← ACARA Digital Technologies Years 9–10

Implications of the APPs for organisations and individuals

The APPs make organisations handle personal data responsibly (clear policy, minimal collection, security, correction) and give people rights: consent, anonymity, access, correction and complaint.

Part of: ACARA Digital Technologies Years 9–10 — Privacy Principles and Digital Footprints — Module 30

Understanding Implications of the APPs for organisations and individuals in ACARA Digital Technologies Years 9–10

What it does: The code adds up the training and security spending an organisation must pay to comply. The code shows steps a person takes themselves, because the APPs do not do this for them. APP 11 requires organisations to protect the personal information they hold. Choosing your own passwords is something you do yourself. APP 12 gives you access to information about YOU, not to everything the organisation holds about other people. APP 13 lets individuals ask for their personal information to be corrected. Writing policies, securing systems and handling requests all take effort. That is why small organisations need to plan for it.

Common mistakes: Organisations should collect personal data only when the person has given consent. The condition must be if user["consent"]: so data is collected only when consent is True. People have the right to access their own personal information. The function must return records[person], not another person's record such as the admin's.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Implications of the APPs for organisations and individuals to a class →

This module's key terms are also in a printable crossword (Modules 876–944) and word search (Modules 860–944).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
Which of these is a duty the APPs place on an organisation?
Keep personal information secure from misuse and lossChoose which passwords its customers use
Matches
newsletter.require(name, dob, address, tfn)
↓
The form collects far more than a newsletter needs. APP 3 says to collect only what is reasonably necessary, such as an email address.
Applying
Meanings
Term
APP duties and rights
Meaning
The APPs make organisations handle personal data responsibly (clear policy, minimal collection, security, correction) and give people rights: consent, anonymity, access, correction and complaint.
Practice
duties ← ["policy", "minimal data", "security", "correction"]
Testing
Gaps
Org duty: collect only data
Check Answer
Spots
2user["consent"] = True
3if not user["consent"]:

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Woodland Hedgehog' badge — Import Master, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which of these is a duty the APPs place on an organisation?
A. Choose which passwords its customers use
B. Keep personal information secure from misuse and loss ✓
APP 11 requires organisations to protect the personal information they hold. Choosing your own passwords is something you do yourself.
2. Which of these is a right the APPs give to an individual?
A. Ask to see the personal information an organisation holds about you ✓
B. Demand a free copy of the organisation's whole database
APP 12 gives you access to information about YOU, not to everything the organisation holds about other people.
3. A student finds their birthday is wrong in a shop's records. What can they do under the APPs?
A. Ask the shop to correct it ✓
B. Nothing, because records can never be changed
APP 13 lets individuals ask for their personal information to be corrected.
4. Which statement about compliance is more accurate?
A. Following the APPs costs organisations nothing
B. Following the APPs takes time, staff training and money for organisations ✓
Writing policies, securing systems and handling requests all take effort. That is why small organisations need to plan for it.
5. An app asks for your home address just to show you a joke of the day. Which APP duty is it likely breaking?
A. Collecting only what is reasonably necessary (APP 3) ✓
B. Letting people access their own information (APP 12)
A joke does not need your address, so collecting it goes beyond what is reasonably necessary.

Match the Pairs

if (!hasPolicy) publishPolicy() → Organisation duty: have a clear, up-to-date privacy policy (APP 1).
user.requestAccess(myData) → Individual right: ask an organisation to show you the personal information it holds about you (APP 12).
Following the APPs costs organisations time and money, for example staff training and security upgrades. → budget += training + encryption
Individuals still need to protect themselves, for example by using strong passphrases and reading privacy policies. → passphrase = unique(); readPolicy()
newsletter.require(name, dob, address, tfn) → The form collects far more than a newsletter needs. APP 3 says to collect only what is reasonably necessary, such as an email address.
if (user.reportsError) ignore() → The organisation ignores a request to fix wrong data. Under APP 13 it must take reasonable steps to correct the information.

Key Term

APP duties and rights
The APPs make organisations handle personal data responsibly (clear policy, minimal collection, security, correction) and give people rights: consent, anonymity, access, correction and complaint.

Fill in the Blanks

1. Org duty: collect only necessary data
Hint: Type the word describing the data an organisation may collect (only what it really needs).
2. Org duty: correct inaccurate data
Hint: Type the verb for fixing wrong personal information (APP 13).
3. Person's right: ask to access your data
Hint: Type the word for the right to see the personal information an organisation holds about you.
4. Cost for org: time to update the policy
Hint: Type the document that an organisation must write and keep current to explain how it handles personal data.
5. Your job: choose a strong passphrase
Hint: Type the type of secret login phrase individuals must still create and protect themselves.

Spot the Error

Question 1
A user = {"name": "Sam"}
B user["consent"] = True
C if not user["consent"]:
D collect(user)
Line C — Organisations should collect personal data only when the person has given consent. The condition must be if user["consent"]: so data is collected only when consent is True.
Question 2
A def access_request(person):
B return records["admin"]
C print(access_request("Sam"))
Line B — People have the right to access their own personal information. The function must return records[person], not another person's record such as the admin's.
Question 3
A news_needs = ["email", "tfn"]
B for item in news_needs:
C ask_user(item)
Line A — Organisations must collect only what is reasonably necessary. A newsletter only needs an email address, so asking for a tax file number is excessive. The list should be ["email"].
Question 4
A def complain(org, issue):
B if org.resolve(issue):
C return "Resolved"
D return "Give up"
Line D — Individuals can complain to the OAIC if the organisation does not fix a problem. Giving up skips that right. It should be return oaic.submit(issue).
Question 5
A def join_forum(name=None):
B if name is None:
C refuse_entry()
D return name
Line C — People have the right to deal with an organisation anonymously or with a pseudonym where practical. Refusing entry when no name is given breaks this. The code should assign a pseudonym like "anon_" + uid().

Student with a class code? Join your class →