Controls / Privacy Act (Australia)
A clearly expressed, up-to-date privacy policy is published
What the applicant reports, the rules behind it in each jurisdiction, and the evidence an assessor asks for. In the applicant's words: publish a clear, current privacy policy.
In Australia
Only when the Privacy Act 1988 applies to the business.
| Clause | The held text, and the evidence an assessor asks for |
|---|---|
| APP 1 Australian Privacy Principles | Open and transparent management of personal information Manage personal information in an open and transparent way, including having a clearly expressed and up-to-date APP privacy policy. evidence an assessor asks for Published APP privacy policy; Evidence of open data-handling practices; Policy review records |
Questions
- What does the applicant report for this control?
- Whether it is in place, partly in place, not in place or not sure. Partly, not in place and not sure are gaps; not sure reads as a question.
- When is it due on the 90-day schedule?
- Day 90 by the default rule: a Privacy Act line. The underwriter or broker can move it.
- Does this page check the control?
- No. The applicant reports a closure with a date and a note; the schedule records it as reported and never checks it.