Sources
Australian Privacy Principles (APPs)
Law. Placed at Australian locations, when you say the Privacy Act applies. Read 30 Sep 2026; 4 provisions cited by the planner.
APP 5Notification of the collection of personal information Notify individuals of the collection of their personal information and the matters set out in APP 5.
What a reviewer asks to see: Collection notices (APP 5 matters); Timing of notification
Where monitoring plans usually fall short: No collection notice; Notice missing APP 5 matters
Source: Australian Privacy Principles (APPs), read 30 Sep 2026
APP 1Open and transparent management of personal information Manage personal information in an open and transparent way, including having a clearly expressed and up-to-date APP privacy policy.
What a reviewer asks to see: Published APP privacy policy; Evidence of open data-handling practices; Policy review records
Where monitoring plans usually fall short: No APP privacy policy; Policy out of date; Practices not transparent
Source: Australian Privacy Principles (APPs), read 30 Sep 2026
APP 3Collection of solicited personal information Only collect personal information that is reasonably necessary for the entity's functions or activities, by lawful and fair means.
What a reviewer asks to see: Justification of necessity for collection; Lawful and fair collection methods; Heightened protection for sensitive information
Where monitoring plans usually fall short: Over-collection; Unlawful/unfair collection; Sensitive info collected without consent
Source: Australian Privacy Principles (APPs), read 30 Sep 2026
APP 11Security of personal information Take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure, and destroy or de-identify it when no longer needed.
What a reviewer asks to see: Information security controls for personal information; Destruction/de-identification of redundant PI
Where monitoring plans usually fall short: PI not secured; Redundant PI retained
Source: Australian Privacy Principles (APPs), read 30 Sep 2026