Privacy (Market and Social Research) Code 2021 (Cth)

Privacy (Market and Social Research) Code 2021

I, Angelene Falk, Australian Information Commissioner and Privacy Commissioner, approve the following APP code made under the Privacy Act 1988 and have included it on the Codes Register.

Dated 1 March 2021

Angelene Falk Australian Information Commissioner Privacy Commissioner

Contents Part 1—Preliminary 1 Name 2 Commencement 3 Authority 3 Preamble 4 Schedules 5 Definitions 6 Objectives 7 Entities bound by this APP code 8 Eligibility and coverage Part 2—How the Australian Privacy Principles apply to market and social research Transparency of management 9 Australian Privacy Principle 1: Open and transparent management of personal information (as customised for the purposes of this Code) 10 Australian Privacy Principle 2: Anonymity and pseudonymity (as customised for the purposes of this Code) Collection of personal information 11 Australian Privacy Principle 3: Collection of solicited personal information (as customised for the purposes of this code) 12 Australian Privacy Principle 4: Dealing with unsolicited personal information (as customised for the purposes of this Code) 13 Australian Privacy Principle 5: Notification of the collection of personal information (as customised for the purposes of this Code) 13A Additional requirement: matters of which respondents should be made aware – sources of information and identity of client Dealing with personal information 14 Australian Privacy Principle 6: Use or disclosure of personal information (as customised for the purposes of this Code) 14A Additional requirement: research use and disclosure 15 Australian Privacy Principle 7: Direct marketing (as customised for the purposes of this Code) 16 Australian Privacy Principle 8: Cross-border disclosure of personal information (as customised for the purposes of this Code) 17 Australian Privacy Principle 9: Adoption, use or disclosure of government related identifiers (as customised for the purposes of this Code) Integrity of personal information 18 Australian Privacy Principle 10: Quality of personal information (as customised for the purposes of this Code) Security of personal information 19 Australian Privacy Principle 11: Security of personal information (as customised for the purposes of this Code) 19A Additional requirement: retention and disposal Access to, and correction of, personal information 20 Australian Privacy Principle 12: Access to personal information (as customised for the purposes of this Code) 21 Australian Privacy Principle 13: Correction of personal information (as customised for the purposes of this Code) 21A Additional requirement: destruction or de-identification on request Part 3—Governance 22 Code Administrator 23 Tasks of the Code Administrator Part 4—Review 24 Independent Code Review 25 Consultation 26 Reporting following an Independent Code Review 27 Variation of the Code Part 5—Monitoring and reporting 28 Monitoring and reporting 29 Improper conduct Schedule 1—Repeals Privacy (Market and Social Research) Code 2014