04/22/23 1

Surveying the privacy landscape

Dr Anthony Bendall

Acting Victorian Privacy Commissioner

“the right to be let alone...”

Human Right

New technologies

Privacy law

• Information Privacy Act 2000 (Vic)– Information Privacy Principles (IPPs)

• Privacy Act 1988 (Cth)– National Privacy Principles (NPPs)

Who does it apply to?

• Planning authorities (IPA) – Local councils– Departments

• Contractors (IPA)– Contracted Service Providers (CSPs)– Agents

• Private sector organisations (PA)– Annual turnover more than $3 m

Personal information

“...recorded in any form and whether true or not, about an individual whose identity is apparent, or can reasonably be ascertained from the information or opinion...”

IPPs/NPPs1. Collection2. Use and disclosure3. Data Quality4. Data Security5. Openness6. Access and Correction7. Unique Identifiers8. Anonymity9. Transborder Data Flows10. Sensitive Information

IPP 1 - Collection

• Necessary

• Lawful

• Fair

• Not unreasonably intrusive

• NOTICE

IPP1.3 - Notice

• Reasonable steps• Timely• Who’s collecting and how to contact• Access• Purposes for collection • Usual disclosures• Any law requiring collection • Consequences if not provided

IPP 2 - Use and disclosure

• Primary purpose• Secondary related purpose that is

reasonably expected• Public interest

IPP 3 – Data Quality

• Reasonable steps• Accurate• Complete• Up to date

IPP 6 – Access and correction

• FOI• IPP 6

The cloud

Conclusion

• Further information:– www.privacy.vic.gov.au– 1300 666 444– enquiries@privacy.vic.gov.au