Document ID: chunk:federal_register_of_legislation:F2021L00231:clause:1_9
Version: federal_register_of_legislation:F2021L00231
Segment Type: clause
Provision Reference: sch 1 cl 9
Character Range: 13183–15961

9  Australian Privacy Principle 1: Open and transparent management of personal information (as customised for the purposes of this Code)
       (1)    The object of this principle is to ensure that APP entities manage personal information in an open and transparent way.
       Compliance with the Australian Privacy Principles
       (2)    When handling identifiable research information, Research Organisations must take such steps as are reasonable in the circumstances to implement practices, procedures and systems relating to the Research Organisation's functions or activities to ensure that:
         (a)    the Research Organisation complies with the Australian Privacy Principles and this Code; and
         (b)    will enable the Research Organisation to deal with inquiries or complaints from individuals about the Research Organisation's compliance with this Code.
  APP Privacy Policy
       (3)    A research organisation must have a clearly expressed and up-to-date research information privacy policy about the management of identifiable research information by the Organisation.
       (4)    Without limiting subsection 9(3), the research information privacy policy must contain the following information:
         (a)    the kinds of identifiable research information that the organisation collects and holds;
         (b)    how the organisation collects and holds identifiable research information;
         (c)    the research purposes for which the organisation collects, holds, uses and discloses identifiable research information;
         (d)    how an individual may access identifiable research information about the individual that is held by the organisation and seek correction of such information;
         (e)    how an individual may complain about a breach of this Code, and how the organisation will deal with such a complaint;
         (f)     whether the organisation is likely to disclose identifiable research information to overseas recipients;
         (g)    if the organisation is likely to disclose identifiable research information to overseas recipients, the countries in which such recipients are likely to be located if it is practicable to specify those countries in the policy.
       Availability of privacy policy
       (5)    A Research organisation must take such steps as are reasonable in the circumstances to make its research information privacy policy available:
         (a)    free of charge; and
         (b)    in such form as is appropriate.
       (6)    If a person or body requests a copy of the research information privacy policy of a Research Organisation in a particular form, the organisation must take such steps as are reasonable in the circumstances to give the person or body a copy in that form.