Australian Privacy Principle 11
Name:
Date:
Class:
A
Quick Questions
Shade in the A or B circle for each question.
1. Does Principle 11 require organisations to keep personal information secure?
2. Should personal information be protected from unauthorised access?
3. Should personal information be protected from misuse?
4. Should information be destroyed once it's no longer needed?
5. Can data be de-identified instead of destroyed?
B
Match the Pairs
Draw a line connecting each item on the left to its match on the right.
| Left column | Right column | |
|---|---|---|
| 1Protect data from unauthorised access | ARemoves details that could identify a person | |
| 2Destroy information no longer needed | BReduces the risk of old data being misused | |
| 3Principle 11 requires keeping information secure | CProtecting it from misuse, loss, and unauthorised access | |
| 4De-identifying data instead of destroying it | DThis breaks the principle - information must be kept secure | |
| 5Leaving personal information completely unprotected | EThis breaks the principle - it should be destroyed or de-identified | |
| 6Keeping unneeded personal information indefinitely | FStops people who shouldn't see it from accessing it |
C
Definitions
Australian Privacy Principle 11
D
Fill in the Blanks
Complete each line of code by filling in the missing parts.
1.
Principle 11 is about keeping information
______.
2.
Organisations must protect data from
____________ access.
3.
Data must also be protected from ______.
4.
Information no longer needed should be
_________.
5.
Data can be _____________
instead of destroyed.
E
Spot the Error
Shade in the letter of the line that contains an error.
Question 1
A
Leave data unprotected
B
Protect data from misuse
C
Destroy unneeded data
Question 2
A
Protect from bad access
B
Allow unauthorised access
C
Destroy unneeded data
Question 3
A
Protect from misuse
B
Destroy unneeded data
C
Never destroy old data
Question 4
A
Protect from misuse
B
Protect from loss
C
Destroy unneeded data
D
Keep unneeded data forever
Question 5
A
Keep data secure
B
Protect from misuse
C
Protect from loss
D
Destroy unneeded data
E
Leave data unsecured
Answer Key
Australian Privacy Principle 11
Section A: Quick Questions
Q1
B — Yes
Q2
B — Yes
Q3
A — Yes
Q4
A — Yes
Q5
A — Yes
Section B: Match the Pairs
Q1
Protect data from unauthorised access → Stops people who shouldn't see it from accessing it
Q2
Destroy information no longer needed → Reduces the risk of old data being misused
Q3
Principle 11 requires keeping information secure → Protecting it from misuse, loss, and unauthorised access
Q4
De-identifying data instead of destroying it → Removes details that could identify a person
Q5
Leaving personal information completely unprotected → This breaks the principle - information must be kept secure
Q6
Keeping unneeded personal information indefinitely → This breaks the principle - it should be destroyed or de-identified
Section C: Definitions
Q1
Australian Privacy Principle 11 — Requires organisations to protect personal information from misuse, loss, and unauthorised access, and to destroy it when no longer needed.Section D: Fill in the Blanks
Q1
Principle 11 is about keeping information
secure.Q2
Organisations must protect data from
unauthorised access.Q3
Data must also be protected from misuse.Q4
Information no longer needed should be
destroyed.Q5
Data can be de-identified
instead of destroyed.Section E: Spot the Error
Q1
A — Line 1 says to leave data unprotected, but Principle 11 requires personal information to be kept secure.
Q2
B — Line 2 says to allow unauthorised access, but the principle requires protecting data from unauthorised access.
Q3
C — Line 3 says to never destroy old data, but data no longer needed should be destroyed or de-identified.
Q4
D — Line 4 says to keep unneeded data forever, but data that's no longer needed should be destroyed.
Q5
E — Line 5 says to leave data unsecured, but Principle 11 requires keeping personal information secure.