11Privacy Champion

11 Privacy Champion

(1) An agency must, at all times, have a designated Privacy Champion.

(2) An agency may designate an officer as a Privacy Champion by reference to a position or role within the agency.

(3) The Privacy Champion must be a senior official within the agency.

(4) An agency must ensure that the following Privacy Champion functions are carried out:

(a) promoting a culture of privacy within the agency that values and protects personal information;

(b) providing leadership within the agency on broader strategic privacy issues;

(c) reviewing and/or approving the agency’s privacy management plan, and documented reviews of the agency’s progress against the privacy management plan; and

(d) providing regular reports to the agency’s executive, including about any privacy issues arising from the agency’s handling of personal information.

(5) An agency's designated Privacy Officer may also be its designated Privacy Champion.