click below
click below
Normal Size Small Size show me how
All acts
| Question | Answer |
|---|---|
| What is the Privacy Act 1988 (Cth)? | A Commonwealth law protecting personal information handled by federal agencies and private organisations through the Australian Privacy Principles (APPs). |
| What are the Australian Privacy Principles (APPs)? | 13 principles that guide how organisations collect, use, disclose, and protect personal information. |
| What does APP 1 cover? | Open and transparent management of personal information – requires a clear privacy policy. |
| What does APP 2 cover? | Anonymity and pseudonymity – individuals should have the option to remain anonymous when possible. |
| What does APP 3 cover? | Collection – organisations may only collect data necessary for their function, lawfully and fairly. |
| What does APP 6 cover? | Use and disclosure – personal info can only be used for the purpose it was collected unless consent is given. |
| What does APP 7 cover? | Direct marketing – organisations must not use personal data for marketing without consent. |
| What does APP 11 cover? | Security – requires protection from misuse, loss, or unauthorised access; destroy data when no longer needed. |
| What does APP 12 cover? | Access – individuals have the right to access their personal data. |
| What does APP 13 cover? | Correction – individuals can request corrections to inaccurate information. |
| Exam Tip – Federal Context | Use the Privacy Act 1988 (APPs) when the case study involves private or Commonwealth organisations. |
| What is the Privacy and Data Protection Act 2014 (Vic)? | A Victorian law that protects personal information handled by state and local government organisations through Information Privacy Principles (IPPs). |
| What are the Information Privacy Principles (IPPs)? | 10 principles outlining lawful and ethical handling of personal data in the Victorian public sector. |
| What does IPP 1 cover? | Collection – collect only relevant, necessary information lawfully and fairly. |
| What does IPP 2 cover? | Use and disclosure – use data only for its original purpose unless consent is provided. |
| What does IPP 4 cover? | Data security – protect personal info from misuse, loss, or unauthorised access, and destroy when no longer needed. |
| What does IPP 5 cover? | Openness – maintain a public privacy policy explaining how personal data is managed. |
| What does IPP 8 cover? | Anonymity – allow people to remain anonymous where practical. |
| What does IPP 10 cover? | Sensitive information – handle data about health, beliefs, or ethnicity with extra care and consent. |
| What is the role of OVIC? | The Office of the Victorian Information Commissioner enforces compliance and investigates breaches. |
| Exam Tip – State Context | Use the Privacy and Data Protection Act 2014 (IPPs) when the scenario involves Victorian government organisations. |
| Exam Tip – Data Security | Always link IPP 4 to encryption, authentication, and secure data storage. |
| What is the Health Records Act 2001 (Vic)? | A Victorian law protecting health information handled by public and private health organisations through Health Privacy Principles (HPPs). |
| What are the Health Privacy Principles (HPPs)? | 11 principles governing how health information is collected, used, disclosed, and stored. |
| What does HPP 1 cover? | Collection – collect health info fairly, lawfully, with consent, and only when necessary. |
| What does HPP 2 cover? | Use and disclosure – use health data only for the primary purpose unless consent is given or law requires it. |
| What does HPP 3 cover? | Data quality – ensure health information is accurate and current. |
| What does HPP 4 cover? | Data security – protect health data from unauthorised access and destroy it when no longer needed. |
| What does HPP 5 cover? | Openness – organisations must clearly explain how health data is managed. |
| What does HPP 6 cover? | Access and correction – individuals can view or correct their health data. |
| What does HPP 9 cover? | Transborder data flows – protect health info sent outside Victoria with equivalent privacy safeguards. |
| What does HPP 10 cover? | Sensitive information – collect only with explicit consent and for a valid health purpose. |
| Exam Tip – Health Context | Use the Health Records Act 2001 (HPPs) when the scenario involves hospitals, clinics, or patient data. |
| Exam Tip – Health Security | Always link HPP 4 to encryption, restricted access, and secure health databases. |
| Compare APPs, IPPs, and HPPs. | APPs = Federal & private organisations; IPPs = Victorian public sector; HPPs = Health data (public & private). |
| When should you reference the Privacy Act 1988? | When discussing federal or private sector data handling. |
| When should you reference the Privacy and Data Protection Act 2014? | When discussing Victorian government or council projects. |
| When should you reference the Health Records Act 2001? | When discussing healthcare or sensitive health data in Victoria. |
| What are common exam privacy keywords to include? | Consent, purpose, lawful collection, data security, anonymity, openness, accuracy, disclosure. |
| Exam Tip – Linking Laws | Always match the correct Act to the scenario’s organisation type and data type. |
| Exam Tip – Ethics vs Law | Legal compliance (laws like APPs/IPPs/HPPs) is mandatory; ethical behaviour (honesty, fairness, transparency) is expected beyond legal duties. |
| Exam Tip – Data Lifecycle | Mention privacy compliance at all stages – collection, storage, use, sharing, and disposal. |
| Exam Tip – Common Mistake | Don’t mix APPs (federal) with IPPs/HPPs (state) in your answers – link each to the correct context. |
| Exam Tip – Example Line | “Under IPP 4 of the Privacy and Data Protection Act 2014, organisations must secure personal data using encryption and access controls.” |