← VCE Software Development U3O2

IPP 7: unique identifiers

Limits an organisation from assigning or sharing a unique identifier for a person unless it is necessary for its functions, with limited exceptions.

Part of: VCE Software Development - U3O2 - Analysis and Design — Module 70

Understanding IPP 7: unique identifiers in VCE Software Development U3O2

What it does: Under IPP 7, an ID can only be assigned when it is necessary for the organisation to carry out its functions efficiently. IPP 7 stops organisations from adopting or disclosing identifiers assigned by other organisations except in limited cases, such as where the person has consented or the law requires it. A unique identifier is a number or code that identifies one individual, such as a student ID or licence number. A favourite colour does not identify one person. These are limited exceptions: consent, meeting obligations to the assigning organisation, or uses permitted under IPP 2. Marketing convenience is not one of them.

Common mistakes: IPP 7 only lets an organisation assign a unique identifier when it is necessary for its functions. The condition must be IF idIsNecessary THEN. With NOT, identifiers would be assigned exactly when they are not needed. The condition TRUE assigns an identifier to every member regardless of need. IPP 7 requires the check IF idNeededForFunction THEN before assigning one.

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add IPP 7: unique identifiers to a class →

This module's key terms are also in a printable crossword (Modules 52–71) and word search (Modules 52–85).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

When may a Victorian organisation assign a unique identifier to a person under IPP 7?

Only if it is necessary to carry out its functions efficientlyWhenever it wants to make its database look tidier

Matches

student.id = tax_file_number // reuse another organisation's ID as our own ID

↓

This adopts an identifier assigned by another organisation as the system's own identifier, which IPP 7 limits. The system should generate its own ID instead, such as student.id = newStudentID().

Applying

Meanings

Term

IPP 7

Meaning

Limits an organisation from assigning or sharing a unique identifier for a person unless it is necessary for its functions, with limited exceptions.

Practice

IF identifier is from another organisation THEN

Testing

Gaps

IF neededForFunction = THEN

Check Answer

Spots

1FUNCTION assignId(student)

2 IF NOT idIsNecessary THEN

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. When may a Victorian organisation assign a unique identifier to a person under IPP 7?

A. Only if it is necessary to carry out its functions efficiently ✓

B. Whenever it wants to make its database look tidier

IPP 7 limits assigning identifiers to cases where they are necessary for the organisation's functions. Convenience alone is not enough.

2. Which is an example of a unique identifier?

A. A person's favourite colour

B. A student ID number assigned to one person ✓

A unique identifier is a number or code that identifies one individual, such as a student ID or licence number. A favourite colour does not identify one person.

3. A new gym wants to use the driver licence number of each member as its own member ID. What does IPP 7 say?

A. It should not adopt another organisation's identifier as its own, unless an exception applies ✓

B. It can freely adopt any identifier that another organisation has assigned

IPP 7 stops an organisation from adopting an identifier assigned by another organisation as its own. The gym should create its own member number instead.

4. Which approach follows IPP 7 when building a school library system?

A. Use each student's Medicare number as the library card number

B. Generate a new library card number for each student ✓

Creating its own identifier, only if needed, is better than adopting a government identifier such as a Medicare number.

5. Under IPP 7, an organisation can use or disclose an identifier assigned by another organisation if...

A. the person has consented, or it is needed to fulfil its obligations to the organisation that assigned it ✓

B. it thinks the identifier might be useful for marketing later

These are limited exceptions: consent, meeting obligations to the assigning organisation, or uses permitted under IPP 2. Marketing convenience is not one of them.

Match the Pairs

IPP 7 → Victorian principle that limits when an organisation can assign or share a unique identifier for a person

Unique identifier → A number or code, such as a customer ID, that is given to a person so an organisation can tell them apart from others

Assigning identifiers: an organisation should only give a person a new unique ID if it is necessary to carry out its functions → IF ID is not necessary for function THEN do not assign ID

Using another organisation's identifier: an organisation should not adopt or share another organisation's ID for a person as its own, unless an exception applies → IF ID belongs to another organisation AND no exception THEN do not use as own ID

student.id = tax_file_number // reuse another organisation's ID as our own ID → This adopts an identifier assigned by another organisation as the system's own identifier, which IPP 7 limits. The system should generate its own ID instead, such as student.id = newStudentID().

shareID(customer.id, advertiser) // no consent, no legal need → This discloses a unique identifier to a third party without a necessary function, consent or legal requirement. Under IPP 7 it should not be shared unless an exception applies.

Key Term

IPP 7

Limits an organisation from assigning or sharing a unique identifier for a person unless it is necessary for its functions, with limited exceptions.

Fill in the Blanks

1. IF neededForFunction = TRUE THEN assignId(person) END IF

Hint: Type the Boolean value that must be met before an identifier can be assigned.

2. IF NOT neededForFunction THEN DISPLAY "Do not assign an ID" END IF

Hint: Type the logical keyword that reverses the condition, so the check runs when the identifier is not needed.

3. IF usesOtherOrgId AND NOT exception THEN blockUse(person) END IF

Hint: Type the logical operator that requires both conditions to be true before another organisation's identifier is blocked.

4. IF requiredByLaw OR consentGiven THEN allowUse(personId) END IF

Hint: Type the logical operator that lets either limited exception allow the identifier to be used.

5. IF NOT needed THEN uniqueId ← NULL END IF

Hint: Type the pseudocode value that shows no unique identifier has been assigned.

Spot the Error

Question 1

A FUNCTION assignId(student)

B IF NOT idIsNecessary THEN

C RETURN newUniqueId()

D END IF

E END FUNCTION

Line B — IPP 7 only lets an organisation assign a unique identifier when it is necessary for its functions. The condition must be IF idIsNecessary THEN. With NOT, identifiers would be assigned exactly when they are not needed.

Question 2

A IF TRUE THEN

B member.id ← newMemberId()

C SAVE member

D END IF

Line A — The condition TRUE assigns an identifier to every member regardless of need. IPP 7 requires the check IF idNeededForFunction THEN before assigning one.

Question 3

A extId ← GET licenceNumber

B idChecked ← TRUE

C ownId ← NewCustomerId()

D customerId ← extId

Line D — IPP 7 stops an organisation adopting another organisation's identifier (here the licence number) as its own. The customer ID should come from the organisation's own ID: customerId ← ownId.

Question 4

A extId ← student.centrelinkId

B IF consent OR marketing THEN

C SEND extId TO partner

D END IF

Line B — IPP 7 only allows another organisation's identifier to be used or disclosed in limited exceptions, such as consent or law. Marketing is not an exception, so the condition should be IF consent OR lawRequires THEN.

Question 5

A FUNCTION buildSignup()

B ASK name, email

C ASK licenceNo

D END FUNCTION

Line C — An individual should only be required to provide an identifier if the law requires it (or the identifier is linked to its original purpose, or they consent). The licence number must only be asked for inside the exception: IF byLaw THEN ASK licenceNo.

Student with a class code? Join your class →