What is Privacy Act (Australia)?
Australia's Privacy Act 1988 regulates the handling of personal information by Australian Government agencies and private sector organizations, built around thirteen Australian Privacy Principles.
The Privacy Act 1988 is Australia's principal privacy law, governing the handling of personal information by Australian Government agencies, private sector organizations with annual turnover greater than 3 million AUD, and certain other organizations. The Act was significantly amended in 2014 to introduce the Australian Privacy Principles (APPs), which replaced the earlier National Privacy Principles and Information Privacy Principles.
The thirteen APPs cover the entire lifecycle of personal information: open and transparent management, anonymity and pseudonymity, collection of solicited personal information, dealing with unsolicited personal information, notification of collection, use or disclosure, direct marketing, cross-border disclosure, adoption use or disclosure of government identifiers, quality of personal information, security of personal information, access to personal information, and correction of personal information. "Sensitive information" including health information, biometric data, and racial or ethnic origin receives heightened protection.
The Office of the Australian Information Commissioner (OAIC) oversees compliance and can accept enforceable undertakings, make determinations, and seek civil penalties through the courts. The Australian Government has been pursuing significant reforms to the Privacy Act based on the 2022 Privacy Act Review report, with proposals including a direct right of action for individuals, a children's privacy code, and enhanced enforcement powers. IQWorks helps organizations comply with the APPs through ComplyIQ for regulatory tracking and ClassifyIQ for identifying sensitive information categories.
How IQWorks Helps
Related Terms
GDPR (General Data Protection Regulation)
The General Data Protection Regulation is the European Union's comprehensive data protection law that sets strict rules for how organizations collect, store, and process personal data of EU residents, with fines up to 4% of annual global turnover.
Sensitive Personal Data
Sensitive personal data includes special categories such as health information, biometric data, racial or ethnic origin, religious beliefs, and sexual orientation that require enhanced protection.
Cross-Border Data Transfer
Cross-border data transfer refers to the movement of personal data from one country or jurisdiction to another, which is regulated by data protection laws that impose specific requirements to ensure adequate protection.
Supervisory Authority
A supervisory authority is an independent public body established by a country to monitor and enforce compliance with data protection laws, such as the ICO in the UK or the CNIL in France.