diff --git a/java/ql/src/change-notes/2022-09-29-contentprovider-incomplete-permissions.md b/java/ql/src/change-notes/2022-09-29-contentprovider-incomplete-permissions.md
new file mode 100644
index 00000000000..bdbd092f037
--- /dev/null
+++ b/java/ql/src/change-notes/2022-09-29-contentprovider-incomplete-permissions.md
@@ -0,0 +1,4 @@
+---
+category: newQuery
+---
+* Added a new query, `java/android/incomplete-provider-permissions`, to detect if an Android ContentProvider is not protected with a correct set of permissions.