What the Australian Privacy Principles are

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. How many Australian Privacy Principles (APPs) are there?

A 10

B 13

2. Which law contains the Australian Privacy Principles?

A Copyright Act 1968 (Cwlth)

B Privacy Act 1988 (Cwlth)

3. The APPs only cover the moment a company first collects your data.

A False

B True

4. Which group of APPs would you check if a school app is storing student data insecurely?

A The principles about keeping information secure (APP 11)

B The principles about anonymity (APP 2)

5. Who must follow the APPs?

A Australian Government agencies and many organisations, such as businesses with over $3 million in yearly turnover

B Only the Australian Government

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1APPs = 13 principles		AAn organisation or agency that must follow the APPs, such as a government agency or a business with a turnover over $3 million.
2APP entity		BIt wrongly assumes the APPs never apply to small groups. The APPs bind government agencies and larger businesses, and some smaller organisations too, such as health providers.
3The APPs cover the whole life of personal information, from collecting it to using, storing, giving access to and correcting it.		Ccollect > use > store > access > correct
4You can use the APPs as a checklist to test whether a system handles personal information properly.		DThe Australian Privacy Principles are 13 legal rules in the Privacy Act 1988 about handling personal information.
5APPs = 5 principles about collecting data only		EThere are 13 APPs, and they cover more than collection. They also cover use, storage, access and correction.
6if (small_club) { APPs_apply = false; }		Ffor app in APP1..APP13: check(system)

Definitions

Australian Privacy Principles (APPs)

Fill in the Blanks

Complete each line of code by filling in the missing parts.

totalApps = __

FOR EACH principle IN ____ check(system, principle) END FOR

IF turnover > _______ THEN mustFollow = true END IF

collectionGroup = APP 3 to APP _

IF collectsData ___ isCovered THEN apply(APPs) END IF

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A total ← 13

B FOR app ← 1 TO total

C result ← met(app)

D IF result THEN fix(app)

E END FOR

Question 2

A g1 ← "APPs 1-2: openness"

B g2 ← "APPs 3-5: storing"

C g3 ← "APPs 6-9: using data"

D g4 ← "APPs 10-11: security"

E g5 ← "APPs 12-13: access"

Question 3

A FUNCTION covered(org)

B IF org.is_agency THEN

C RETURN TRUE

D IF org.income < 3000000 THEN

E RETURN TRUE

F RETURN FALSE

Question 4

A ADD "APP 1: privacy policy"

B ADD "APP 2: allow anonymity"

C ADD "APP 3: collect all data"

D ADD "APP 11: keep data secure"

Question 5

A ADD "APP 6: use and sharing"

B ADD "APP 7: direct marketing"

C ADD "APP 8: anonymity"

D ADD "APP 9: government IDs"

Answer Key

What the Australian Privacy Principles are

Section A: Quick Questions

B — 13

B — Privacy Act 1988 (Cwlth)

A — False

A — The principles about keeping information secure (APP 11)

A — Australian Government agencies and many organisations, such as businesses with over $3 million in yearly turnover

Section B: Match the Pairs

APPs = 13 principles → The Australian Privacy Principles are 13 legal rules in the Privacy Act 1988 about handling personal information.

APP entity → An organisation or agency that must follow the APPs, such as a government agency or a business with a turnover over $3 million.

The APPs cover the whole life of personal information, from collecting it to using, storing, giving access to and correcting it. → collect > use > store > access > correct

You can use the APPs as a checklist to test whether a system handles personal information properly. → for app in APP1..APP13: check(system)

APPs = 5 principles about collecting data only → There are 13 APPs, and they cover more than collection. They also cover use, storage, access and correction.

if (small_club) { APPs_apply = false; } → It wrongly assumes the APPs never apply to small groups. The APPs bind government agencies and larger businesses, and some smaller organisations too, such as health providers.

Section C: Definitions

Australian Privacy Principles (APPs) — 13 legal principles in the Privacy Act 1988 that set rules for how organisations collect, use, store, give access to and correct personal information. Use them as a checklist.

Section D: Fill in the Blanks

totalApps = 13

FOR EACH principle IN APPs
  check(system, principle)
END FOR

IF turnover > 3000000 THEN
  mustFollow = true
END IF

collectionGroup = APP 3 to APP 5

IF collectsData AND isCovered THEN
  apply(APPs)
END IF

Section E: Spot the Error

D — The checklist should fix an APP only when it is NOT met. The broken line fixes the ones already met. It should be IF NOT result THEN fix(app).

B — APPs 3 to 5 are about collecting personal information. Storing and security are covered later, in APPs 10 and 11.

D — The APPs apply to government agencies and to organisations with an annual turnover of MORE than $3 million (plus some smaller ones, such as health providers). The broken line uses < so it picks the wrong organisations. It should use >.

C — APP 3 says an organisation should only collect personal information that is reasonably necessary. Collecting all data breaks this principle. It should say only needed data.

C — APP 8 covers sending personal information overseas. Anonymity and pseudonymity are in APP 2.