← VCE Data Analysis

What the Australian Privacy Principles are

13 legal principles in the Privacy Act 1988 that set rules for how organisations collect, use, store, give access to and correct personal information. Use them as a checklist.

Part of: VCE Applied Computing - U1O1 - Data analysis — Module 37, VCE Data Analytics - U3O2 - Analysis and Design — Module 90, VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 95, 9-10 Digital Technologies: Data privacy and the Australian Privacy Principles — Module 6, ACARA Digital Technologies Years 7–8 — Digital Footprints and Data Minimisation — Module 30, ACARA Digital Technologies Years 9–10 — Privacy Principles and Digital Footprints — Module 13, QCE Digital Solutions Unit 4 — Digital Methods for Exchanging Data — Module 64, QCE Digital Solutions Unit 4 — Complex Digital Data Exchange Problems and Solution Requirements — Module 40

Understanding What the Australian Privacy Principles are in VCE Data Analysis

What it does: The chain shows the stages of the information life cycle that the 13 principles cover. A loop that checks the system against every principle matches the idea of using the APPs as a checklist. There are 13 APPs. They are set out in Schedule 1 of the Privacy Act 1988. APP 11 is about protecting personal information from misuse, loss and unauthorised access. APP 2 is about letting people stay anonymous. The APPs apply to Australian Government agencies and many private organisations. Some small businesses are exempt, but others, like health providers, must follow them. The APPs work best as a checklist. Check each one while designing, so problems are fixed before the app is released.

Common mistakes: The checklist should fix an APP only when it is NOT met. The broken line fixes the ones already met. It should be IF NOT result THEN fix(app). APPs 3 to 5 are about collecting personal information. Storing and security are covered later, in APPs 10 and 11.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add What the Australian Privacy Principles are to a class →

This module's key terms are also in a printable crossword (Modules 25–37) and word search (Modules 25–54).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
How many Australian Privacy Principles (APPs) are there?
1310
Matches
APPs = 5 principles about collecting data only
↓
There are 13 APPs, and they cover more than collection. They also cover use, storage, access and correction.
Applying
Meanings
Term
Australian Privacy Principles (APPs)
Meaning
13 legal principles in the Privacy Act 1988 that set rules for how organisations collect, use, store, give access to and correct personal information. Use them as a checklist.
Practice
APP checklist: 13 principles
Testing
Gaps
totalApps =
Check Answer
Spots
3 result ← met(app)
4 IF result THEN fix(app)

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Dumbo Octopus' badge — Module Maker, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. How many Australian Privacy Principles (APPs) are there?
A. 10
B. 13 ✓
There are 13 APPs. They are set out in Schedule 1 of the Privacy Act 1988.
2. Which law contains the Australian Privacy Principles?
A. Copyright Act 1968 (Cwlth)
B. Privacy Act 1988 (Cwlth) ✓
The APPs are part of the Privacy Act 1988. The Copyright Act is about creative work, not personal information.
3. The APPs only cover the moment a company first collects your data.
A. False ✓
B. True
False. The APPs cover the whole life of personal information: collecting, using, storing, giving access to and correcting it.
4. Which group of APPs would you check if a school app is storing student data insecurely?
A. The principles about keeping information secure (APP 11) ✓
B. The principles about anonymity (APP 2)
APP 11 is about protecting personal information from misuse, loss and unauthorised access. APP 2 is about letting people stay anonymous.
5. Who must follow the APPs?
A. Australian Government agencies and many organisations, such as businesses with over $3 million in yearly turnover ✓
B. Only the Australian Government
The APPs apply to Australian Government agencies and many private organisations. Some small businesses are exempt, but others, like health providers, must follow them.

Match the Pairs

APPs = 13 principles → The Australian Privacy Principles are 13 legal rules in the Privacy Act 1988 about handling personal information.
APP entity → An organisation or agency that must follow the APPs, such as a government agency or a business with a turnover over $3 million.
The APPs cover the whole life of personal information, from collecting it to using, storing, giving access to and correcting it. → collect > use > store > access > correct
You can use the APPs as a checklist to test whether a system handles personal information properly. → for app in APP1..APP13: check(system)
APPs = 5 principles about collecting data only → There are 13 APPs, and they cover more than collection. They also cover use, storage, access and correction.
if (small_club) { APPs_apply = false; } → It wrongly assumes the APPs never apply to small groups. The APPs bind government agencies and larger businesses, and some smaller organisations too, such as health providers.

Key Term

Australian Privacy Principles (APPs)
13 legal principles in the Privacy Act 1988 that set rules for how organisations collect, use, store, give access to and correct personal information. Use them as a checklist.

Fill in the Blanks

1. totalApps = 13
Hint: Type how many Australian Privacy Principles there are.
2. FOR EACH principle IN APPs check(system, principle) END FOR
Hint: Type the short name for the set of principles used as a checklist.
3. IF turnover > 3000000 THEN mustFollow = true END IF
Hint: Type the yearly turnover in dollars, with no commas, above which most businesses must follow the APPs.
4. collectionGroup = APP 3 to APP 5
Hint: Type the number of the last principle in the collection group.
5. IF collectsData AND isCovered THEN apply(APPs) END IF
Hint: Type the logical operator that needs both conditions to be true.

Spot the Error

Question 1
A total ← 13
B FOR app ← 1 TO total
C result ← met(app)
D IF result THEN fix(app)
E END FOR
Line D — The checklist should fix an APP only when it is NOT met. The broken line fixes the ones already met. It should be IF NOT result THEN fix(app).
Question 2
A g1 ← "APPs 1-2: openness"
B g2 ← "APPs 3-5: storing"
C g3 ← "APPs 6-9: using data"
D g4 ← "APPs 10-11: security"
E g5 ← "APPs 12-13: access"
Line B — APPs 3 to 5 are about collecting personal information. Storing and security are covered later, in APPs 10 and 11.
Question 3
A FUNCTION covered(org)
B IF org.is_agency THEN
C RETURN TRUE
D IF org.income < 3000000 THEN
E RETURN TRUE
F RETURN FALSE
Line D — The APPs apply to government agencies and to organisations with an annual turnover of MORE than $3 million (plus some smaller ones, such as health providers). The broken line uses < so it picks the wrong organisations. It should use >.
Question 4
A ADD "APP 1: privacy policy"
B ADD "APP 2: allow anonymity"
C ADD "APP 3: collect all data"
D ADD "APP 11: keep data secure"
Line C — APP 3 says an organisation should only collect personal information that is reasonably necessary. Collecting all data breaks this principle. It should say only needed data.
Question 5
A ADD "APP 6: use and sharing"
B ADD "APP 7: direct marketing"
C ADD "APP 8: anonymity"
D ADD "APP 9: government IDs"
Line C — APP 8 covers sending personal information overseas. Anonymity and pseudonymity are in APP 2.

Student with a class code? Join your class →