The 13 APPs grouped by stage of the data lifecycle

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. APP 3 says an organisation should only collect personal information that is reasonably necessary. Which lifecycle group is it in?

A Collection (APPs 3-5)

B Use and disclosure (APPs 6-9)

2. APP 8 covers sending personal data to a company overseas. Which group does it belong to?

A Use and disclosure (APPs 6-9)

B Quality and security (APPs 10-11)

3. APP 11 requires organisations to protect personal information from misuse, loss and unauthorised access. Which group is it in?

A Access and correction (APPs 12-13)

B Quality and security (APPs 10-11)

4. Your school lets you ask to see the information it holds about you, and to fix mistakes in it. Which group do these rights fit?

A Openness (APPs 1-2)

B Access and correction (APPs 12-13)

5. APP 2 lets people use a pseudonym or stay anonymous when dealing with an organisation. Which group is it in?

A Openness (APPs 1-2)

B Collection (APPs 3-5)

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1APP 3, APP 4, APP 5		ACollection group: collecting only what is reasonably necessary, handling unsolicited information, and notifying people when you collect their data.
2APP 6, APP 7, APP 8, APP 9		BAPP 12, APP 13
3Openness group: being open about how data is handled and letting people deal with you anonymously or under a pseudonym.		CAPPs 6 to 9 are not about openness. They cover use and disclosure: how held data can be used, shared, sent overseas or linked to identifiers.
4Access and correction group: people can ask to see the information held about them and ask for it to be fixed.		DUse and disclosure group: how data may be used or shared, including direct marketing, sending data overseas and government identifiers.
5APP 10 and APP 11 = collection group		EAPP 1, APP 2
6APP 6 to APP 9 = openness group		FAPPs 10 and 11 are not about collection. They cover quality and security: keeping information accurate and protecting it from misuse, loss and unauthorised access.

Definitions

APP lifecycle groups

Fill in the Blanks

Complete each line of code by filling in the missing parts.

APPs 1-2 group: ________ and anonymity

APPs _-5 group: collection

APPs 6-9 group: use and __________

APPs 10-11 group: quality and ________

APPs 12-13 group: access and __________

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A openness: APP 1-2

B collection: APP 3-5

C use_disclosure: APP 6-9

D quality_security: APP 9-10

E access_correction: APP 12-13

Question 2

A openness: APP 1-3

B collection: APP 3-5

C access_correction: APP 12-13

Question 3

A APP 3 -> collection

B APP 4 -> collection

C APP 5 -> use_disclosure

D APP 6 -> use_disclosure

Question 4

A APP 8 -> collection

B APP 9 -> use_disclosure

C APP 11 -> quality_security

Question 5

A if app == 12:

B group = access_correction

C if app == 13:

D group = openness

Answer Key

The 13 APPs grouped by stage of the data lifecycle

Section A: Quick Questions

A — Collection (APPs 3-5)

A — Use and disclosure (APPs 6-9)

B — Quality and security (APPs 10-11)

B — Access and correction (APPs 12-13)

A — Openness (APPs 1-2)

Section B: Match the Pairs

APP 3, APP 4, APP 5 → Collection group: collecting only what is reasonably necessary, handling unsolicited information, and notifying people when you collect their data.

APP 6, APP 7, APP 8, APP 9 → Use and disclosure group: how data may be used or shared, including direct marketing, sending data overseas and government identifiers.

Openness group: being open about how data is handled and letting people deal with you anonymously or under a pseudonym. → APP 1, APP 2

Access and correction group: people can ask to see the information held about them and ask for it to be fixed. → APP 12, APP 13

APP 10 and APP 11 = collection group → APPs 10 and 11 are not about collection. They cover quality and security: keeping information accurate and protecting it from misuse, loss and unauthorised access.

APP 6 to APP 9 = openness group → APPs 6 to 9 are not about openness. They cover use and disclosure: how held data can be used, shared, sent overseas or linked to identifiers.

Section C: Definitions

APP lifecycle groups — The 13 APPs grouped by what happens to data: openness (1-2), collection (3-5), use and disclosure (6-9), quality and security (10-11), access and correction (12-13).

Section D: Fill in the Blanks

APPs 1-2 group: openness and anonymity

APPs 3-5 group: collection

APPs 6-9 group: use and disclosure

APPs 10-11 group: quality and security

APPs 12-13 group: access and correction

Section E: Spot the Error

D — Quality and security covers APP 10 and APP 11. APP 9 belongs to use and disclosure, so the line should be quality_security: APP 10-11.

A — The openness group is only APP 1 and APP 2. APP 3 starts the collection group, so the line should be openness: APP 1-2.

C — APP 5 (notifying people when collecting data) is part of the collection group. Use and disclosure starts at APP 6, so the line should be APP 5 -> collection.

A — APP 8 is about sending personal data overseas, which is a disclosure. It belongs to use and disclosure, so the line should be APP 8 -> use_disclosure.

D — APP 13 is about correcting personal information, so it is in the access and correction group. The line should be group = access_correction.