Annual Report 2006-07:

Table of Contents

User's Guide

• ACT Government
• How to find out more
• Non-English Speakers

Commissioner's Overview 2006-07

• The year ahead
• The year in review - a summary

Chapter 1 Respecting Privacy

• 1.1 Review of Performance
• 1.2 Australian Law Reform Commission Review of Privacy
• 1.3 Privacy and the Australian Government
  • 1.3.1 Guide to Privacy Impact Assessments
  • 1.3.2 Australian Government Health and Social Services Access Card
  • 1.3.3 Department of Immigration and Citizenship
  • 1.3.4 Australian Government Information Management Office – Australian Government Smartcard Framework
  • 1.3.5 Identity and Border Security
  • 1.3.6 Law Enforcement
  • 1.3.7 AusCheck
  • 1.3.8 Anti-Money Laundering and Counter-Terrorism Financing
  • 1.3.9 Emergencies and Disasters
  • 1.3.10 Government Agency Coercive Information-Gathering Powers
  • 1.3.11 Taxation Secrecy and Disclosure Provisions Review
  • 1.3.12 Personal Property Securities
  • 1.3.13 Mutual Assistance and Extradition
• 1.4 Privacy and the Australian Capital Territory Government
• 1.5 Privacy and Business
  • 1.5.1 Review of the Private Sector Provisions of the Privacy Act
  • 1.5.2 Privacy Codes
  • 1.5.3 Credit Reporting
  • 1.5.4 Tax File Number Guidelines
  • 1.5.5 Research and Data-Holding
• 1.6 Privacy and the Health Sector
  • 1.6.1 Electronic Health Records
  • 1.6.2 Section 135AA Guidelines Review
  • 1.6.3 Prescription Shopping Information Service
  • 1.6.4 Section 95AA Guidelines
• 1.7 Privacy and the Information and Communications Technology Sector
  • 1.7.1 Do Not Call Register
  • 1.7.2 Integrated Public Number Database
  • 1.7.3 Telecommunications and E-Marketing Industry Codes
  • 1.7.4 Telecommunications Interception legislation

Chapter 2 Promoting Privacy

• 2.1 Review of Performance
• 2.2 Privacy Website
  • 2.2.1 Website Redevelopment
  • 2.2.2 Website Usage
  • 2.2.3 Layered Privacy Policy
• 2.3 Media
• 2.4 Speeches and Presentations
• 2.5 Publications
  • 2.5.1 Privacy Matters Newsletter
  • 2.5.2 Publications Review
• 2.6 Community Attitudes Survey
• 2.7 Networking for Privacy Solutions
  • 2.7.1 Privacy Connections
  • 2.7.2 Privacy Contact Officer Network
  • 2.7.3 Privacy Awareness Week
• 2.8 Privacy Advisory Committee
• 2.9 International Liaison
  • 2.9.1 Asia Pacific Privacy Authorities
  • 2.9.2 28th International Conference of Data Protection and Privacy Commissioners

Chapter 3 Protecting Privacy

• 3.1 Review of Performance
• 3.2 Responding to Enquiries
  • 3.2.1 Telephone Enquiries
  • 3.2.2 Written Enquiries
• 3.3 Responding to Complaints
  • 3.3.1 Complaints received during 2006–07
  • 3.3.2 Complaints closed during 2006–07
    • 3.3.2.1 Complaints closed following investigations
    • 3.3.2.2 ­Nature of remedies achieved by conciliation following investigation
    • 3.3.2.3 ­Complaints closed following preliminary enquiries
    • 3.3.2.4 ­Nature of remedies achieved following preliminary enquirie
    • 3.3.2.5 Complaints closed without investigation
    • 3.3.2.6 ­Compliance issues in National Privacy Principle complaints
    • 3.3.2.7 ­Compliance issues in Information Privacy Principle complaints
    • 3.3.2.8 ­Compliance issues in Credit Reporting complaints
• 3.4 Own Motion Investigations
  • 3.4.1 Issues in Own Motion Investigations
  • 3.4.2 Outcomes of Own Motion Investigations
• 3.5 Case Notes
• 3.6 Complaints and Enquiries Statistics on www.privacy.gov.au
• 3.7 Reports of Complaints under
• 3.8 Audits
  • 3.8.1 Audits Commenced in 2006–07
    • 3.8.1.1 ACT Government Audits
    • 3.8.1.2 Biometrics for Border Control Audits
    • 3.8.1.3 Australian Government Audits
  • 3.8.2 Audits Finalised in 2006–07
    • 3.8.2.1 ACT Government Audits
    • 3.8.2.2 Identity Security Audits
• 3.9 Personal Information Digest
• 3.10 Monitoring Government Comparisons of Data Sets
  • 3.10.1 Matching under the Data-matching Program (Assistance and Tax) Act 1990 and statutory data-matching guidelines
    • 3.10.1.1 Inspections
  • 3.10.2 Matching under the Guidelines for the Use of Data-matching in Commonwealth Administration (the voluntary data-matching guidelines)

Chapter 4 Management and Accountability

• 4.1 Administrative Arrangements
  • 4.1.1 Human Rights and Equal Opportunity Commission Memorandum of Understanding
  • 4.1.2 Attorney-General’s Department Memorandum of Understanding
  • 4.1.3 ACT Government Memorandum of Understanding
  • 4.1.4 Centrelink
  • 4.1.5 Department of Human Services Memorandum of Understanding
  • 4.1.6 Medicare Australia Memorandum of Understanding
  • 4.1.7 Department of Immigration and Citizenship Memorandum of Understanding
  • 4.1.8 NSW Privacy Memorandum of Understanding
  • 4.1.9 Commonwealth Ombudsman Memorandum of Understanding
  • 4.1.10 Office of the New Zealand Privacy Commissioner Memorandum of Understanding
• 4.2 Corporate Services
  • 4.2.1 Audit Committee
  • 4.2.2 Purchasing
  • 4.2.3 Certification of Fraud Measures
  • 4.2.4 Consultants
  • 4.2.5 Advertising and Market Research
  • 4.2.6 Ecologically Sustainable Development and Environmental Performance
• 4.3 Management of Human Resources
  • 4.3.1 Staffing Overview
  • 4.3.2 Workplace Relations and Employment
  • 4.3.3 Performance Management and Staff Development
  • 4.3.4 Workplace Diversity and Equal Employment Opportunity
  • 4.3.5 Reconciliation Action Plan
  • 4.3.6 Occupational Health and Safety
  • 4.3.7 Commonwealth Disability Strateg

Appendix 1 The Privacy Act and the Office of the Privacy Commissioner

Appendix 2 Freedom of Information Act Compliance

Appendix 3 Speeches and Presentations

Appendix 4 Commonwealth Disability Strategy Performance Reporting June 2006

Appendix 5 Demographic Information about Complainants

Appendix 6 National Privacy Principles

• Note: see http://www.privacy.gov.au/publications/npps01.html

Appendix 7 Information Privacy Principles

• Note: see http://www.privacy.gov.au/publications/ipps.html

Appendix 8 Strategic Plan 2007–09

Financial Statements (PDF only)

Glossary

Copyright © Office of the Privacy Commissioner 2006 ISSN 1035-3372

This work is copyright. Apart from any use as permitted under the Copyright Act 1968, no part may be reproduced by any process without prior written permission from the Office of the Privacy Commissioner.

Requests and enquiries concerning reproduction, right and content should be addressed to:

Copyright Officer Corporate and Public Affairs Office of the Privacy Commissioner GPO Box 5218 SYDNEY NSW 2001

Email: privacy@privacy.gov.au