The specific directive has not been published yet. We have a draft that departments can consult and comment on. However, we use existing legislation. When we need to determine what constitutes confidential data, the Privacy Act applies. The same applies for other situations.
On May 5th, 2014. See this statement in context.