Who must follow the Privacy Act: APP entities

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Which of these must follow the Australian Privacy Principles?

A A student sharing a friend's photo in a private group chat

B A federal government agency, such as Services Australia

2. A company has an annual turnover of $5 million. Is it an APP entity?

A Yes, because its turnover is above $3 million

B No, because only government agencies are APP entities

3. A local bakery has a turnover of $400,000 a year. What is usually true?

A It is usually exempt from the APPs

B It is always an APP entity

4. A small medical clinic earns only $500,000 a year. Is it an APP entity?

A No, because its turnover is under the threshold

B Yes, because health service providers must follow the APPs whatever their size

5. Which statement describes an APP entity?

A An organisation or agency that must follow the APPs under the Privacy Act

B Any person who uses an app on their phone

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1APP entity		AHealth service providers are APP entities even if they are small, because they handle sensitive health information. The code wrongly sets isAPPEntity to false.
2small business (turnover $3 million or less)		BThe comparison is backwards. A business with turnover of $3 million or less is usually exempt, so it should not automatically become an APP entity.
3Australian Government agencies must follow the APPs, no matter how small they are		CUsually exempt from the Privacy Act, unless an exception applies such as being a health service provider
4A private business is an APP entity when its annual turnover is above the $3 million threshold		DAn organisation or government agency that must follow the Australian Privacy Principles under the Privacy Act 1988
5if (type == "health service provider") { isAPPEntity = false }		Eif (turnover > 3000000) { isAPPEntity = true }
6if (turnover <= 3000000) { isAPPEntity = true }		Fif (type == "Australian Government agency") { isAPPEntity = true }

Definitions

APP entity

Fill in the Blanks

Complete each line of code by filling in the missing parts.

An __________ must follow the APPs.

IF turnover _ 3000000 THEN isAppEntity ← TRUE END IF

IF type = "health provider" THEN isAppEntity ← ____ END IF

IF turnover <= 3000000 THEN isAppEntity ← _____ END IF

IF type = "federal agency" THEN ___________ ← TRUE END IF

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A turnover = 5000000

B threshold = 3000000

C is_app = turnover < threshold

D print(is_app)

Question 2

A agency = "Services Australia"

B is_federal = True

C if is_federal:

D print("Not an APP entity")

Question 3

A business = "Corner Cafe"

B limit = 300000

C turnover = 400000

D exempt = turnover <= limit

Question 4

A clinic = "City Dental"

B provider = "health"

C if provider = "health":

D print("APP entity")

Question 5

A app_list = []

B app_list.append("Corner Cafe")

C app_list.append("City GP")

D print(app_list)

Answer Key

Who must follow the Privacy Act: APP entities

Section A: Quick Questions

B — A federal government agency, such as Services Australia

A — Yes, because its turnover is above $3 million

A — It is usually exempt from the APPs

B — Yes, because health service providers must follow the APPs whatever their size

A — An organisation or agency that must follow the APPs under the Privacy Act

Section B: Match the Pairs

APP entity → An organisation or government agency that must follow the Australian Privacy Principles under the Privacy Act 1988

small business (turnover $3 million or less) → Usually exempt from the Privacy Act, unless an exception applies such as being a health service provider

Australian Government agencies must follow the APPs, no matter how small they are → if (type == "Australian Government agency") { isAPPEntity = true }

A private business is an APP entity when its annual turnover is above the $3 million threshold → if (turnover > 3000000) { isAPPEntity = true }

if (type == "health service provider") { isAPPEntity = false } → Health service providers are APP entities even if they are small, because they handle sensitive health information. The code wrongly sets isAPPEntity to false.

if (turnover <= 3000000) { isAPPEntity = true } → The comparison is backwards. A business with turnover of $3 million or less is usually exempt, so it should not automatically become an APP entity.

Section C: Definitions

APP entity — An organisation or government agency that must follow the Australian Privacy Principles under the Privacy Act 1988, such as federal agencies, health providers and larger businesses.

Section D: Fill in the Blanks

An APP entity must follow the APPs.

IF turnover > 3000000 THEN
  isAppEntity ← TRUE
END IF

IF type = "health provider" THEN
  isAppEntity ← TRUE
END IF

IF turnover <= 3000000 THEN
  isAppEntity ← FALSE
END IF

IF type = "federal agency" THEN
  isAppEntity ← TRUE
END IF

Section E: Spot the Error

C — A private business is an APP entity when its annual turnover is MORE than the $3 million threshold, so the comparison should use > not <.

D — Australian Government agencies must follow the Australian Privacy Principles, so a federal agency should print "APP entity".

B — The turnover threshold for the Privacy Act is $3 million (3000000). With the wrong limit the cafe would be judged against the wrong cut-off.

C — A single = assigns a value, so it can't be used to compare in an if statement. It should be == so the code checks whether the provider is a health service provider.

B — The list is meant to hold APP entities. A small cafe under the $3 million turnover threshold is usually exempt, so it does not belong. A federal agency like the ATO does.