Law: Information Act 2002 (the Act). Please note that the Act applies to public bodies. Private organisations are subject to the federal Privacy Act 1988.

Regulator: Office of the Information Commissioner Northern Territory (OICNT)

Summary: There is no separate, territorial level private sector data protection law in the Northern Territory. The Act regulates the processing of personal information in the public sector and is overseen by the OICNT. While the guidance released by the OICNT on the Act is extensive, it is principally aimed at the public sector. The OICNT has produced guidance on cloud computing and Privacy Impact Assessments. The Health and Community Services Complaints Commission (HCSCC) administers complaints related to the handling of health information in the Northern Territory.