← Years 9–10 Data & Information

APP 12 and 13: access to and correction of personal information

Rights to ask an organisation for access to the personal information it holds about you (APP 12) and to have it corrected if it is wrong or out of date (APP 13).

Part of: 9-10 Digital Technologies: Data privacy and the Australian Privacy Principles — Module 14, ACARA Digital Technologies Years 9–10 — Privacy Principles and Digital Footprints — Module 28, QCE Digital Solutions Unit 4 — Digital Methods for Exchanging Data — Module 74, WA Computer Science ATAR Year 11 — Data Management — Module 101

Understanding APP 12 and 13: access to and correction of personal information in Years 9–10 Data & Information

What it does: Asking to see the stored data is an access request, which is covered by APP 12. Changing a record that is wrong or out of date keeps data accurate and matches the APP 13 correction right. APP 12 is about access. You can ask to see what an organisation holds about you. APP 13 lets people ask for their own wrong personal information to be corrected. A system should make it easy for people to request access. Hiding the way to ask goes against the spirit of APP 12. Owning a database does not remove a person's right to request access to the personal information about them.

Common mistakes: A copy of personal information should only be sent once the person's identity is confirmed. The line should be IF identity_ok THEN, otherwise unverified people could get someone else's data. Asking to see the personal information an organisation holds is covered by APP 12 (access). APP 13 is about correction, so the first line should be SET app TO 12.

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add APP 12 and 13: access to and correction of personal information to a class →

This module's key terms are also in a printable crossword (Modules 83–132) and word search (Modules 6–132).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

Which principle gives you the right to ask to see the personal information an organisation holds about you?

APP 12APP 13

Matches

Company: We will not show you your data. We own it, so you cannot see it.

↓

This ignores APP 12. People have the right to ask for access to their personal information, and the organisation must usually give it.

Applying

Meanings

Term

APP 12 and APP 13

Meaning

Rights to ask an organisation for access to the personal information it holds about you (APP 12) and to have it corrected if it is wrong or out of date (APP 13).

Practice

request <- "correction"

Testing

Gaps

// APP : access to personal information

Check Answer

Spots

2CHECK identity OF person

3IF NOT identity_ok THEN

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which principle gives you the right to ask to see the personal information an organisation holds about you?

A. APP 13

B. APP 12 ✓

APP 12 is about access. You can ask to see what an organisation holds about you.

2. Which principle covers asking an organisation to fix personal information that is wrong?

A. APP 13 ✓

B. APP 12

APP 13 is about correction. If your information is wrong or out of date, you can ask for it to be corrected.

3. Your gym has your old phone number on file. What should you do?

A. Ask the gym to correct it under APP 13 ✓

B. Ask the gym to show you your data under APP 13

Fixing a wrong or out of date detail is a correction request (APP 13). Asking to see your data is an access request (APP 12).

4. You want a copy of the personal information a streaming company holds about you. Which request is this?

A. An access request ✓

B. A correction request

Asking to see the information held about you is an access request under APP 12.

5. True or false: an app developer should keep the personal data it holds accurate and up to date.

A. False

B. True ✓

Keeping data accurate matters because wrong data can lead to bad decisions about a person. Correction rights help fix this.

Match the Pairs

APP 12 → You can ask an organisation to give you access to the personal information it holds about you.

APP 13 → You can ask an organisation to correct personal information about you that is wrong or out of date.

Requesting access: a student asks a company to show them the data it has stored about them → Request: Please send me a copy of the personal information you hold about me. (APP 12)

Keeping data accurate: an organisation updates a record when it learns the details are out of date → UPDATE address = new_address WHERE user_id = 42 (APP 13)

Company: We will not show you your data. We own it, so you cannot see it. → This ignores APP 12. People have the right to ask for access to their personal information, and the organisation must usually give it.

Student: My birth date is wrong in your system. Company: Too bad, we never change records. → This ignores APP 13. If personal information is wrong or out of date, the organisation must take reasonable steps to correct it when asked.

Key Term

APP 12 and APP 13

Rights to ask an organisation for access to the personal information it holds about you (APP 12) and to have it corrected if it is wrong or out of date (APP 13).

Fill in the Blanks

1. // APP 12: access to personal information

Hint: Type the principle number that gives people the right to see their own information.

2. // APP 13: correct personal information

Hint: Type the principle number that lets people fix information that is wrong.

3. IF request = "access" THEN SEND copy of record TO person END IF

Hint: Type the command that gives the person a copy of their data.

4. IF request = "correction" THEN UPDATE record WITH newValue END IF

Hint: Type the command that changes a record to fix a mistake.

5. IF isWrong OR isOld THEN UPDATE record END IF

Hint: Type the logical operator that makes the fix run if either problem is true.

Spot the Error

Question 1

A SET request TO 'access'

B CHECK identity OF person

C IF NOT identity_ok THEN

D SEND copy OF data

Line C — A copy of personal information should only be sent once the person's identity is confirmed. The line should be IF identity_ok THEN, otherwise unverified people could get someone else's data.

Question 2

A SET app TO 13

B SET purpose TO 'see my data'

C SEND request TO organisation

Line A — Asking to see the personal information an organisation holds is covered by APP 12 (access). APP 13 is about correction, so the first line should be SET app TO 12.

Question 3

A SET field TO 'phone'

B SET new TO '0412 555 010'

C SEND access request

Line C — The program is trying to fix a wrong phone number, which is a correction request under APP 13. It should be SEND correction request, not an access request.

Question 4

A RECEIVE correction request

B CHECK info is wrong

C IF info is wrong THEN

D IGNORE the request

Line D — If personal information is shown to be wrong, APP 13 says the organisation must take reasonable steps to correct it. The line should be UPDATE the record, not ignore the request.

Question 5

A RECEIVE access request

B SET reply_time TO 5 years

C SEND reply TO person

Line B — Organisations must respond to an access request within a reasonable time, usually about 30 days. Waiting 5 years is not reasonable, so it should be SET reply_time TO 30 days.

Student with a class code? Join your class →