Under section 157 of the Information Privacy Act 2009 (Qld) (IP Act), the Information Commissioner may, by gazette notice, approve a waiver or modification of a Queensland government relevant entity’s obligation to comply a) with one or more of the privacy principle requirements, or b) with chapter 3A, part 2 or 3 or section 72 of 73 of the IP Act.
A waiver will only be approved where the Information Commissioner is satisfied that the public interest in the agency not complying outweighs the public interest in compliance. Waivers are granted for a specific, limited purpose and are either time-limited or until it is revoked or amended. While a waiver is in force, the agency does not contravene its obligations under the IP Act provided it acts within the terms of the approval.
Current waivers
The table below lists waivers currently approved under section 157 of the IP Act.
| Agency | Privacy principle(s) waived | Purpose | Date approved |
|---|---|---|---|
| Sunshine Coast Hospital and Health Service | QPP3 | Securely transferring digital patient information to third party providers | 4 September 2026 |
How to apply for a waiver
An agency seeking a waiver must apply to the Information Commissioner under section 157(1) of the IP Act, setting out:
- What it seeks to have waived or modified (i.e., one or more of the privacy principle requirements or obligation with chapter 3A, part 2 or 3 or section 72 or 73)
- the purpose and scope of the waiver sought
- why compliance is not practicable in the circumstances
- the public interest considerations favouring non-compliance.
The Information Commissioner publishes a statement of reasons for each approval, and the approval itself is notified by gazette notice.
Last updated: 4 September 2026