E.4 Information privacy Flashcards
What does ‘best practice’ require in the context of privacy legislation?
Compliance with legislation and regulation.
What is the current version of the Commonwealth Privacy Act?
Privacy Act 1988, Compilation No. 89, registered on 25 October 2021.
What are Australian Privacy Principles (APPs)?
They are principles described in Schedule 1 of the Privacy Act 1988 that guide decision making concerning privacy issues.
What does APP#1 concern?
The open and transparent management of personal information.
What does APP#2 address?
Anonymity and pseudonymity.
What is the focus of APP#3?
The collection of solicited personal information.
What does APP#4 deal with?
Unsolicited personal information.
What is covered by APP#5?
Notification of the collection of personal information.
What does APP#6 concern?
The use or disclosure of personal information.
What is the focus of APP#7?
Direct marketing.
What does APP#8 address?
Cross-border disclosure of personal information.
What is the concern of APP#9?
The adoption, use or disclosure of government-related identifiers.
What does APP#10 focus on?
The quality of personal information.
What is addressed by APP#11?
The security of personal information.
What do APP#12 and APP#13 concern?
Access to and correction of personal information.
What is required from organizations subject to the Privacy Act 1988?
To take reasonable steps to implement practices, procedures, and systems that ensure compliance with the APPs.
What is the purpose of a Privacy Impact Assessment (PIA)?
To identify the impact a project may have on individuals’ privacy and recommend ways to manage or mitigate that impact.
Name the ten steps involved in conducting a PIA.
- Threshold assessment
- Plan the PIA
- Describe the project
- Identify and consult with stakeholders
- Map information flows
- Privacy impact analysis and compliance check
- Privacy management — addressing risks
- Recommendations
- Report
- Respond and review
True or False: The OAIC can direct a private sector organization to provide a PIA.
False.
What is a significant contemporary issue in information privacy?
Information privacy and the inference economy.
How does machine learning affect information privacy?
It facilitates an inference economy that strains privacy protections.
What is a potential benefit of facial recognition technology in healthcare?
Overcoming the ‘wrong patient’ risk.
What are concerns regarding genetic privacy related to?
The risks posed by sharing genomic sequencing.
Fill in the blank: The OAIC’s privacy management framework has _______ steps.
four
