Australian Privacy Principles

Australian Privacy Principles

1. 1: Open and transparent management of personal information

   • Having a clear, up-to-date APP privacy policy

2. 2: Anonymity and pseudonymity

   • Provide option to not identify themselves

3. 3: Collection of solicitied personal information

   • Explicit request and only when necessary and relevant

4. Dealing with unsolicited personal information

   • If it's not a Commonwealth record, information must be destoryed or de-identified

5. 5: Notification of the collection of personal information

   • Must take reasonable steps to notify the individual to ensure that persona is aware

6. 6: Use or disclosure of personal information

   • Only use for primary purpose (unless exemption applies)

7. 7: Direct marketing

   • Can only use direct marketing if certain conditions apply (e.g., consent, expected to be used in marketing, aware of opt out options)

8. 8: Cross-border disclosure of personal information

   • Must ensure the oversea recipient does not breach APPs

9. 9: Adoption, use, or disclosure of government-related identifiers

   • Must not use the identifiers unless exemption applies, then must be handled in accordance to APPs

10. 10: Quality of personal information

    • Accurate, up-to-date, complete, use for primary purpose

11. 11: Secruity of personal information

    • Protect personal information from misuses, interference and loss, unauthorised access and modification, or disclosure. Must destory or de-identify under certain circumstsances

12. 12: Access of personal information

    • Individual can access their information, reason must be given if refused and within APPs

13. 13: Correction of personal information

    • Must take reasonable steps to correct inaccurate information and individual can request to correct information