The Administrative Arrangements Order of 3 August 2023 transferred responsibility for protective security policy, including the Protective Security Policy Framework, to the Department of Home Affairs from the Attorney-General’s Department. These Machinery of Government (MOG) changes commenced on 4 August 2023.

Policy amendment – sensitive and classified information

Protective Security Policy Framework (PSPF) Policy 8: Sensitive and classified information has been amended to enhance guidance on aggregated and integrated information.

The changes strengthen guidance on the application of existing PSPF requirements to ensure the appropriate classification and management of aggregated and integrated data holdings. This new guidance aims to support Non-corporate Commonwealth Entities to appropriately mitigate the uniquely compounded risks posed by the storage of cumulative data.