Privacy (Australian Government Agencies — Governance) APP Code 2017 (Cth)

Privacy (Australian Government Agencies — Governance) APP Code 2017 Made under the Privacy Act 1988

I, Timothy Pilgrim, Australian Information Commissioner, have developed the following APP code and included it on the Codes Register. Dated 26 October 2017

Timothy Pilgrim Australian Information Commissioner

Part 1—Introduction

1 Name (1) This APP code may be cited as the Privacy (Australian Government Agencies — Governance) APP Code 2017. (2) This APP code may also be cited as the Australian Government Agencies Privacy Code.

2 Commencement This APP code comes into force on 1 July 2018.

3 Authority This APP code has been developed under section 26G of the Privacy Act 1988. 4 Preamble APP 1 is the foundation principle that assists agencies to achieve compliance with the APPs. Compliance with APP 1 is essential to ensure good privacy management and governance practices, which can build community trust and confidence in those practices. APP 1 implicitly promotes a 'privacy by design' approach to ensure that privacy compliance is included in the design of information systems and practices from their inception. It does this by requiring agencies to take reasonable steps to implement practices, procedures and systems to ensure compliance with the APPs and any binding registered APP code.

5 Definitions Note: A number of expressions used in this APP code are defined in the Act, and have the same meaning in this APP code, including the following: (a) APP code; (b) Commissioner; (c) personal information; (d) privacy impact assessment; and (e) sensitive information. In this APP code: Act means the Privacy Act 1988. Agency has the meaning given in section 6(1) of the Act, but for the purposes of this APP code, does not include a Minister. APP means an Australian Privacy Principle as set out in the Act. handling personal information means dealing with personal information in any way, including managing, collecting, holding, using or disclosing personal information. OAIC means the Office of the Australian Information Commissioner. PIA means privacy impact assessment. Privacy Champion has the meaning given by section 11. privacy management plan has the meaning given by section 9. Privacy Officer has the meaning given by section 10.