The Privacy and Data Protection Act 2014 (PDPA) replaced the Information Privacy Act 2000 and the Commissioner for Law Enforcement Security Act 2005. This Act merged the functions of the Privacy Commissioner and the Commissioner for Law Enforcement Data Security into a single Privacy and Data Protection Commissioner. The PDPA retained the 10 Information Privacy Principles (IPPs) from the previous Victorian Privacy legislation. The PDPA applies to public sector organisations and to contracted service providers (including community service organisations providing out-of-home care in Victoria).