Australian privacy principles
Definition
The Australian Privacy Principles, often called APPs, are a set of 13 principles under the Privacy Act 1988. They outline how Australian government agencies and many private sector organisations must handle personal information. The APPs cover areas such as collection, storage, use, disclosure, access, and correction of personal data.
For example, an online retailer must have a clear privacy policy, collect only necessary customer information, and provide users with access to their data if requested. These obligations stem directly from the APPs.
Advanced
The APPs apply to most organisations with annual turnover greater than three million dollars, as well as some smaller businesses handling sensitive information such as health records. Each principle addresses a specific area of data handling. APP 1 requires transparency through a clear privacy policy, APP 6 restricts use and disclosure of information, and APP 11 requires organisations to secure personal data from misuse or unauthorised access.
Advanced compliance includes privacy impact assessments, consent management systems, and incident response procedures for data breaches. The Office of the Australian Information Commissioner (OAIC) enforces the APPs and can investigate complaints, require remediation, or apply penalties for serious breaches. With ongoing reforms, the APPs are being strengthened to align with international frameworks such as the GDPR.
Why it matters
Use cases
Metrics
Issues
Example
A health services provider collects patient information for treatment purposes. To comply with the APPs, it ensures the data is securely stored, not shared without consent, and accessible to patients who request it. By following these requirements, the provider avoids legal issues and maintains trust.