The policy details the responsibilities of Department staff in relation to the creation and maintenance of records, whether in paper or electronic format. It highlights the penalties for non-compliance with the State Records Act 2000.

Information and communication technologies are provided by the Department to enable employees and authorised third parties to satisfactorily perform their duties. It is recognised that the associated information, physical equipment, infrastructure and software is at risk of accidental or intentional loss, unauthorised manipulation or unauthorised disclosure. This policy authorises security controls to address those risks.

This policy provides information for employees in relation to their obligations and responsibilities with respect to managing information breaches.