Data Policies
The following is an overview of relevant policies that affect data practices
- Data and Information Custodianship Policy
- NSW Cyber Security Policy
- NSW Government Open data policy
- Smart places data protection policy
Data and Information Custodianship Policy
The NSW Data & Information Custodianship Policy defines a set of principles for the management and maintenance of the State’s core data and information assets. These principles align with national and international best practice, and industry standards and practices.
Download the NSW Data and Information Custodianship Policy
NSW Cyber Security Policy
The NSW Cyber Security Policy outlines the mandatory requirements to which all NSW government agencies must adhere to ensure cyber security risks to their information and systems are managed.
Read NSW Cyber Security Policy for more information
NSW Government Open data policy
The NSW Government Open Data Policy supports agencies to proactively release high quality usable data.
- Download NSW Government Open data policy
Smart places data protection policy
The Smart places data protection policy makes it easier for smart places developers, managers and place owners to follow lawful and best practice data protection.
Download Smart places data protection policy
Key NSW data-related legislation
The following is an overview of key data legislation that impacts the whole NSW Government sector:

The Data Sharing Act enables the sharing of data between government agencies and data sharing with the NSW Data Analytics Centre (DAC). It aims to:
- Encourage and facilitate data sharing
- Outline safeguards for sharing data
- State that data sharing must be legally compliant
- Ensure data involving personal information is protected
- Allow the responsible Minister to direct agencies to provide data to the DAC in certain circumstances.

The GIPA Act facilitates public access to NSW Government information. It aims to:
- Authorise and encourage the release of information by NSW Government agencies
- Give the public the right to request access to government information
- Ensure government information is only restricted when there is an overriding public interest against disclosing the information.

The HRIP Act protects health records and information. It aims to:
- Promote the fair and responsible handling of citizen's health information
- Enable individuals to gain access to their health information
- Enable individuals to submit a complaint regarding their health information privacy
- Protect the privacy of individuals in the health system..

The PPIP Act provides for the protection of personal information, and the protection of the privacy of individuals generally. All personal information that is made, kept or collected by government organisations must be created and managed in accordance with the Information Protection Principles under the PPIP Act. It aims to:
- Protect personal information
- Ensure government organisations manage and protect personal information
- Enable the investigation into breaches of privacy.

The State Records Act governs the creation, management and protection of records of NSW government agencies and allows for public access to records that are at least 20 years old. Government organisations should consider requirements from:
- Standard on records management which establishes key requirements for effective information management, including data management
- Retention and disposal authorities which identify records required as State archives and provide approval for destruction of records, including data, after minimum retention requirements have been met.
NSW legislation resource
Below is a tool to suppport understanding of legislation across the whole NSW Government sector:

Developed by the NSW Data Analytics Centre, the NSW Government Legislation Twin shows visually the interconnections between pieces of legislation to support policy work.
Guidelines and frameworks

The NSW Government Information Classification, Labelling and Handling Guidelines have been developed to help agencies correctly assess the sensitivity or security of their information, so that the information can be labelled, handled, stored and disposed of correctly.

The Open data publishing guidelines have been developed to help NSW Government agency Data Custodians publish open data.
- Download the Open data publishing guidelines

The Infrastructure data management framework is a set of guidelines, procedures and standard approaches to support consistent management of infrastructure data across the NSW Government sector.
- Download the Infrastructure Data Management Framework

The Open data publishing guidelines have been developed to help NSW Government agency Data Custodians publish open data.
- Download the Open data publishing guidelines