The Information Privacy Principles
What do the Information Privacy Principles (IPPs) do ?
There are 11 IPPs in the Privacy Act. The IPPs:
-
regulate the way government agencies collect, store, use and disclose information about people;
-
allow people access to information agencies keep about them; and
-
allow people to request changes to this information.
What Information is included ?
The IPPs and the Privacy Act cover only personal information. This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:
“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”
Clearly, a document need not say the person's name in order to amount to personal information. It will be personal information if the person can be identified from the information.
Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.
Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.
The Information Privacy Principles
Table of the IPPs
|
IPP No. |
Principle |
Relates to: |
|
1 |
Manner and purpose of collection |
|
|
2 |
Solicitation of personal information from the Individual concerned |
Information collection |
|
3 |
Solicitation of personal information generally |
|
|
4 |
Storage and security of personal information |
|
|
5 |
Information relating to records kept by record keeper |
Storage, security and control of |
|
6 |
Access to records containing personal information |
records |
|
7 |
Alteration of records containing personal information |
|
|
8 |
Record keeper to check accuracy of records |
|
|
9 |
Personal information to be used for relevant purposes |
Using and disclosing |
|
10 |
Limits on use of personal information |
personal |
|
11 |
Limits on disclosure of personal information |
information |
Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles
Ipp 1: Restricting collection of information to lawful purposes and by fair means
What do the Information Privacy Principles (IPPs) do ?
There are 11 IPPs in the Privacy Act. The IPPs:
-
regulate the way government agencies collect, store, use and disclose information about people;
-
allow people access to information agencies keep about them; and
-
allow people to request changes to this information.
What Information is included ?
The IPPs and the Privacy Act cover only personal information. This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:
“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”
Clearly, a document need not say the person's name in order to amount to personal information. It will be personal information if the person can be identified from the information.
Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.
Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.
The Information Privacy Principles
Table of the IPPs
|
IPP No. |
Principle |
Relates to: |
|
1 |
Manner and purpose of collection |
|
|
2 |
Solicitation of personal information from the Individual concerned |
Information collection |
|
3 |
Solicitation of personal information generally |
|
|
4 |
Storage and security of personal information |
|
|
5 |
Information relating to records kept by record keeper |
Storage, security and control of |
|
6 |
Access to records containing personal information |
records |
|
7 |
Alteration of records containing personal information |
|
|
8 |
Record keeper to check accuracy of records |
|
|
9 |
Personal information to be used for relevant purposes |
Using and disclosing |
|
10 |
Limits on use of personal information |
personal |
|
11 |
Limits on disclosure of personal information |
information |
Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-1-restricting-collection-information-lawful-purposes-and-fair-means
Ipp 2: Informing the individual concerned why information is collected
What do the Information Privacy Principles (IPPs) do ?
There are 11 IPPs in the Privacy Act. The IPPs:
-
regulate the way government agencies collect, store, use and disclose information about people;
-
allow people access to information agencies keep about them; and
-
allow people to request changes to this information.
What Information is included ?
The IPPs and the Privacy Act cover only personal information. This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:
“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”
Clearly, a document need not say the person's name in order to amount to personal information. It will be personal information if the person can be identified from the information.
Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.
Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.
The Information Privacy Principles
Table of the IPPs
|
IPP No. |
Principle |
Relates to: |
|
1 |
Manner and purpose of collection |
|
|
2 |
Solicitation of personal information from the Individual concerned |
Information collection |
|
3 |
Solicitation of personal information generally |
|
|
4 |
Storage and security of personal information |
|
|
5 |
Information relating to records kept by record keeper |
Storage, security and control of |
|
6 |
Access to records containing personal information |
records |
|
7 |
Alteration of records containing personal information |
|
|
8 |
Record keeper to check accuracy of records |
|
|
9 |
Personal information to be used for relevant purposes |
Using and disclosing |
|
10 |
Limits on use of personal information |
personal |
|
11 |
Limits on disclosure of personal information |
information |
Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-2-informing-individual-concerned-why-information-collected
Ipp 3: ensuring personal information collected is of good quality and not too intrusive
What do the Information Privacy Principles (IPPs) do ?
There are 11 IPPs in the Privacy Act. The IPPs:
-
regulate the way government agencies collect, store, use and disclose information about people;
-
allow people access to information agencies keep about them; and
-
allow people to request changes to this information.
What Information is included ?
The IPPs and the Privacy Act cover only personal information. This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:
“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”
Clearly, a document need not say the person's name in order to amount to personal information. It will be personal information if the person can be identified from the information.
Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.
Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.
The Information Privacy Principles
Table of the IPPs
|
IPP No. |
Principle |
Relates to: |
|
1 |
Manner and purpose of collection |
|
|
2 |
Solicitation of personal information from the Individual concerned |
Information collection |
|
3 |
Solicitation of personal information generally |
|
|
4 |
Storage and security of personal information |
|
|
5 |
Information relating to records kept by record keeper |
Storage, security and control of |
|
6 |
Access to records containing personal information |
records |
|
7 |
Alteration of records containing personal information |
|
|
8 |
Record keeper to check accuracy of records |
|
|
9 |
Personal information to be used for relevant purposes |
Using and disclosing |
|
10 |
Limits on use of personal information |
personal |
|
11 |
Limits on disclosure of personal information |
information |
Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-3-ensuring-personal-information-collected-good-quality-and-not-too
Ipp 4: Ensuring proper security of personal information
What do the Information Privacy Principles (IPPs) do ?
There are 11 IPPs in the Privacy Act. The IPPs:
-
regulate the way government agencies collect, store, use and disclose information about people;
-
allow people access to information agencies keep about them; and
-
allow people to request changes to this information.
What Information is included ?
The IPPs and the Privacy Act cover only personal information. This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:
“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”
Clearly, a document need not say the person's name in order to amount to personal information. It will be personal information if the person can be identified from the information.
Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.
Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.
The Information Privacy Principles
Table of the IPPs
|
IPP No. |
Principle |
Relates to: |
|
1 |
Manner and purpose of collection |
|
|
2 |
Solicitation of personal information from the Individual concerned |
Information collection |
|
3 |
Solicitation of personal information generally |
|
|
4 |
Storage and security of personal information |
|
|
5 |
Information relating to records kept by record keeper |
Storage, security and control of |
|
6 |
Access to records containing personal information |
records |
|
7 |
Alteration of records containing personal information |
|
|
8 |
Record keeper to check accuracy of records |
|
|
9 |
Personal information to be used for relevant purposes |
Using and disclosing |
|
10 |
Limits on use of personal information |
personal |
|
11 |
Limits on disclosure of personal information |
information |
Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-4-ensuring-proper-security-personal-information
Ipp 5: Allowing people to know what personal information is collected and why
What do the Information Privacy Principles (IPPs) do ?
There are 11 IPPs in the Privacy Act. The IPPs:
-
regulate the way government agencies collect, store, use and disclose information about people;
-
allow people access to information agencies keep about them; and
-
allow people to request changes to this information.
What Information is included ?
The IPPs and the Privacy Act cover only personal information. This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:
“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”
Clearly, a document need not say the person's name in order to amount to personal information. It will be personal information if the person can be identified from the information.
Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.
Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.
The Information Privacy Principles
Table of the IPPs
|
IPP No. |
Principle |
Relates to: |
|
1 |
Manner and purpose of collection |
|
|
2 |
Solicitation of personal information from the Individual concerned |
Information collection |
|
3 |
Solicitation of personal information generally |
|
|
4 |
Storage and security of personal information |
|
|
5 |
Information relating to records kept by record keeper |
Storage, security and control of |
|
6 |
Access to records containing personal information |
records |
|
7 |
Alteration of records containing personal information |
|
|
8 |
Record keeper to check accuracy of records |
|
|
9 |
Personal information to be used for relevant purposes |
Using and disclosing |
|
10 |
Limits on use of personal information |
personal |
|
11 |
Limits on disclosure of personal information |
information |
Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-5-allowing-people-know-what-personal-information-collected-and-why
Ipp 6: Allowing people access to their own records
What do the Information Privacy Principles (IPPs) do ?
There are 11 IPPs in the Privacy Act. The IPPs:
-
regulate the way government agencies collect, store, use and disclose information about people;
-
allow people access to information agencies keep about them; and
-
allow people to request changes to this information.
What Information is included ?
The IPPs and the Privacy Act cover only personal information. This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:
“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”
Clearly, a document need not say the person's name in order to amount to personal information. It will be personal information if the person can be identified from the information.
Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.
Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.
The Information Privacy Principles
Table of the IPPs
|
IPP No. |
Principle |
Relates to: |
|
1 |
Manner and purpose of collection |
|
|
2 |
Solicitation of personal information from the Individual concerned |
Information collection |
|
3 |
Solicitation of personal information generally |
|
|
4 |
Storage and security of personal information |
|
|
5 |
Information relating to records kept by record keeper |
Storage, security and control of |
|
6 |
Access to records containing personal information |
records |
|
7 |
Alteration of records containing personal information |
|
|
8 |
Record keeper to check accuracy of records |
|
|
9 |
Personal information to be used for relevant purposes |
Using and disclosing |
|
10 |
Limits on use of personal information |
personal |
|
11 |
Limits on disclosure of personal information |
information |
Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-6-allowing-people-access-their-own-records
Ipp 7: Alteration of records containing personal information.
What do the Information Privacy Principles (IPPs) do ?
There are 11 IPPs in the Privacy Act. The IPPs:
-
regulate the way government agencies collect, store, use and disclose information about people;
-
allow people access to information agencies keep about them; and
-
allow people to request changes to this information.
What Information is included ?
The IPPs and the Privacy Act cover only personal information. This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:
“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”
Clearly, a document need not say the person's name in order to amount to personal information. It will be personal information if the person can be identified from the information.
Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.
Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.
The Information Privacy Principles
Table of the IPPs
|
IPP No. |
Principle |
Relates to: |
|
1 |
Manner and purpose of collection |
|
|
2 |
Solicitation of personal information from the Individual concerned |
Information collection |
|
3 |
Solicitation of personal information generally |
|
|
4 |
Storage and security of personal information |
|
|
5 |
Information relating to records kept by record keeper |
Storage, security and control of |
|
6 |
Access to records containing personal information |
records |
|
7 |
Alteration of records containing personal information |
|
|
8 |
Record keeper to check accuracy of records |
|
|
9 |
Personal information to be used for relevant purposes |
Using and disclosing |
|
10 |
Limits on use of personal information |
personal |
|
11 |
Limits on disclosure of personal information |
information |
Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-7-alteration-records-containing-personal-information
Ipp 8: Record-keepers to check accuracy of personal information before use.
What do the Information Privacy Principles (IPPs) do ?
There are 11 IPPs in the Privacy Act. The IPPs:
-
regulate the way government agencies collect, store, use and disclose information about people;
-
allow people access to information agencies keep about them; and
-
allow people to request changes to this information.
What Information is included ?
The IPPs and the Privacy Act cover only personal information. This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:
“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”
Clearly, a document need not say the person's name in order to amount to personal information. It will be personal information if the person can be identified from the information.
Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.
Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.
The Information Privacy Principles
Table of the IPPs
|
IPP No. |
Principle |
Relates to: |
|
1 |
Manner and purpose of collection |
|
|
2 |
Solicitation of personal information from the Individual concerned |
Information collection |
|
3 |
Solicitation of personal information generally |
|
|
4 |
Storage and security of personal information |
|
|
5 |
Information relating to records kept by record keeper |
Storage, security and control of |
|
6 |
Access to records containing personal information |
records |
|
7 |
Alteration of records containing personal information |
|
|
8 |
Record keeper to check accuracy of records |
|
|
9 |
Personal information to be used for relevant purposes |
Using and disclosing |
|
10 |
Limits on use of personal information |
personal |
|
11 |
Limits on disclosure of personal information |
information |
Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-8-record-keepers-check-accuracy-personal-information-use
Ipp 9: Personal information to be used only for a relevant purpose.
What do the Information Privacy Principles (IPPs) do ?
There are 11 IPPs in the Privacy Act. The IPPs:
-
regulate the way government agencies collect, store, use and disclose information about people;
-
allow people access to information agencies keep about them; and
-
allow people to request changes to this information.
What Information is included ?
The IPPs and the Privacy Act cover only personal information. This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:
“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”
Clearly, a document need not say the person's name in order to amount to personal information. It will be personal information if the person can be identified from the information.
Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.
Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.
The Information Privacy Principles
Table of the IPPs
|
IPP No. |
Principle |
Relates to: |
|
1 |
Manner and purpose of collection |
|
|
2 |
Solicitation of personal information from the Individual concerned |
Information collection |
|
3 |
Solicitation of personal information generally |
|
|
4 |
Storage and security of personal information |
|
|
5 |
Information relating to records kept by record keeper |
Storage, security and control of |
|
6 |
Access to records containing personal information |
records |
|
7 |
Alteration of records containing personal information |
|
|
8 |
Record keeper to check accuracy of records |
|
|
9 |
Personal information to be used for relevant purposes |
Using and disclosing |
|
10 |
Limits on use of personal information |
personal |
|
11 |
Limits on disclosure of personal information |
information |
Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-9-personal-information-be-used-only-relevant-purpose
Ipp 10: Limits on use of personal information
What do the Information Privacy Principles (IPPs) do ?
There are 11 IPPs in the Privacy Act. The IPPs:
-
regulate the way government agencies collect, store, use and disclose information about people;
-
allow people access to information agencies keep about them; and
-
allow people to request changes to this information.
What Information is included ?
The IPPs and the Privacy Act cover only personal information. This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:
“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”
Clearly, a document need not say the person's name in order to amount to personal information. It will be personal information if the person can be identified from the information.
Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.
Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.
The Information Privacy Principles
Table of the IPPs
|
IPP No. |
Principle |
Relates to: |
|
1 |
Manner and purpose of collection |
|
|
2 |
Solicitation of personal information from the Individual concerned |
Information collection |
|
3 |
Solicitation of personal information generally |
|
|
4 |
Storage and security of personal information |
|
|
5 |
Information relating to records kept by record keeper |
Storage, security and control of |
|
6 |
Access to records containing personal information |
records |
|
7 |
Alteration of records containing personal information |
|
|
8 |
Record keeper to check accuracy of records |
|
|
9 |
Personal information to be used for relevant purposes |
Using and disclosing |
|
10 |
Limits on use of personal information |
personal |
|
11 |
Limits on disclosure of personal information |
information |
Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-10-limits-use-personal-information
Ipp 11: Limits on disclosure of personal information
What do the Information Privacy Principles (IPPs) do ?
There are 11 IPPs in the Privacy Act. The IPPs:
-
regulate the way government agencies collect, store, use and disclose information about people;
-
allow people access to information agencies keep about them; and
-
allow people to request changes to this information.
What Information is included ?
The IPPs and the Privacy Act cover only personal information. This is information or opinions that can identify a living person. Personal information is defined in the Privacy Act as:
“information or an opinion (including information or an opinion forming part of a database), whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion...”
Clearly, a document need not say the person's name in order to amount to personal information. It will be personal information if the person can be identified from the information.
Example: If a document, such as an OHS Investigation Report contains information about the person's position in an agency and the office in which they work, it contains personal information for the purposes of the Privacy Act.
Information about a deceased person is not technically personal information, however, the sensitivities of family members should be respected when using or disclosing it.
The Information Privacy Principles
Table of the IPPs
|
IPP No. |
Principle |
Relates to: |
|
1 |
Manner and purpose of collection |
|
|
2 |
Solicitation of personal information from the Individual concerned |
Information collection |
|
3 |
Solicitation of personal information generally |
|
|
4 |
Storage and security of personal information |
|
|
5 |
Information relating to records kept by record keeper |
Storage, security and control of |
|
6 |
Access to records containing personal information |
records |
|
7 |
Alteration of records containing personal information |
|
|
8 |
Record keeper to check accuracy of records |
|
|
9 |
Personal information to be used for relevant purposes |
Using and disclosing |
|
10 |
Limits on use of personal information |
personal |
|
11 |
Limits on disclosure of personal information |
information |
Source URL: https://clik.dva.gov.au/military-compensation-reference-library/historical-information/coas-comcare-operational-advices/current/1997/oa-no-017-obligations-under/attachment/information-privacy-principles/ipp-11-limits-disclosure-personal-information