← ACARA Digital Technologies Years 9–10

Who must follow the Privacy Act: APP entities

An organisation or government agency that must follow the Australian Privacy Principles under the Privacy Act 1988, such as federal agencies, health providers and larger businesses.

Part of: ACARA Digital Technologies Years 9–10 — Privacy Principles and Digital Footprints — Module 12, QCE Digital Solutions Unit 4 — Digital Methods for Exchanging Data — Module 63, WA Computer Science ATAR Year 11 — Data Management — Module 92, WA Computer Science ATAR Year 11 — Cyber Security — Module 151

Understanding Who must follow the Privacy Act: APP entities in ACARA Digital Technologies Years 9–10

What it does: Federal agencies are APP entities automatically, so the code sets isAPPEntity to true based on type alone. The turnover test compares the business's yearly income with the $3 million threshold, and a higher figure makes it an APP entity. Australian Government agencies are APP entities. Individuals acting in their personal life are not. Most small businesses under the $3 million threshold are exempt, though there are some exceptions. Health service providers hold sensitive health information, so they are covered even when they are small. An APP entity is a covered organisation or government agency, not just anyone who uses technology.

Common mistakes: A private business is an APP entity when its annual turnover is MORE than the $3 million threshold, so the comparison should use > not <. Australian Government agencies must follow the Australian Privacy Principles, so a federal agency should print "APP entity".

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Who must follow the Privacy Act: APP entities to a class →

This module's key terms are also in a printable crossword (Modules 876–944) and word search (Modules 860–944).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
Which of these must follow the Australian Privacy Principles?
A student sharing a friend's photo in a private group chatA federal government agency, such as Services Australia
Matches
if (type == "health service provider") { isAPPEntity = false }
↓
Health service providers are APP entities even if they are small, because they handle sensitive health information. The code wrongly sets isAPPEntity to false.
Applying
Meanings
Term
APP entity
Meaning
An organisation or government agency that must follow the Australian Privacy Principles under the Privacy Act 1988, such as federal agencies, health providers and larger businesses.
Practice
IF isFederalAgency THEN
Testing
Gaps
An must follow the APPs.
Check Answer
Spots
2threshold = 3000000
3is_app = turnover < threshold

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Scorpion' badge — Venom Debugger, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which of these must follow the Australian Privacy Principles?
A. A student sharing a friend's photo in a private group chat
B. A federal government agency, such as Services Australia ✓
Australian Government agencies are APP entities. Individuals acting in their personal life are not.
2. A company has an annual turnover of $5 million. Is it an APP entity?
A. Yes, because its turnover is above $3 million ✓
B. No, because only government agencies are APP entities
Private businesses with an annual turnover above the $3 million threshold must follow the APPs.
3. A local bakery has a turnover of $400,000 a year. What is usually true?
A. It is usually exempt from the APPs ✓
B. It is always an APP entity
Most small businesses under the $3 million threshold are exempt, though there are some exceptions.
4. A small medical clinic earns only $500,000 a year. Is it an APP entity?
A. No, because its turnover is under the threshold
B. Yes, because health service providers must follow the APPs whatever their size ✓
Health service providers hold sensitive health information, so they are covered even when they are small.
5. Which statement describes an APP entity?
A. An organisation or agency that must follow the APPs under the Privacy Act ✓
B. Any person who uses an app on their phone
An APP entity is a covered organisation or government agency, not just anyone who uses technology.

Match the Pairs

APP entity → An organisation or government agency that must follow the Australian Privacy Principles under the Privacy Act 1988
small business (turnover $3 million or less) → Usually exempt from the Privacy Act, unless an exception applies such as being a health service provider
Australian Government agencies must follow the APPs, no matter how small they are → if (type == "Australian Government agency") { isAPPEntity = true }
A private business is an APP entity when its annual turnover is above the $3 million threshold → if (turnover > 3000000) { isAPPEntity = true }
if (type == "health service provider") { isAPPEntity = false } → Health service providers are APP entities even if they are small, because they handle sensitive health information. The code wrongly sets isAPPEntity to false.
if (turnover <= 3000000) { isAPPEntity = true } → The comparison is backwards. A business with turnover of $3 million or less is usually exempt, so it should not automatically become an APP entity.

Key Term

APP entity
An organisation or government agency that must follow the Australian Privacy Principles under the Privacy Act 1988, such as federal agencies, health providers and larger businesses.

Fill in the Blanks

1. An APP entity must follow the APPs.
Hint: Type the two-word term for an organisation or agency bound by the Australian Privacy Principles.
2. IF turnover > 3000000 THEN isAppEntity ← TRUE END IF
Hint: Type the comparison operator that checks if a business earns more than the $3 million threshold.
3. IF type = "health provider" THEN isAppEntity ← TRUE END IF
Hint: Type the Boolean value for a health service provider, which must follow the Privacy Act.
4. IF turnover <= 3000000 THEN isAppEntity ← FALSE END IF
Hint: Type the Boolean value for a small business under the threshold, which is usually exempt.
5. IF type = "federal agency" THEN isAppEntity ← TRUE END IF
Hint: Type the variable name that records whether the organisation must follow the APPs.

Spot the Error

Question 1
A turnover = 5000000
B threshold = 3000000
C is_app = turnover < threshold
D print(is_app)
Line C — A private business is an APP entity when its annual turnover is MORE than the $3 million threshold, so the comparison should use > not <.
Question 2
A agency = "Services Australia"
B is_federal = True
C if is_federal:
D print("Not an APP entity")
Line D — Australian Government agencies must follow the Australian Privacy Principles, so a federal agency should print "APP entity".
Question 3
A business = "Corner Cafe"
B limit = 300000
C turnover = 400000
D exempt = turnover <= limit
Line B — The turnover threshold for the Privacy Act is $3 million (3000000). With the wrong limit the cafe would be judged against the wrong cut-off.
Question 4
A clinic = "City Dental"
B provider = "health"
C if provider = "health":
D print("APP entity")
Line C — A single = assigns a value, so it can't be used to compare in an if statement. It should be == so the code checks whether the provider is a health service provider.
Question 5
A app_list = []
B app_list.append("Corner Cafe")
C app_list.append("City GP")
D print(app_list)
Line B — The list is meant to hold APP entities. A small cafe under the $3 million turnover threshold is usually exempt, so it does not belong. A federal agency like the ATO does.

Student with a class code? Join your class →