Privacy and Data Protection Act 2014

The Information Commissioner has the following functions in relation to protective data security and law enforcement data security—

to issue protective data security standards and law enforcement data security standards;

to develop the Victorian protective data security framework;

to issue guidelines and other materials in relation to protective data security standards;

to undertake reviews of any matters relating to protective data security, as requested by the Minister;

to undertake reviews of any matters relating to law enforcement data security and crime statistics data security, as requested by the Minister;

to make reports or recommendations in relation to data security as provided for by section 111.

The Information Commissioner and the Privacy and Data Protection Deputy Commissioner each have the following functions in relation to protective data security and law enforcement data security—

to promote the uptake of protective data security standards by the public sector;

to conduct monitoring and assurance activities, including audits, to ascertain compliance with data security standards;

to refer findings of monitoring and assurance activities, including audits, to an appropriate person or body for further action;

to undertake research in relation to matters relating to protective data security and law enforcement data security relevant to the public sector, particularly relating to information and communications technology;

to retain copies of protective data security plans.