2025/11 - DA Incident Overview

Public Notification Register - Eligible Data Breach (PPIP Act)

This page provides details of the public notification of an eligible data breach under the Privacy and Personal Information Protection Act 1988 (NSW) (PPIP Act). A public notification is provided where we are unable to notify, or it is not reasonably practicable to notify, some or all affected individuals.

Description of incident

A development application was published without the appropriate redaction of personal information.

Date of incident

24 November 2025

How the incident occurred

Human Error - The incident occurred as a result of an internal process oversight.

Action taken in response

All publicly available documents were reviewed for personal information, and any documents identified as containing personal information were removed from the development application portal. The Information and Privacy Commission (IPC) and Cyber Security NSW (CSNSW) were immediately notified.

Information involved

Personal and medical information related to people associated with the development application.

Steps individuals should take in response

Some of the steps you may consider taking to protect yourself include: 

Review advice from the NSW Information and Privacy Commission about how to reduce your risk of harm when you are notified about a data breach (see Fact Sheet).

Remaining vigilant for scams, which are the most common risks associated with any unauthorised access to information.

Visit the NSW Government’s ID Support website and complete the personal information breach checklist.

Be aware of contact from people you do not know. As a precaution, confirm who you are speaking to when making and taking phone calls or who you are dealing with by mail or email.

The type of action you take will depend on your personal circumstances and we encourage you to access the above resources if you have any concerns. 

Camden Council