Privacy

Privacy - ACL, AFSL, Wholesale

Version 2.4 - Last updated: 22 April 2024

This bundle is designed to enable licensees to comply with their privacy and data breach notification obligations.  The comprehensive policies and procedures comply with both the requirements of the Privacy Act 1988 (Cth), and with guidance provided by the Office of the Australian Information Commissioner.

The Privacy Policy Template sets out how licensees should collect, use and disclose personal information, and also covers data security arrangements and access requests.  The Data Breach Response Policy sets out a 4-stage process for preparing an effective data breach response, including containment, assessment of the breach, notification obligations and a review process, to prevent future incidents.

There is a new Credit Information Policy, similar to the Privacy Policy and Collection Statement (Privacy Policy), that applies to both AFS and credit licensee holders.

Included documents

Document Version Type Date
Credit Information Policy - ACL, AFSL 1.0 Tool 22 April 2024
Data Breach Response Policy - ACL, AFSL, Wholesale 3.1 Policy 6 Oct. 2023
Privacy Management Policy - ACL, AFSL, Wholesale 4.1 Policy 22 April 2024
Privacy Policy and Collection Statement (Privacy Policy) - ACL, AFSL, Wholesale 3.2 Tool 22 April 2024
Data Breach Register - ACL, AFSL, Wholesale 1.0 Register 1 June 2019
Privacy Access Request Refusal Letter - ACL, AFSL, Wholesale 2.0 Tool 17 Feb. 2022
Role and Responsibilities of the DBRT Template - ACL, AFSL, Wholesale 1.0 Tool 27 May 2020