The WA Government provides a range of services and programs aimed at improving the quality of life for Western Australians. To deliver these, we collect and hold information about Western Australians.
The new Privacy and Responsible Information Sharing Act 2024 (PRIS Act) aims to better protect your personal information and improve the responsible sharing of government data for public benefit.
What is changing?
From 1 July 2026, the Privacy and Responsible Information Sharing Act 2024 will:
- Set clear principles and standards for how government agencies collect, use, store, and share your personal information.
- Allow agencies to share information only if they follow clear principles for risk, decision-making, and transparency.
- Ensure Aboriginal people are involved when sharing data that affects Aboriginal people and communities.
From 1 January 2027, government agencies will be required to report serious data breaches to the Information Commissioner and to the people affected.
Who will need to comply?
The privacy obligations apply to WA public sector entities, including local governments, non-SES organisations, government trading enterprises and public universities. Ministers and Parliamentary Secretaries are subject to the new laws in their capacity as members of the Executive Government.
Organisations that are party to a government contract may be subject to the privacy obligations if the contract stipulates this. If any changes to your contract are being considered, the contracting agency will reach out to you in advance to discuss them.
Who will oversee these laws?
New leaders will oversee privacy and data sharing.
The Information Commissioner, supported by the Privacy Deputy Commissioner and Information Access Deputy Commissioner, will oversee privacy matters and freedom of information under the Freedom of Information Act 1992. These officials are independent and report directly to Parliament.
The Chief Data Officer will oversee government information sharing under the PRIS Act and sits within the Department of the Premier and Cabinet.
The Information Commissioner and Chief Data Officer commenced on 1 July 2025 to support implementation of the PRIS Act.
When do the changes take place?
1 July 2025 – New officeholders commenced to support preparations for the new laws.
1 July 2026 – Privacy and data sharing laws come into force.
1 January 2027 – Agencies must start reporting all serious data breaches.
Why it matters
The Government knows privacy matters to all Western Australians. The PRIS legislation is the result of extensive consultation on how privacy and information sharing should work in WA.
These changes will give you more control over your personal information and provides greater accountability and transparency about how government handles data.
Want to know more?
Read more about the Office of the Information Commissioner.
Take a look at the resources made available during the consultation period.
Find out what Government heard during our consultation on the most appropriate arrangements for WA.
