Document ID: chunk:federal_register_of_legislation:F2017L01396:body:0:p4
Version: federal_register_of_legislation:F2017L01396
Segment Type: other
Provision Reference: 
Character Range: 7861–9212

the PIAs it conducts. An agency must publish the register, or a version of the register, on its website.

        (2) An agency may provide a copy of the register, and any PIAs that are listed on the register, to the Commissioner on request from the Commissioner.

PART 4—Internal privacy capability

16 Privacy education and training

         (1) An agency must include appropriate privacy education or training in any staff induction program it provides. The privacy education must address the privacy obligations of agency staff, and agency policies and procedures relating to privacy.

         (2) An agency must take reasonable steps to provide appropriate privacy education or training annually to all staff who have access to personal information in the course of performing their duties as a staff member.

17 Regular review of internal privacy processes

        (1) An agency must regularly review and update its privacy practices, procedures and systems, to ensure their currency and adequacy for the purposes of compliance with the APPs. The scope of the review must include any:

            (a) privacy policy prepared for the purposes of APP 1; and

            (b) privacy notice prepared for the purposes of APP 5.

        (2) An agency must monitor compliance with its privacy practices, procedures and systems regularly.