Protective Security Policy Framework (PSPF) Release 2026 0077: 0077 Agreement in place before sharing classified information outside government

Requirement 0077 (Part Three: Information, section 12.2.3 Information Sharing; applies to All entities; dated 01 July 2025; retained from Release 2025): An agreement or arrangement, such as a contract or deed, that establishes handling requirements and protections, is in place before security classified information or resources are disclosed or shared with a person or organisation outside of government, unless the entity is returning or responding to information provided by a person or organisation outside of government, or their authorised representative, which the government entity subsequently classified as OFFICIAL: Sensitive. Handling requirements apply only to non-corporate Commonwealth entities, so a contract, deed or agreement is needed before disclosure, except when returning or responding to information supplied by that person or organisation which the entity classified OFFICIAL: Sensitive; OFFICIAL may be shared without an agreement.