Privacy

Privacy management

The Office takes the privacy of our clients, stakeholders and staff seriously and will protect privacy in accordance with the Privacy and Personal Information Protection Act 1998 (NSW) (PPIP Act) and the Health Records and Information Privacy Act 2002 (NSW) (HRIP Act).

The Office of Sport is committed to ensuring that personal information is:

• only collected where directly required for an activity or service provided, and when doing so the purpose, intended recipients and whether it is required by law or is voluntary is clearly stated
• only collected directly from the individual to whom the information relates, unless the individual has authorised the collection from someone else or the information relates to a person under the age of 16 years and has been provided by their parent or guardian
• protected with necessary safeguards against loss, unauthorised access, misuse, modification or disclosure
• not kept for longer than necessary and is disposed of securely
• accessible on request from the individual on whom the information is held.

For more information please read our Privacy Management Plan. (PDF, 1.52 MB)

Collection Notices

How we use and store your information

*Content required

Your rights

Privacy and Personal Information Protection Act 1998 No 133

14 Access to personal information held by agencies

A public sector agency that holds personal information must, at the request of the individual to whom the information relates and without excessive delay or expense, provide the individual with access to the information. 

Updating and accessing your private information

Privacy and Personal Information Protection Act 1998 No 133 

15 Alteration of personal information

1. A public sector agency that holds personal information must, at the request of the individual to whom the information relates, make appropriate amendments (whether by way of corrections, deletions or additions) to ensure that the personal information—
   1. is accurate, and
   2. having regard to the purpose for which the information was collected (or is to be used) and to any purpose that is directly related to that purpose, is relevant, up to date, complete and not misleading.

Informal requests

If you need to update or correct your personal information, please contact the staff member or team responsible for managing it. You can also use our general contact details.

In some cases, you may be able to update your information yourself through our online booking system. This depends on the type of information and may require you to confirm your identity.

You don’t need to put your request in writing. If needed, we’ll ask you to verify your identity or submit a formal application.

We aim to respond to informal requests within 5 working days. If it’s likely to take longer, we’ll let you know how long it might take.

Formal requests

You have the right to make a formal application to access or change your personal or health information. You don’t need to make an informal request first. You can apply formally at any time, even if you’ve already asked informally.

To make a formal application, contact the Office of Sport Privacy Officer.

Your application should include:

• your name and contact details (postal address, phone number and email if you have one)
• whether your request is about personal information (under PPIPA) or health information (under HRIPA)
• what information you want to access or change
• how you want to access or change it

We aim to respond in writing within 20 working days. If it’s likely to take longer, we’ll let you know.

Data breach notifications

Privacy complaints

If you believe the Office of Sport has mishandled your personal or health information, you have the right to raise your concerns.

Try informal resolution first

We encourage you to contact us to discuss your concerns before making a formal complaint. 

Request an internal review

If you're not satisfied with the outcome of informal discussions, you can request an internal review under the PPIP Act.

You must submit your request within 6 months of becoming aware of the issue. This timeframe applies even if you’re trying to resolve the matter informally.

Only the person affected by the alleged breach, or their authorised representative, can request an internal review.

To request an internal review:

• complete the Internal Review Application Form.
• send it to the Office of Sport’s Privacy Officer.

The internal review will be conducted by the Privacy Officer, unless the complaint is about them. In that case, another qualified staff member will be appointed.

We aim to:

• acknowledge your application within 7 calendar days.
• complete the review within 60 calendar days.
• notify you in writing of the outcome within 14 calendar days of the decision.

If you don’t receive a response within 60 days, or you’re not satisfied with the outcome, you can request an external review.

If you prefer, you can make a complaint directly to the Information and Privacy Commission NSW.

Seek an external review

You can apply to the NSW Civil and Administrative Tribunal (NCAT) for an external review if:

• you’re unhappy with the outcome of the internal review, or
• you haven’t received a response within 60 calendar days.

You must apply to NCAT within 28 calendar days of receiving the internal review decision. 

For more information or to apply, visit the NCAT website.

Contact us about privacy

Email: privacy@sport.nsw.gov.au
Phone: 13 13 02
Post: Locked Bag 1422, SILVERWATER NSW 2128
Address: Level 3, 6B Figtree Drive, SYDNEY OLYMPIC PARK NSW 2127