Applicability of Part 4 of the Privacy and Data Protection Act 2014 (Vic)
The information provided in this document is designed to assist Victorian public sector agencies and bodies understand if they are subject to Part 4 of the Privacy and Data Protection Act 2014 (Vic) (PDP Act) including the accompanying Victorian Protective Data Security Framework (VPDSF) and Victorian Protective Data Security Standards (VPDSS or ‘the Standards’).
It also provides a summary of which agencies/bodies may be excluded from Part 4 of the PDP Act. If you find that your agency/body is excluded, your organisation may still voluntarily apply the VPDSS. In these cases, Part 4 PDP Act reporting obligations do not apply. Please visit the VPDSF page or the VPDSS page for more information.
If, after reading this document and assessing the applicability of your agency or body, you remain unsure, seek advice from your portfolio department and/or independent legal counsel. OVIC requests that you advise our office of the outcome of your assessment.
This document and assessment tool does not constitute legal advice.
Organisations assessed as currently excluded from Part 4 PDP Act, may still be subject to future regulatory action in the event that the information provided changes or is incorrect, or if there is legislative change to the PDP Act or FOI Act.
