PRIS Act
The Western Australian Privacy and Responsible Information Sharing Act 2024, which establishes a WA privacy framework for State public sector agencies.
In detail
The Privacy and Responsible Information Sharing Act 2024 (PRIS Act) was passed by the Western Australian Parliament and commences in stages from 2025. It creates a statutory privacy framework for WA State public sector agencies, introduces a WA Information Commissioner, and establishes rules for responsible information sharing between agencies and with private entities. The PRIS Act sits alongside the Commonwealth Privacy Act 1988 (which applies to private sector businesses) and applies specifically to State agencies including WA Health, TAFE, local government bodies and State-owned corporations. The Act includes privacy principles based on, but distinct from, the Commonwealth APPs.
Why it matters for Australian business
WA-based businesses that contract with State government agencies or handle data on their behalf will encounter PRIS Act obligations from their government clients. Healthcare providers operating under WA Health contracts, technology vendors servicing WA local governments and NFPs receiving State funding all need to understand how the PRIS Act interacts with their existing Commonwealth Privacy Act obligations. We include PRIS Act considerations in Data and Privacy Advisory engagements for Perth-based clients.