skip to Content

Agency reporting obligations

Reporting obligations

Protective Data Security Plan (PDSP)

A PDSP must be given to OVIC at least every two years, or upon significant change.

If your organisation has experienced significant change, please contact the Information Security Unit by emailing security@ovic.vic.gov.au, or by contacting our enquiries team.

To find out more refer to PDSP Submissions page


Attestation

Organisations must annually attest to the progress of activities identified in its PDSP to OVIC.

To find out more refer to PDSP Submissions page.


Incident notifications

Organisations must notify OVIC of incidents that have an adverse impact on the confidentiality, integrity or availability of public sector information with a business impact level (BIL) of 2 (limited) or higher.

To find out more refer to Incident Notifications page.

Back to top

Subscribe To Our Newsletter

Join our mailing list to receive the latest news and updates from our team.

I'm interested in

You have Successfully Subscribed!