SafeWork NSW has implemented strong privacy measures for managing personal and health information from its online enquiry and feedback systems. This initiative comes after its transition to an independent regulator on 1 July 2025, under the Work Health and Safety Act of 2011. The agency operates under two laws: the Privacy and Personal Information Protection Act 1998 and the Health Records and Information Privacy Act 2002. It also maintains a shared data infrastructure with the Department of Customer Service for corporate functions. This structure significantly impacts data governance and cloud storage in the public sector.
SafeWork NSW collects 14 unique types of information through its Customer Service Centre Enquiry Form and Customer Feedback Form. This includes names, addresses, workplace locations, business information, work health and safety concerns, health and injury treatment details, and documents provided by stakeholders.
The agency manages this information using regulated systems that protect against unauthorised access, following the provisions of the PPIP Act, the HRIP Act, and the WHS Act. The collection framework operates on voluntary submission, enabling individuals to decide how much information they want to share. However, limiting submissions may impact the services and guidance that SafeWork NSW can offer.
SafeWork NSW actively incorporates artificial intelligence technologies into its data processing operations. The agency’s privacy notice states that SafeWork NSW employs “artificial intelligence (AI) technologies to assist in processing, analysing, or responding to the information you provide,” ensuring that “all use of AI is conducted in accordance with applicable privacy laws and data protection standards.”
This represents a significant step forward for public sector agencies as they enhance operational efficiency through AI while strictly following vital privacy regulations, particularly regarding health information protected by the HRIP Act’s stringent safeguards.
The agency set up a detailed system for sharing data that covers eight main areas: handling enquiries, managing stakeholders, supporting ministers, referring to other regulators, managing service quality, responding to emergencies, processing with AI, and coordinating corporate services. SafeWork NSW and the Department of Customer Service formalise an agreement that facilitates information flow.
DCS provides corporate service functions and supports business operations by delivering software solutions and managing data storage for SafeWork NSW. This innovative approach addresses data silos by integrating information systematically, enabling the agency to merge submissions from various channels. Internal collaboration and coordination among teams throughout SafeWork NSW improve significantly.
Check out: “Enhancing digital government data privacy standards”
SafeWork NSW established several layers of cybersecurity by utilising information systems certified under ISO 27001, as provided by the Department of Customer Service Information Services branch. The Privacy Management Plan details how we implement daily server backups and establish secure networks. Individual logins are necessary for these networks, and access controls restrict database entry to staff members who need information for their job responsibilities.
Physical security protocols include key card access to office spaces, locked bins for destroying sensitive documents, and secure storage facilities for archived materials that comply with the State Records Act 1998. They dispose of data according to regulated timelines, ensuring that they keep information only for the necessary duration for legitimate purposes.
On 28 November 2023, SafeWork NSW will implement the Mandatory Notification of Data Breach scheme. Any unauthorised access to or disclosure of personal information that could likely cause serious harm to an individual must be reported to the NSW Privacy Commissioner and the affected individuals within a 30-day timeframe.
The agency’s Privacy Management Plan requires it to “take steps to immediately contain the breach and prevent the personal information from being further compromised” according to established protocols.
Individuals can access and amend their personal information. Informal requests are handled in five working days, while formal requests are finalised in 20 working days. The agency provides free access and allows internal review applications for privacy issues within six months. You can still access an external review through the NSW Civil and Administrative Tribunal, with potential damages up to $40,000.
SafeWork NSW works with various government bodies under designated legislative provisions. Section 271A of the Work Health and Safety Act (2011) enables SafeWork NSW to exchange information with the Department of Industry, Skills, and Regional Development. Section 243 of the Workplace Injury Management and Workers Compensation Act 1998 also lets the State Insurance Regulatory Authority share information. The frameworks demonstrate effective strategies for data collaboration, ensuring that privacy safeguards protect sensitive health and workplace safety information across interconnected government systems.
Public sector agencies demonstrate their ability to seamlessly incorporate artificial intelligence technologies into the established privacy frameworks of the PPIP and HRIP Acts while upholding data protection standards across interconnected government systems. SafeWork NSW established a model that encourages voluntary information submission.
It supports this with ISO 27001 certified infrastructure and requires breach notification within 30 days. This approach provides a practical framework for agencies that manage sensitive health and workplace data. Collaboration with the Department of Customer Service effectively addresses data separation for cloud storage and business functions while ensuring that people can access corrections and internal reviews within the set time limits.
Public Spectrum is the first knowledge-sharing platform in Australia to embrace the entire public sector. This website is a platform where you can connect, collaborate, empower, inspire, and upskill with public sector professionals.
Latest
Popular