The Information Privacy Principles

What do the Information Privacy Principles (IPPs) do ?

There are 11 IPPs in the Privacy Act.  The IPPs:

  • regulate the way government agencies collect, store, use and disclose information about people;

  • allow people access to information agencies keep about them; and

  • allow people to request changes to this information.

What Information is included ?

The IPPs and the Privacy Act cover only personal information.  This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:

“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”

Clearly, a document need not say the person's name in order to amount to personal information.  It will be personal information if the person can be identified from the information.

Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.

Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.


The Information Privacy Principles

Table of the IPPs

IPP No.

Principle

Relates to:

1

Manner and purpose of collection

2

Solicitation of personal information from the Individual concerned

Information collection

3

Solicitation of personal information generally

4

Storage and security of personal information

5

Information relating to records kept by record keeper

Storage, security and control of

6

Access to records containing personal information

records

7

Alteration of records containing personal information

8

Record keeper to check accuracy of records

9

Personal information to be used for relevant purposes

Using and disclosing

10

Limits on use of personal information

personal

11

Limits on disclosure of personal information

information

Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles

Ipp 1: Restricting collection of information to lawful purposes and by fair means

What do the Information Privacy Principles (IPPs) do ?

There are 11 IPPs in the Privacy Act.  The IPPs:

  • regulate the way government agencies collect, store, use and disclose information about people;

  • allow people access to information agencies keep about them; and

  • allow people to request changes to this information.

What Information is included ?

The IPPs and the Privacy Act cover only personal information.  This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:

“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”

Clearly, a document need not say the person's name in order to amount to personal information.  It will be personal information if the person can be identified from the information.

Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.

Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.


The Information Privacy Principles

Table of the IPPs

IPP No.

Principle

Relates to:

1

Manner and purpose of collection

2

Solicitation of personal information from the Individual concerned

Information collection

3

Solicitation of personal information generally

4

Storage and security of personal information

5

Information relating to records kept by record keeper

Storage, security and control of

6

Access to records containing personal information

records

7

Alteration of records containing personal information

8

Record keeper to check accuracy of records

9

Personal information to be used for relevant purposes

Using and disclosing

10

Limits on use of personal information

personal

11

Limits on disclosure of personal information

information

Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-1-restricting-collection-information-lawful-purposes-and-fair-means

Ipp 2: Informing the individual concerned why information is collected

What do the Information Privacy Principles (IPPs) do ?

There are 11 IPPs in the Privacy Act.  The IPPs:

  • regulate the way government agencies collect, store, use and disclose information about people;

  • allow people access to information agencies keep about them; and

  • allow people to request changes to this information.

What Information is included ?

The IPPs and the Privacy Act cover only personal information.  This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:

“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”

Clearly, a document need not say the person's name in order to amount to personal information.  It will be personal information if the person can be identified from the information.

Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.

Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.


The Information Privacy Principles

Table of the IPPs

IPP No.

Principle

Relates to:

1

Manner and purpose of collection

2

Solicitation of personal information from the Individual concerned

Information collection

3

Solicitation of personal information generally

4

Storage and security of personal information

5

Information relating to records kept by record keeper

Storage, security and control of

6

Access to records containing personal information

records

7

Alteration of records containing personal information

8

Record keeper to check accuracy of records

9

Personal information to be used for relevant purposes

Using and disclosing

10

Limits on use of personal information

personal

11

Limits on disclosure of personal information

information

Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-2-informing-individual-concerned-why-information-collected

Ipp 3: ensuring personal information collected is of good quality and not too intrusive

What do the Information Privacy Principles (IPPs) do ?

There are 11 IPPs in the Privacy Act.  The IPPs:

  • regulate the way government agencies collect, store, use and disclose information about people;

  • allow people access to information agencies keep about them; and

  • allow people to request changes to this information.

What Information is included ?

The IPPs and the Privacy Act cover only personal information.  This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:

“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”

Clearly, a document need not say the person's name in order to amount to personal information.  It will be personal information if the person can be identified from the information.

Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.

Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.


The Information Privacy Principles

Table of the IPPs

IPP No.

Principle

Relates to:

1

Manner and purpose of collection

2

Solicitation of personal information from the Individual concerned

Information collection

3

Solicitation of personal information generally

4

Storage and security of personal information

5

Information relating to records kept by record keeper

Storage, security and control of

6

Access to records containing personal information

records

7

Alteration of records containing personal information

8

Record keeper to check accuracy of records

9

Personal information to be used for relevant purposes

Using and disclosing

10

Limits on use of personal information

personal

11

Limits on disclosure of personal information

information

Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-3-ensuring-personal-information-collected-good-quality-and-not-too

Ipp 4: Ensuring proper security of personal information

What do the Information Privacy Principles (IPPs) do ?

There are 11 IPPs in the Privacy Act.  The IPPs:

  • regulate the way government agencies collect, store, use and disclose information about people;

  • allow people access to information agencies keep about them; and

  • allow people to request changes to this information.

What Information is included ?

The IPPs and the Privacy Act cover only personal information.  This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:

“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”

Clearly, a document need not say the person's name in order to amount to personal information.  It will be personal information if the person can be identified from the information.

Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.

Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.


The Information Privacy Principles

Table of the IPPs

IPP No.

Principle

Relates to:

1

Manner and purpose of collection

2

Solicitation of personal information from the Individual concerned

Information collection

3

Solicitation of personal information generally

4

Storage and security of personal information

5

Information relating to records kept by record keeper

Storage, security and control of

6

Access to records containing personal information

records

7

Alteration of records containing personal information

8

Record keeper to check accuracy of records

9

Personal information to be used for relevant purposes

Using and disclosing

10

Limits on use of personal information

personal

11

Limits on disclosure of personal information

information

Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-4-ensuring-proper-security-personal-information

Ipp 5: Allowing people to know what personal information is collected and why

What do the Information Privacy Principles (IPPs) do ?

There are 11 IPPs in the Privacy Act.  The IPPs:

  • regulate the way government agencies collect, store, use and disclose information about people;

  • allow people access to information agencies keep about them; and

  • allow people to request changes to this information.

What Information is included ?

The IPPs and the Privacy Act cover only personal information.  This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:

“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”

Clearly, a document need not say the person's name in order to amount to personal information.  It will be personal information if the person can be identified from the information.

Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.

Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.


The Information Privacy Principles

Table of the IPPs

IPP No.

Principle

Relates to:

1

Manner and purpose of collection

2

Solicitation of personal information from the Individual concerned

Information collection

3

Solicitation of personal information generally

4

Storage and security of personal information

5

Information relating to records kept by record keeper

Storage, security and control of

6

Access to records containing personal information

records

7

Alteration of records containing personal information

8

Record keeper to check accuracy of records

9

Personal information to be used for relevant purposes

Using and disclosing

10

Limits on use of personal information

personal

11

Limits on disclosure of personal information

information

Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-5-allowing-people-know-what-personal-information-collected-and-why

Ipp 6: Allowing people access to their own records

What do the Information Privacy Principles (IPPs) do ?

There are 11 IPPs in the Privacy Act.  The IPPs:

  • regulate the way government agencies collect, store, use and disclose information about people;

  • allow people access to information agencies keep about them; and

  • allow people to request changes to this information.

What Information is included ?

The IPPs and the Privacy Act cover only personal information.  This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:

“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”

Clearly, a document need not say the person's name in order to amount to personal information.  It will be personal information if the person can be identified from the information.

Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.

Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.


The Information Privacy Principles

Table of the IPPs

IPP No.

Principle

Relates to:

1

Manner and purpose of collection

2

Solicitation of personal information from the Individual concerned

Information collection

3

Solicitation of personal information generally

4

Storage and security of personal information

5

Information relating to records kept by record keeper

Storage, security and control of

6

Access to records containing personal information

records

7

Alteration of records containing personal information

8

Record keeper to check accuracy of records

9

Personal information to be used for relevant purposes

Using and disclosing

10

Limits on use of personal information

personal

11

Limits on disclosure of personal information

information

Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-6-allowing-people-access-their-own-records

Ipp 7: Alteration of records containing personal information.

What do the Information Privacy Principles (IPPs) do ?

There are 11 IPPs in the Privacy Act.  The IPPs:

  • regulate the way government agencies collect, store, use and disclose information about people;

  • allow people access to information agencies keep about them; and

  • allow people to request changes to this information.

What Information is included ?

The IPPs and the Privacy Act cover only personal information.  This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:

“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”

Clearly, a document need not say the person's name in order to amount to personal information.  It will be personal information if the person can be identified from the information.

Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.

Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.


The Information Privacy Principles

Table of the IPPs

IPP No.

Principle

Relates to:

1

Manner and purpose of collection

2

Solicitation of personal information from the Individual concerned

Information collection

3

Solicitation of personal information generally

4

Storage and security of personal information

5

Information relating to records kept by record keeper

Storage, security and control of

6

Access to records containing personal information

records

7

Alteration of records containing personal information

8

Record keeper to check accuracy of records

9

Personal information to be used for relevant purposes

Using and disclosing

10

Limits on use of personal information

personal

11

Limits on disclosure of personal information

information

Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-7-alteration-records-containing-personal-information

Ipp 8: Record-keepers to check accuracy of personal information before use.

What do the Information Privacy Principles (IPPs) do ?

There are 11 IPPs in the Privacy Act.  The IPPs:

  • regulate the way government agencies collect, store, use and disclose information about people;

  • allow people access to information agencies keep about them; and

  • allow people to request changes to this information.

What Information is included ?

The IPPs and the Privacy Act cover only personal information.  This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:

“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”

Clearly, a document need not say the person's name in order to amount to personal information.  It will be personal information if the person can be identified from the information.

Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.

Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.


The Information Privacy Principles

Table of the IPPs

IPP No.

Principle

Relates to:

1

Manner and purpose of collection

2

Solicitation of personal information from the Individual concerned

Information collection

3

Solicitation of personal information generally

4

Storage and security of personal information

5

Information relating to records kept by record keeper

Storage, security and control of

6

Access to records containing personal information

records

7

Alteration of records containing personal information

8

Record keeper to check accuracy of records

9

Personal information to be used for relevant purposes

Using and disclosing

10

Limits on use of personal information

personal

11

Limits on disclosure of personal information

information

Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-8-record-keepers-check-accuracy-personal-information-use

Ipp 9: Personal information to be used only for a relevant purpose.

What do the Information Privacy Principles (IPPs) do ?

There are 11 IPPs in the Privacy Act.  The IPPs:

  • regulate the way government agencies collect, store, use and disclose information about people;

  • allow people access to information agencies keep about them; and

  • allow people to request changes to this information.

What Information is included ?

The IPPs and the Privacy Act cover only personal information.  This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:

“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”

Clearly, a document need not say the person's name in order to amount to personal information.  It will be personal information if the person can be identified from the information.

Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.

Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.


The Information Privacy Principles

Table of the IPPs

IPP No.

Principle

Relates to:

1

Manner and purpose of collection

2

Solicitation of personal information from the Individual concerned

Information collection

3

Solicitation of personal information generally

4

Storage and security of personal information

5

Information relating to records kept by record keeper

Storage, security and control of

6

Access to records containing personal information

records

7

Alteration of records containing personal information

8

Record keeper to check accuracy of records

9

Personal information to be used for relevant purposes

Using and disclosing

10

Limits on use of personal information

personal

11

Limits on disclosure of personal information

information

Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-9-personal-information-be-used-only-relevant-purpose

Ipp 10: Limits on use of personal information

What do the Information Privacy Principles (IPPs) do ?

There are 11 IPPs in the Privacy Act.  The IPPs:

  • regulate the way government agencies collect, store, use and disclose information about people;

  • allow people access to information agencies keep about them; and

  • allow people to request changes to this information.

What Information is included ?

The IPPs and the Privacy Act cover only personal information.  This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:

“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”

Clearly, a document need not say the person's name in order to amount to personal information.  It will be personal information if the person can be identified from the information.

Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.

Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.


The Information Privacy Principles

Table of the IPPs

IPP No.

Principle

Relates to:

1

Manner and purpose of collection

2

Solicitation of personal information from the Individual concerned

Information collection

3

Solicitation of personal information generally

4

Storage and security of personal information

5

Information relating to records kept by record keeper

Storage, security and control of

6

Access to records containing personal information

records

7

Alteration of records containing personal information

8

Record keeper to check accuracy of records

9

Personal information to be used for relevant purposes

Using and disclosing

10

Limits on use of personal information

personal

11

Limits on disclosure of personal information

information

Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-10-limits-use-personal-information

Ipp 11: Limits on disclosure of personal information

What do the Information Privacy Principles (IPPs) do ?

There are 11 IPPs in the Privacy Act.  The IPPs:

  • regulate the way government agencies collect, store, use and disclose information about people;

  • allow people access to information agencies keep about them; and

  • allow people to request changes to this information.

What Information is included ?

The IPPs and the Privacy Act cover only personal information.  This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:

“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”

Clearly, a document need not say the person's name in order to amount to personal information.  It will be personal information if the person can be identified from the information.

Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.

Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.


The Information Privacy Principles

Table of the IPPs

IPP No.

Principle

Relates to:

1

Manner and purpose of collection

2

Solicitation of personal information from the Individual concerned

Information collection

3

Solicitation of personal information generally

4

Storage and security of personal information

5

Information relating to records kept by record keeper

Storage, security and control of

6

Access to records containing personal information

records

7

Alteration of records containing personal information

8

Record keeper to check accuracy of records

9

Personal information to be used for relevant purposes

Using and disclosing

10

Limits on use of personal information

personal

11

Limits on disclosure of personal information

information

Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-11-limits-disclosure-personal-information