Privacy Policy & Data Protection

Privacy Policy

In Queensland, Australia, privacy laws are mainly governed by two legislative frameworks:

Information Privacy Act 2009 (IPA): This act governs the handling of personal information by Queensland Government agencies, local councils, and other public authorities. It ensures that these entities manage personal information responsibly and respect privacy rights. The IPA sets out **11 Information Privacy Principles (IPPs)**, which are rules for how personal information must be collected, stored, used, and disclosed.
Privacy Act 1988 (Cth): While the Information Privacy Act applies primarily to Queensland government entities, the **Privacy Act 1988** (Commonwealth) applies to private sector organizations in Queensland with an annual turnover of more than $3 million, as well as health service providers, and some small businesses. This act outlines the Australian Privacy Principles (APPs), which dictate how personal information must be managed at a federal level.

Key Provisions of the Information Privacy Act 2009 (Queensland):

Collection of Personal Information: Agencies can only collect personal information if it is necessary for a lawful function or activity. Individuals must be informed about the purpose of the collection and any legal obligations to provide the information.
Use and Disclosure: Personal information collected must only be used for the primary purpose for which it was collected unless specific exceptions apply, such as consent from the individual or legal requirements.
Data Security: Agencies must take reasonable steps to protect personal information from loss, misuse, unauthorized access, modification, or disclosure.
Access and Correction: Individuals have the right to request access to their personal information held by agencies and ask for corrections if the information is inaccurate, out-of-date, incomplete, or misleading.
Cross-border Disclosure: Agencies must ensure that personal information transferred outside Queensland is handled in a manner consistent with the IPPs.

For businesses operating in Queensland, compliance with the Privacy Act 1988 may also be required, particularly the handling of personal information for commercial purposes. Organizations must follow the APPs, which are similar in scope but apply at a national level.

Resources:

The Office of the Information Commissioner Queensland (OIC) oversees compliance with the Information Privacy Act.
For private sector entities, the Office of the Australian Information Commissioner (OAIC) monitors compliance with the Privacy Act 1988. Would you like to know more about a specific aspect of these privacy policies?