Information Privacy Act 2009

The functions of the information commissioner include—

on the commissioner’s own initiative or otherwise—

conducting—

reviews of personal information handling practices of relevant entities, including technologies, programs, policies and procedures, to identify privacy related issues of a systemic nature generally or to identify particular grounds for the issue of compliance notices; or

reviews of acts or practices of agencies in relation to compliance with chapter 3A, including data handling systems and practices, to identify data breach related issues of a systemic nature generally or to identify particular grounds for the issue of compliance notices; and

investigating an act done or practice engaged in by a relevant entity in relation to personal information, if the commissioner is satisfied on reasonable grounds that the act or practice may contravene the privacy principle requirements or, if the entity is an agency, the entity’s obligations under

leading the improvement of public sector privacy administration in Queensland by taking appropriate action to—

promote understanding of and compliance with this Act; and

provide best practice leadership and advice, including by providing advice and assistance to relevant entities on the interpretation and administration of this Act;

monitor and audit relevant entities’ compliance with this Act; and

initiate privacy education and training, including education and training programs targeted at particular aspects of privacy administration, and education and training programs to promote greater awareness of the operation of this Act in the community and within the public sector environment; and

comment on any issues relating to the administration of privacy in the public sector environment; and

without limiting subparagraph (v), identify and comment on legislative and administrative changes that would improve the administration of this Act; and

prepare, or assist in the preparation of, QPP codes; and

assist relevant entities in complying with obligations under QPP codes;

prepare guidelines for permitted general situations under chapter 3, part 2; and

issuing guidelines under section 138; and

supporting complainants for privacy complaints, and all relevant entities to the extent they are subject to the operation of this

if the commissioner considers it appropriate, reporting to the Speaker on the findings of a reportable matter, including reporting any recommendations to the relevant entity the subject of the reportable matter.

In this section—

a review or investigation under subsection (1)(a); or

an audit under subsection (1)(b)(iii).