QPP 1—open and transparent management of personal information
1 QPP 1—open and transparent management of personal information
1.1
The object of this QPP is to ensure that agencies manage personal information in an open and transparent way.
Compliance with the QPPs etc.
1.2
An agency must take reasonable steps to implement practices, procedures and systems relating to the agency’s functions or activities that—
will ensure the agency complies with the QPPs and any QPP code that binds the agency;
and
will enable the agency to deal with inquiries and complaints from individuals about the agency’s compliance with the QPPs or any QPP code that binds the agency.
QPP privacy policy
1.3
An agency must have a clearly expressed and up-to-date policy (the QPP privacy policy) about the management of personal information by the agency.
1.4
Without limiting QPP 1.3, the QPP privacy policy of the agency must contain the following information—
the kinds of personal information that the agency collects and holds;
how the agency collects and holds personal information;
the purposes for which the agency collects, holds, uses and discloses personal information;
how an individual may access personal information about the individual that is held by the agency and seek the correction of the information;
how an individual may complain about a breach of the QPPs, or any QPP code that binds the agency, and how the agency will deal with the complaint;
whether the agency is likely to disclose personal information to entities outside
Australia;
if the agency is likely to disclose personal information to entities outside of
Australia—the countries in which the recipients are likely to be located if it is practicable to state those countries in the policy.
Availability of QPP privacy policy etc.
1.5
An agency must take reasonable steps to make its
QPP privacy policy available—
free of charge; and
in an appropriate form.
Example of how agency may make its QPP privacy policy available—
publication on the agency’s website
1.6
If a person requests a copy of the QPP privacy policy of an agency in a particular form, the agency must take reasonable steps to give the person a copy in that form.
sch 3 s 1 sub 2023 No. 32 s 74
This Act’s bill:Explanatory memorandumSecond reading speech
The statute text is free to read above. View subscription options to unlock the case-law research tools for each provision.