Court AI practice notes
Privacy and FOI and AI: New South Wales
NSW Information and Privacy Commission, New South Wales.
About this rule
- Issuer
- NSW Information and Privacy Commission
- Type
- Government guidance
- Date basis
- regime summary checked 10 Oct 2026
- Jurisdiction
- New South Wales
Summary
Privacy and Personal Information Protection Act 1998 (PPIP Act); Health Records and Information Privacy Act 2002; Mandatory Notification of Data Breach scheme (from 28 Nov 2023). FOI: Government Information (Public Access) Act 2009 (GIPA Act). Covers NSW public-sector agencies (private firms fall under the Cth Act).
The IPC has published a guide to the privacy risks of generative AI tools and a guide to privacy impact assessments for AI systems. Prompts and outputs held by agencies may be "government information" under GIPA. Checked 2026-10-10.
Points recorded from the source
- Privacy and Personal Information Protection Act 1998 (PPIP Act); Health Records and Information Privacy Act 2002; Mandatory Notification of Data Breach scheme (from 28 Nov 2023)
- FOI: Government Information (Public Access) Act 2009 (GIPA Act)
- IPC: Privacy risks of generative AI tools
- IPC: PIAs on AI systems
Verify note
Statute names from official sources; how they apply to AI is a summary to verify.
Source
Read the NSW Information and Privacy Commission source: Privacy and FOI and AI: New South Wales
See it in the AI rules tracker by Australian court and bodyNew South Wales page