Document ID: chunk:federal_register_of_legislation:F2017L01396:body:0:p1
Version: federal_register_of_legislation:F2017L01396
Segment Type: other
Provision Reference: 
Character Range: 0–2969

Privacy (Australian Government Agencies — Governance) APP Code 2017
Made under the Privacy Act 1988

I, Timothy Pilgrim, Australian Information Commissioner, have developed the following APP code and included it on the Codes Register.
Dated 26 October 2017

Timothy Pilgrim
Australian Information Commissioner

Part 1—Introduction

1 Name
         (1) This APP code may be cited as the Privacy (Australian Government Agencies — Governance) APP Code 2017.
         (2) This APP code may also be cited as the Australian Government Agencies Privacy Code.

2 Commencement
This APP code comes into force on 1 July 2018.

3 Authority
This APP code has been developed under section 26G of the Privacy Act 1988.
4 Preamble
    APP 1 is the foundation principle that assists agencies to achieve compliance with the APPs. Compliance with APP 1 is essential to ensure good privacy management and governance practices, which can build community trust and confidence in those practices.
    APP 1 implicitly promotes a 'privacy by design' approach to ensure that privacy compliance is included in the design of information systems and practices from their inception. It does this by requiring agencies to take reasonable steps to implement practices, procedures and systems to ensure compliance with the APPs and any binding registered APP code.

5 Definitions
         Note: A number of expressions used in this APP code are defined in the Act, and have the same meaning in this APP code, including the following:
(a) APP code;
(b) Commissioner;
(c) personal information;
(d) privacy impact assessment; and
(e) sensitive information.
    In this APP code:
    Act means the Privacy Act 1988.
    Agency has the meaning given in section 6(1) of the Act, but for the purposes of this APP code, does not include a Minister.
    APP means an Australian Privacy Principle as set out in the Act.
    handling personal information means dealing with personal information in any way, including managing, collecting, holding, using or disclosing personal information.
    OAIC means the Office of the Australian Information Commissioner.
    PIA means privacy impact assessment.
    Privacy Champion has the meaning given by section 11.
    privacy management plan has the meaning given by section 9.
    Privacy Officer has the meaning given by section 10.

6 Objectives
    The objectives of this APP code are to:

        (a) set out specific requirements that agencies must comply with as part of their compliance with APP 1.2;

        (b) enhance the privacy capability and accountability of agencies;

        (c) promote good privacy governance within agencies to create and embed a culture that respects privacy and treats personal information as a valuable asset; and

        (d) build community trust and confidence in the personal information handling practices of agencies.

7 Agencies bound by this APP code

       This APP code is binding on all agencies as defined