If any security measures, such as encryption, are provided information regarding these should be provided to the individual. For example, the agency may include a hyperlink to a brief statement about Internet security and, if they use encryption, to a statement about the product used and the level of protection it provides. If personal information is collected via an agency website this should be done by sufficiently secure means. Individuals should be provided with alternative means of providing personal information to the agency, other than via the website. The Privacy statement should address security issues where appropriate.
Most websites are accessible to anyone with web access.
Sites such as these which are not generally available to the public are not GAPs. Therefore agencies should not disclose or publish their records of personal information on the web simply because the same information is made publicly available in another form. Another option may be to de-identify or remove personal information from the document before publishing it on the web. Publication of Personal Information on a Website Agencies may publish personal information if it is collected for this purpose and if the collection complies with the Privacy Act. It is important, where consent for publication is sought, that it is informed consent.