Privacy Awareness

Course Update

Revised course content and user experience.

The Notifiable Data Breaches Scheme (the Scheme) requires all organisations which fall under the Privacy Act to notify the Australian Information Commissioner and consumers/clients of any data breaches which may cause serious harm to them.

With the introduction of the Scheme the Privacy Awareness module has been updated as set out below:

• The Scheme is introduced as part of the Privacy Act 1988 (the Act);
• The role of the Australian Information Commissioner is updated;
• The Scheme’s objectives and requirements are examined;
• Explanation of when an organisation will be exempt from the scope of the Scheme.

Course Overview

Organisations have a legal responsibility to balance the public interest for free and transparent transfer of information with the protection and appropriate respect of personal information.

This course outlines the legal and ethical responsibilities of both organisations and staff to ensure the privacy of personal or sensitive information.

More specifically, this course aims to give learners a foundation in the responsible collection, use, disclosure, storage and retrieval of information to ensure compliance with privacy legislation, and foster a greater awareness of the issues associated with personal and sensitive information.

Key Content

• Overview of privacy legislation.
• Definition of ‘personal’ and ‘sensitive’ information.
• Steps that must be taken when collecting personal information.
• Steps must be taken to ensure the security of any personal information collected.
• The proper use and disclosure of personal information.
• Rules surrounding direct marketing.
• The rights of individuals to access and correct personal information.
• Considerations when transferring personal information across national or international boundaries.
• Privacy breaches.

Learning Outcomes

At the completion of this course, learners should be able to:

• Understand what constitutes personal information.
• Identify your legal responsibilities to protect personal information.
• Recognise the issues and obligations surrounding the collection, storage, use and disclosure of personal information.
• Manage the handling of personal information according to legislation and workplace policy.