This document discusses the Department of Human Services' implementation of Australia's privacy law reforms, which introduced the Australian Privacy Principles on March 12, 2014. A project team has been established to help business areas prepare for the new obligations. Steps taken include assessing necessary IT solutions, developing guidance resources, and coordinating an inter-departmental working group. The reforms require reviewing how personal information is managed to comply with the new, harmonized principles replacing previous privacy laws.

1. Document 1
LEX 9654
Page 1
s47C and 47E(d)

2. Document 1
LEX 9654
Page 2
s22
s47C and s47E(d)

3. Document 1
LEX 9654
Page 3
s22
s22
s22

4. Document 1
LEX 9654
Page 4
s47C
s47C and s47E(d)
s
s42
s42
s22
s22
s42

5. Document 1
LEX 9654
Page 5
s47C
s42
s22
s22
s42
s42

6. Document 1
LEX 9654
Page 6
s22

7. Document 1
LEX 9654
Page 7
s42
s42
s42
s42

8. Document 1
LEX 9654
Page 8

9. Document 1
LEX 9654
Page 9
s22
s47C

10. Document 1
LEX 9654
Page 10
s22
s22
s22

11. Document 2
LEX 9654
Page 32
s47C and s47E(d)
s42
s42
s47C and s47E(d)

12. Document 2
LEX 9654
Page 34
s22

13. Document 2
LEX 9654
Page 35
s22
s22
s22

14. Document 2
LEX 9654
Page 36
s42

15. Document 2
LEX 9654
Page 37
s47C and 47E(d)
s47C
s47C

16. Document 2
LEX 9654
Page 38
s47C

17. Document 2
LEX 9654
Page 39
s42
s42

18. Document 2
LEX 9654
Page 40
s47C and 47E(d)

19. Document 2
LEX 9654
Page 41

20. Document 2
LEX 9654
Page 42
s47C
s47C

21. Document 2
LEX 9654
Page 43
s47C
s47C
s47Cs47C

22. Document 2
LEX 9654
Page 44

23. Document 2
LEX 9654
Page 45

24. Document 2
LEX 9654
Page 46

25. Document 2
LEX 9654
Page 47

26. Document 2
LEX 9654
Page 48

27. Document 2
LEX 9654
Page 49

28. Document 2
LEX 9654
Page 50

29. Document 2
LEX 9654
Page 51

30. Document 2
LEX 9654
Page 52
s47C

31. Document 2
LEX 9654
Page 53
s42 and 47C

32. Document 3
LEX 9654
Page 54
s47C and s47E(d)
s47C and s47E(d)
s42
s42
s47E(d)
s47E(d)
s47E(d)

33. Document 3
LEX 9654
Page 55
s47C and 47E(d)
s22

34. Document 3
LEX 9654
Page 56
s22
s22
s22

35. Document 3
LEX 9654
Page 57
s47C and 47E(d)
s47C and 47E(d)
s47C
s42

36. Document 3
LEX 9654
Page 58
s47C
s47C
47C

37. Document 3
LEX 9654
Page 59

38. Document 3
LEX 9654
Page 60
s42
s42

39. Document 3
LEX 9654
Page 61
s47C

40. Document 3
LEX 9654
Page 62
s22
s22
s22
s22
s22

41. Document 3
LEX 9654
Page 63
s22
s22
s22
s22
s22
s22
s22
s22
s22
s22

42. Document 3
LEX 9654
Page 64
s22
s22
s22
s22
s22

43. Document 3
LEX 9654
Page 65
s22
s22
s22
s22
s22
s22
s22
s22
s22
s22

44. Document 3
LEX 9654
Page 66

45. Document 3
LEX 9654
Page 67
s22
s47C and s47E(d)

46. Document 3
LEX 9654
Page 68
s22
s22
s22
s22
s22
s22
s22
s22
s22
s42 and s47C

47. Document 3
LEX 9654
Page 69
s22
s22
s22

48. Document 3
LEX 9654
Page 70

49. Document 3
LEX 9654
Page 71
s47C

50. Document 3
LEX 9654
Page 72
s22
s22
s22
s22
s22

51. Document 3
LEX 9654
Page 73
s22
s22
s22
s22
s22
s22
s22
s22
s22
s22
s22

52. Document 3
LEX 9654
Page 74
s22
s22
s22
s47C
s47C
s47C
s47C
s47C

53. Document 3
LEX 9654
Page 75
s22
s22

54. Document 3
LEX 9654
Page 76
s22
s22
s47C and s47E(d)

55. Document 3
LEX 9654
Page 77

56. Document 3
LEX 9654
Page 78
s22

57. Document 3
LEX 9654
Page 79

58. Document 3
LEX 9654
Page 80

59. Document 3
LEX 9654
Page 81
s47C and s47E(d)

60. Document 3
LEX 9654
Page 82

61. Document 3
LEX 9654
Page 83
s22
s22
s22
s22
s22

62. Document 3
LEX 9654
Page 84
s22
s22
s22
s22
s22

63. Document 3
LEX 9654
Page 85
s22
s22
s22
s47C and 47E(d)
s47C and 47E(d)
s22

64. Document 3
LEX 9654
Page 86
s22

65. Document 3
LEX 9654
Page 87
s22 s22
s47E(d)
s47E(d)
s47E(d)
s47C and s47E(d)

66. Document 3
LEX 9654
Page 88
s22

67. Document 3
LEX 9654
Page 89
s22
s22
s22
s22

68. Document 3
LEX 9654
Page 90
s22

69. Document 3
LEX 9654
Page 91

70. Document 3
LEX 9654
Page 92
s22
s47E(d)

71. Document 3
LEX 9654
Page 93
s22
s47E(d)

72. Document 3
LEX 9654
Page 94

73. Document 3
LEX 9654
Page 95

74. Document 3
LEX 9654
Page 96
s22
s22

75. Document 4
LEX 9654
Page 118

76. Document 4
LEX 9654
Page 119
s22

77. Document 6
LEX 9654
Page 177

78. Document 6
LEX 9654
Page 178

79. Document 6
LEX 9654
Page 179

80. Document 6
LEX 9654
Page 180

81. Document 7
LEX 9654
Page 184

82. Document 7
LEX 9654
Page 185
s22

83. Document 9
LEX 9654
Page 190

84. Document 9
LEX 9654
Page 191
s47C

85. Document 9
LEX 9654
Page 192

86. Document 9
LEX 9654
Page 193
s22
s22

87. Document 9
LEX 9654
Page 194
s47C
s47C

88. Document 9
LEX 9654
Page 195
s47C
s47C

89. SIPPLEMENTARY BUDGET ESTIMATES – NOVEMBER 2013
TOPIC: PRIVACY LAW REFORM IMPLEMENTATION
PROGRESS
WITNESS: Sue Bird
Chief Counsel
The department is committed to the implementation of the Privacy Law
Reforms, including the introduction of the Australian Privacy Principles.
In readiness for 12 March 2014, a project team has been established and is
working across the department to assist business areas prepare for, and
implement, their responsibilities and obligations under the Privacy Reforms.
TALKING POINTS
 The commencement of the Australian Privacy Principles in March
2014 will, to some extent, affect the way the department manages
personal information.
Steps taken so far in preparation of the Reforms
 A project team has been established to provide assistance to all
areas of the department in preparation for the implementation of the
Privacy Law Reforms.
 A network of divisional contact officers has been established to
facilitate the dissemination of information about the reforms and to
co-ordinate input from across the department about common
practices and procedures.
 The project team has developed a number of resources for
business areas to assist in implementing the reforms, including
factsheets, process maps and information flow diagrams.
 The project team is co-ordinating the input and assessment of
ICT-based solutions necessary to implement the privacy reforms,
in consultation with business areas and ICT stakeholders.
 The department has convened an Inter-Departmental Discussion
Group with key service delivery agencies, to provide a forum for
sharing and developing implementation strategies.
Document 12
LEX 9654
Page 200

90. BACKGROUND
 The Privacy Amendment (Enhancing Privacy Protection) Act 2012 (Reform Act)
passed through the Australian Parliament on 29 November 2012 and received
royal assent on 12 December 2012.
 The Reform Act includes a set of new, harmonised, privacy principles for both
the public and private sector, called the Australian Privacy Principles (APPs).
 These principles will commence 12 March 2014 and replace the existing
Information Privacy Principles (IPPs).
 There will be 13 new APPs. A number of the APPs differ from the existing IPPs
and will require the department to review, and in some cases modify, the way it
manages personal information.
 The project team has adopted a phased approach to implementation, focusing
on three key areas:
 Operational
(Advice and guidance to business areas about forms, manuals, letters,
instructions, notices, contracts)
 Policy & Procedure
(Advice and guidance to business areas on activities concerning the
collection, release, storage and use of sensitive information)
 Key focus areas
(Advice and guidance to business areas about customer records, employee
awareness, Customer messaging, Service delivery)
 A number of briefings and forums have been held to assist business areas to
prepare for the privacy reforms.
 On 30 April 2013, General and National Managers participated in a
‘familiarisation’ briefing presented by the Legal Services Division.
 On 1 May 2013, the Australian Information Commissioner Professor John
McMillan presented an overview of the reforms to SES officers.
 The project team have, on request, briefed various business areas across the
department about the reforms and have workshopped the potential impacts of
the reforms on those business areas’ operations.
 Additional briefings continue to be provided to key branches to assist with
preparations for implementation of the reforms.
Cleared by: Sue Bird
Position: Chief Counsel, Legal Services Division
Date: /11/13
Contact Officer:
Phone:
Date: 18/11/13
Stakeholder Consultation: No
Document 12
LEX 9654
Page 201
s22
s22

91. DEPARTMENT OF HUMAN SERVICES BRIEF 3.2
Brief 3.2 (10/12/2014) Page 1 of 2
ADDITIONAL ESTIMATES – FEBRUARY 2014
TOPIC: PRIVACY LAW REFORM IMPLEMENTATION
PROGRESS
WITNESS: Sue Bird
Chief Counsel
The department is committed to the implementation of the Privacy Law
Reforms, including the introduction of the Australian Privacy Principles.
In readiness for 12 March 2014, a project team has been established and is
working across the department to assist business areas to prepare for, and
implement, their responsibilities and obligations under the Privacy Reforms.
TALKING POINTS
 The commencement of the Australian Privacy Principles in
March 2014 will, to some extent, affect the way the department
manages personal information.
Steps taken so far in preparation of the Reforms
 A project team has been established to provide assistance to all
areas of the department in preparation for the implementation of the
Privacy Law Reforms.
 An assessment of the necessary ICT-based solutions to help
achieve compliance has been conducted. A three phased
approach to updating systems and work processes has been
agreed upon. Building of phase one ICT solutions has
commenced, with testing of solutions to occur shortly.
 The project team continues to develop resources for business
areas to assist in implementing the reforms, including factsheets,
process maps and information flow diagrams.
 The project team is co-ordinating the preparation of the
department’s Privacy Policy.
 The department has convened an Inter-Departmental Discussion
Group with key service delivery and policy agencies, to provide a
forum for sharing and developing implementation strategies.
Document 15
LEX 9654
Page 209

92. Brief 3.2 (10/12/2014) Page 2 of 2
BACKGROUND
 The Privacy Amendment (Enhancing Privacy Protection) Act 2012 (Reform Act)
passed through the Australian Parliament on 29 November 2012 and received
royal assent on 12 December 2012.
 The Reform Act includes a set of new, harmonised, privacy principles for both
the public and private sector, called the Australian Privacy Principles (APPs).
 These principles will commence 12 March 2014 and replace the existing
Information Privacy Principles (IPPs) for government agencies, and National
Privacy Principles (NPPs) for private sector organisations.
 There will be 13 new APPs. A number of the APPs differ from the existing IPPs
and will require the department to review, and in some cases modify, the way it
manages personal information.
 A number of briefings and forums have been held to assist business areas to
prepare for the privacy reforms.
 On 30 April 2013, General and National Managers participated in a
‘familiarisation’ briefing presented by the Legal Services Division.
 On 1 May 2013, the Australian Information Commissioner Professor John
McMillan presented an overview of the reforms to SES officers.
 The project team have, on request, briefed various business areas across the
department about the reforms and have workshopped the potential impacts of
the reforms on their business processes.
 Additional briefings continue to be provided to assist business areas prepare
for the reforms.
Cleared by: Maris Stipnieks
TITLE: A/g Chief Counsel, Legal Services Division
Date: /02/2014
Contact Officer:
Phone:
Date: 13/02/14
Stakeholder Consultation: No
Document 15
LEX 9654
Page 210
s22
s22

93. DEPARTMENT OF HUMAN SERVICES BRIEF 3.2
Brief 3.2 (10/12/2014) Page 1 of 2
BUDGET ESTIMATES – JUNE 2014
TOPIC: PRIVACY LAW REFORM IMPLEMENTATION
PROGRESS
WITNESS: Maris Stipnieks
General Counsel, Programme Advice Legal and
Ombudsman Branch, Legal Services Division
The department is committed to the implementation of the Privacy Law
Reforms (including the introduction of the Australian Privacy Principles) that
took effect on 12 March 2014.
In readiness for the reforms, a project team was established and continues
working across the department to assist business areas to implement their
responsibilities and obligations under the Privacy Reforms.
TALKING POINTS
 The commencement of the Australian Privacy Principles in
March 2014 has affected the way the department manages
personal information.
 A project team was established to provide assistance to all areas
of the department in preparation for the implementation of the
Privacy Law Reforms.
 An assessment of the necessary ICT-based solutions to help
achieve compliance was undertaken. As a result, a three phased
approach to updating systems and work processes is being
implemented, with all phases to be delivered by March 2015.
 The project team continues to develop and refine resources for
business areas to assist in meeting compliance with the reforms,
including factsheets, process maps and information flow
diagrams.
 The project team co-ordinated the preparation of the
department’s Privacy Policy, now available on the department’s
internet and intranet sites.
 The Inter-Departmental Discussion Group of key service delivery
and policy agencies, convened by the department as a forum for
Document 16
LEX 9654
Page 211

94. Brief 3.2 (10/12/2014) Page 2 of 2
sharing and developing implementation strategies, continues to
meet.
 An internal training package has been prepared and is being
delivered to ensure all staff are aware of their privacy obligations.
 The department also prepared a whole-of-government e-learning
package, which is being implemented in a number of Australian
Government agencies.
BACKGROUND
 The Privacy Amendment (Enhancing Privacy Protection) Act 2012 (Reform
Act) passed through the Australian Parliament on 29 November 2012 and
received Royal Assent on 12 December 2012.
 The Reform Act includes a set of 13 new, harmonised privacy principles for
both the public and private sector, called the Australian Privacy Principles
(APPs).
 These principles commenced on 12 March 2014 and replace both the
existing Information Privacy Principles (IPPs) for government agencies and
the National Privacy Principles (NPPs) for private sector organisations.
 The new requirements under the APPs have meant significant changes for
the department, including:
 Changes to the methods by which the department collects personal
information;
 Greater transparency in the department’s handling of personal
information, as articulated in the department’s privacy policy;
 Changes to letters, forms and products collecting personal
information; and
 Development and provision of training to all departmental staff on
the new privacy obligations.
Cleared by: Maris Stipnieks
Position: General Counsel, Legal Services Division
Date: DD/05/14
Contact Officer:
Phone:
Date: 22/05/14
Stakeholder Consultation: No
Document 16
LEX 9654
Page 212
s22
s22