New South Wales councils work within the Local Government Act 1993 (NSW), and the tendering rule in s 55 applies above the threshold set by the Local Government (General) Regulation 2021 whenever the arrangement is really a purchase of services. An MoU cannot be used to sidestep that obligation. Councils are also bound by the Privacy and Personal Information Protection Act 1998 (NSW), and the Government Information (Public Access) Act 2009 (NSW) can require disclosure of contracts with private sector partners. Community partners should assume that anything they put in writing to a council may become public.
Collaborations with councils in Victoria run into a different set of rules. Councils must adopt and comply with a procurement policy under ss 108 and 109 of the Local Government Act 2020 (Vic), and they are public authorities under s 38 of the Charter of Human Rights and Responsibilities Act 2006 (Vic), so joint programs must be delivered compatibly with Charter rights. Personal information held by a council falls under the Privacy and Data Protection Act 2014 (Vic). Victoria never adopted the model WHS laws, so shared-site safety duties come from the Occupational Health and Safety Act 2004 (Vic).
Data obligations have tightened most noticeably in Queensland. The Information Privacy and Other Legislation Amendment Act 2023 (Qld) introduced the Queensland Privacy Principles from 1 July 2025, and the mandatory data breach notification scheme reached local government on 1 July 2026. Councils contract under chapter 6 of the Local Government Regulation 2012 (Qld) and must act compatibly with human rights under s 58 of the Human Rights Act 2019 (Qld). A data clause written for a Queensland council should name a breach contact and a response time on both sides.
Western Australia was long the outlier, with no privacy statute for its public sector. That changed when most of the Privacy and Responsible Information Sharing Act 2024 (WA) commenced on 1 July 2026, covering local governments and some contracted service providers. A charity or business delivering services for a WA council can therefore carry privacy obligations of its own, with the notifiable breach scheme commencing on 1 January 2027. Tendering rules under s 3.57 of the Local Government Act 1995 (WA) operate much like the NSW rule.