Skip to Content

PDSP submission

The Privacy and Data Protection Act 2014 (Vic) requires Victorian public sector organisations to:
VPS organisations must submit a PDSP to OVIC every two years, or sooner in the event of significant change. This page outlines more information about PDSP submission.

 

PDSP submission 2020

Submissions open 1 July 2020 and close 31 August 2020.

All agencies and bodies must submit a copy of their PDSP including attestation.

Reporting is due by 31 August 2020, or upon significant organisational change.

COVID-19

Victorian public sector organisations must continue to manage information security risks during the spread of coronavirus (COVID-19). Read our information sheet addressing frequently asked questions on information security risks and obligations and COVID-19.

PDSP form

Single organisation PDSP Reporting

  • Information Security Protective Data Security Plan (PDSP) Single Organisation Form V2.2
  • SHA 256 Checksum: c3c4b449bb59766aea3e4b207b4ac91e860f36b675badf467206f5e377c73847
  • Tuesday 17 March 2020:
    This document was updated from the V2.1 version with javascript amended in Part A and Part D to fix field error, updates to Appendix A reflecting current resources and advice, links in Table of Contents updated, character limit descriptions added to sections containing free-text and minor wording changes under section “Introduction to the Protective Data Security Plan”.

Multiple organisation PDSP Reporting

  • Organisations intending to submit a multi-organisation PDSP on behalf of one or more entities must contact OVIC and confirm the list of subsidiary entities they will be reporting with.
  • Upon request, OVIC will provide a bespoke multiple organisation PDSP template.
  • Read our information sheet on multiple organisation PDSP reporting in Word or PDF

PDSP submission options

Submission options vary, depending on the protective marking assigned to the PDSP.

PDSPs with a Protective Marking of OFFICIAL or OFFICIAL: Sensitive

Option

Submission protocol

1

Email your PDSP to:

security@ovic.vic.gov.au

2

Post your PDSP in a single opaque envelope with no protective marking labelled on the outside to:

PO Box 24274
Melbourne VIC 3001

3

Hand deliver your PDSP to:

121 Exhibition Street
Melbourne VIC 3001

Please note: A prior appointment must be made with a member of the Information Security Unit.

PDSPs with a protective marking of PROTECTED
Option

Submission protocol

1

Deliver your PDSP by safe-hand (i.e. delivered in person by an authorised messenger) to:

121 Exhibition Street
Melbourne

Please note:

·       A prior appointment must be made with a member of the Information Security Unit

·       Ensure the PDSP is secured using a ‘double barrier’ method. For further information, please seek advice from the Information Security Unit.

2

Deliver your PDSP by SCEC-endorsed courier to:

121 Exhibition Street
Melbourne

Please note:

·       A prior appointment must be made with a member of the Information Security Unit

·       Ensure the PDSP is secured using a ‘double barrier’ method. For further information, please seek advice from the Information Security Unit.

 

PDSPs with a protective marking of SECRET

If your PDSP is assessed as containing security classified information as SECRET, please contact us and speak to a member of the Information Security Unit.

Back to top