Skip to Content
From Monday 12 September 2020, OVIC's website will no longer be supported in Internet Explorer (IE).
We recommend installing Microsoft Edge, Google Chrome, Safari, Firefox, or Opera to visit the site.

Protective Data Security Plan submission

The Privacy and Data Protection Act 2014 (Vic) requires Victorian public sector (VPS) organisations to:
VPS organisations must submit a PDSP to OVIC every two years, or sooner in the event of significant change. This page outlines more information about PDSP submission.

PDSP submission 2020

Organisations were required to submit a PDSP in 2020 by 31 August 2020. If you have any queries regarding 2020 submissions, please contact security@ovic.vic.gov.au


PDSP form

Single organisation PDSP Reporting

  • Information Security Protective Data Security Plan (PDSP) Single Organisation Form V2.2
  • SHA 256 Checksum: c3c4b449bb59766aea3e4b207b4ac91e860f36b675badf467206f5e377c73847
  • Tuesday 17 March 2020:
    This document was updated from the V2.1 version with javascript amended in Part A and Part D to fix field error, updates to Appendix A reflecting current resources and advice, links in Table of Contents updated, character limit descriptions added to sections containing free-text and minor wording changes under section “Introduction to the Protective Data Security Plan”.

Multiple organisation PDSP Reporting

  • Organisations intending to submit a multi-organisation PDSP on behalf of one or more entities must contact OVIC at security@ovic.vic.gov.au and confirm the list of subsidiary entities they will be reporting with.

PDSP submission options

Submission options vary, depending on the protective marking assigned to the PDSP.

PDSPs with a Protective Marking of OFFICIAL or OFFICIAL: Sensitive

Submission Protocol Option 1: 

Email your PDSP to:
security@ovic.vic.gov.au

Submission Protocol Option 2: 

Post your PDSP in a single opaque envelope with no protective marking labelled on the outside to:
PO Box 24274
Melbourne VIC 3001

Submission Protocol Option 3:

Hand deliver your PDSP to:
121 Exhibition Street
Melbourne VIC 3001

Please note: A prior appointment must be made with a member of the Information Security Unit.


PDSPs with a Protective Marking of PROTECTED

Submission Protocol Option 1: 

Deliver your PDSP by safe-hand (i.e. delivered in person by an authorised messenger) to:
121 Exhibition Street
Melbourne

Please note:

  • A prior appointment must be made with a member of the Information Security Unit
  • Ensure the PDSP is secured using a ‘double barrier’ method. For further information, please seek advice from the Information Security Unit.

Submission Protocol Option 2:

Deliver your PDSP by SCEC-endorsed courier to:
121 Exhibition Street
Melbourne

Please note:

  • A prior appointment must be made with a member of the Information Security Unit
  • Ensure the PDSP is secured using a ‘double barrier’ method. For further information, please seek advice from the Information Security Unit.

PDSPs with a Protective Marking of SECRET

If your PDSP is assessed as containing security classified information as SECRET, please contact us and speak to a member of the Information Security Unit.

Back to top
Back to Top