Privacy and Data Protection Act 2014

The Information Commissioner may in writing authorise the Privacy and Data Protection Deputy Commissioner to perform any of the following functions of the Information Commissioner, as specified in the authorisation—

to undertake activities in relation to the development or approval of a specified code of practice;

to develop and publish specified model terms capable of being adopted by an organisation in a contract or arrangement with a recipient of personal information being transferred by the organisation outside Victoria;

to make a specified public interest determination or a specified temporary public interest determination in accordance with Division 5 of Part 3;

to approve a specified information usage arrangement;

to issue a specified protective data security standard or a specified law enforcement data standard;

to review or amend the Victorian protective data security framework, as specified;

to issue guidelines and other materials in relation to a specified protective data security standard.

The Information Commissioner may at any time in writing revoke an authorisation under this section, and on that revocation may continue and complete any action commenced under the authorisation by the Privacy and Data Protection Deputy Commissioner.