OAIC issues guidance to assist agencies comply with their privacy processes

Agencies are required to take reasonable steps to implement practices, procedures and systems that ensure compliance with the APPs. In its guide, Privacy management framework: enabling compliance and encouraging good practice, the OAIC provides steps it expects agencies to take to meet their obligations.

The Guide sets out four steps with suggested commitments under each, however, it acknowledges that the commitments set out should be applied flexibly, depending on the agency's size, resources and model.

Step one - Embed a culture of privacy

The Guide suggests agencies commit to:

• treating personal information as a valuable business asset
• appointing roles and allocating responsibilities for privacy management