VICTORIAN DATA SHARING ACT 2017

Table of Provisions

PART 1--PRELIMINARY

• 1 Purposes  
• 2 Commencement  
• 3 Definitions  
• 4 Act binds the Crown  
• 5 Purpose of data sharing  

PART 2--CHIEF DATA OFFICER

• 6 Chief Data Officer  
• 7 Functions and powers of Chief Data Officer  

PART 3--DATA REQUESTS

• 8 Chief Data Officer may request data  
• 9 Data sharing body must respond to data request  
• 10 Designated body may respond to data request  
• 11 Chief Data Officer may request information about data holdings  
• 12 Data sharing body must respond to data holding request  
• 13 Designated body may respond to data holding request  
• 14 Reasons for refusing to provide specified data or information  

PART 4--USE AND DISCLOSURE OF DATA

Division 1--Authorised use and disclosure of identifiable data

• 15 Data sharing body or designated body may disclose identifiable data  
• 16 Chief Data Officer may disclose identifiable data for the purpose of data integration  
• 17 Chief Data Officer or data analytics body may use identifiable data for the purpose of data integration  
• 18 Restrictions on the use of identifiable data for the purpose of data analytics work  
• 19 Restriction on the disclosure of results of data analytics work  

Division 2--Authorised use and disclosure of data to which a secrecy provision applies

• 20 Data sharing body or designated body may disclose data to which a secrecy provision applies  
• 21 Data sharing body or designated body must inform Chief Data Officer of secrecy provision  
• 22 Chief Data Officer may use data to which a secrecy provision applies  
• 23 Chief Data Officer may disclose data to which a secrecy provision applies  

Division 3--Relationship with other Acts

• 24 Handling of data under other Acts  
• 25 Exemption from Freedom of Information Act 1982  

PART 5--OFFENCES

• 26 Unauthorised access to, use of or disclosure of data or information—summary offence  
• 27 Unauthorised access to, use of or disclosure of data or information—indictable offence  

PART 6--REPORTING AND REVIEW

• 28 Report to the Health Complaints Commissioner  
• 29 Report to the Information Commissioner  
• 30 Review of Act after 5 years  

PART 7--OTHER MATTERS

• 31 Delegation  
• 32 Regulations  
• 33 Chief Data Officer may issue policies and guidelines  
ENDNOTES