sch.3-sec.1QPP 1—open and transparent management of personal information

### sch.3-sec.1 QPP 1—open and transparent management of personal information The object of this QPP is to ensure that agencies manage personal information in an open and transparent way. Compliance with the QPPs etc. An agency must take reasonable steps to implement practices, procedures and systems relating to the agency’s functions or activities that— will ensure the agency complies with the QPPs and any QPP code that binds the agency; and will enable the agency to deal with inquiries and complaints from individuals about the agency’s compliance with the QPPs or any QPP code that binds the agency. QPP privacy policy An agency must have a clearly expressed and up-to-date policy (the QPP privacy policy ) about the management of personal information by the agency. Without limiting QPP 1.3, the QPP privacy policy of the agency must contain the following information— the kinds of personal information that the agency collects and holds; how the agency collects and holds personal information; the purposes for which the agency collects, holds, uses and discloses personal information; how an individual may access personal information about the individual that is held by the agency and seek the correction of the information; how an individual may complain about a breach of the QPPs, or any QPP code that binds the agency, and how the agency will deal with the complaint; whether the agency is likely to disclose personal information to entities outside Australia; if the agency is likely to disclose personal information to entities outside of Australia—the countries in which the recipients are likely to be located if it is practicable to state those countries in the policy. Availability of QPP privacy policy etc. An agency must take reasonable steps to make its QPP privacy policy available— free of charge; and in an appropriate form. publication on the agency’s website If a person requests a copy of the QPP privacy policy of an agency in a particular form, the agency must take reasonable steps to give the person a copy in that form. sch 3 s 1 sub 2023 No. 32 s 74 (sch.3-sec.1-ssec.1.1) The object of this QPP is to ensure that agencies manage personal information in an open and transparent way. (sch.3-sec.1-ssec) Compliance with the QPPs etc. (sch.3-sec.1-ssec.1.2) An agency must take reasonable steps to implement practices, procedures and systems relating to the agency’s functions or activities that— will ensure the agency complies with the QPPs and any QPP code that binds the agency; and will enable the agency to deal with inquiries and complaints from individuals about the agency’s compliance with the QPPs or any QPP code that binds the agency. (sch.3-sec.1-ssec-oc.2) QPP privacy policy (sch.3-sec.1-ssec.1.3) An agency must have a clearly expressed and up-to-date policy (the QPP privacy policy ) about the management of personal information by the agency. (sch.3-sec.1-ssec.1.4) Without limiting QPP 1.3, the QPP privacy policy of the agency must contain the following information— the kinds of personal information that the agency collects and holds; how the agency collects and holds personal information; the purposes for which the agency collects, holds, uses and discloses personal information; how an individual may access personal information about the individual that is held by the agency and seek the correction of the information; how an individual may complain about a breach of the QPPs, or any QPP code that binds the agency, and how the agency will deal with the complaint; whether the agency is likely to disclose personal information to entities outside Australia; if the agency is likely to disclose personal information to entities outside of Australia—the countries in which the recipients are likely to be located if it is practicable to state those countries in the policy. (sch.3-sec.1-ssec-oc.3) Availability of QPP privacy policy etc. (sch.3-sec.1-ssec.1.5) An agency must take reasonable steps to make its QPP privacy policy available— free of charge; and in an appropriate form. publication on the agency’s website (sch.3-sec.1-ssec.1.6) If a person requests a copy of the QPP privacy policy of an agency in a particular form, the agency must take reasonable steps to give the person a copy in that form. - (a) will ensure the agency complies with the QPPs and any QPP code that binds the agency; and - (b) will enable the agency to deal with inquiries and complaints from individuals about the agency’s compliance with the QPPs or any QPP code that binds the agency. - (a) the kinds of personal information that the agency collects and holds; - (b) how the agency collects and holds personal information; - (c) the purposes for which the agency collects, holds, uses and discloses personal information; - (d) how an individual may access personal information about the individual that is held by the agency and seek the correction of the information; - (e) how an individual may complain about a breach of the QPPs, or any QPP code that binds the agency, and how the agency will deal with the complaint; - (f) whether the agency is likely to disclose personal information to entities outside Australia; - (g) if the agency is likely to disclose personal information to entities outside of Australia—the countries in which the recipients are likely to be located if it is practicable to state those countries in the policy. - (a) free of charge; and - (b) in an appropriate form.