---
title: "The Australian Privacy Principles"
subtitle: "Cyber safety and privacy · Secure the system · Lesson 7"
---

# The Australian Privacy Principles

**Name:** {{field-24}} **Date:** {{field-15}} **Class:** {{field-15}}

> **Key question:** The club gave members' emails to a sports shop. It's in the privacy policy, page 40. Is that allowed?


:::teacher-note

**In one sentence:** Students match the club app's practices to five Australian Privacy Principles, judge each as meeting or breaching it, propose changes for the breaches, and write a privacy notice that meets APP 5 (AC9TDI10P14 nodes 1 and 2). A 5E mission lesson.

**Students should be able to say:** I can say what five of the Australian Privacy Principles require. I can judge whether an app meets or breaches a principle, with evidence. I can propose a change that would meet it.

**Width:** the unmarked parts are the floor every student does (Engage, Explore, Explain, Evaluate). Typical and Wider sections add contexts, not difficulty. Students work in the online tutorial alongside this sheet.

:::


## Engage


:::keep-together

**The club's privacy policy says it may share members' details with partners. Can it give their emails to a sports shop for advertising?**

☐ Yes, as long as the shop is local

☐ Not without asking: sharing for a different purpose needs people's agreement

☐ Only on weekends

☐ Yes: the policy says so

My prediction, and why:

{{lines-3}}

:::


:::teacher-note

**What happens:** Not without asking. APP 6: personal information is used and shared for the purpose it was collected for, unless people agree to more.

:::


## Explore

Try it on the board in the tutorial. Was your prediction right? What was different?

{{lines-2}}

## Explain: five principles

The **Australian Privacy Principles** (in the Privacy Act 1988) say what organisations must do with **personal information**: anything that identifies a person.

1. $\text{APP 3 Collection}$ — Collect only what you need for your purpose.
2. $\text{APP 5 Notice}$ — Tell people what you collect, why, and who to ask.
3. $\text{APP 6 Use and disclosure}$ — Use and share it only for that purpose, unless they agree.
4. $\text{APP 11 Security}$ — Protect it: hash passwords, encrypt data, limit who can see it.
5. $\text{APP 12 Access}$ — Let people see what you hold about them (APP 13: and correct it).

### Find the mistake

:::keep-together

**Sam reads the club's privacy policy. Click the line where it first goes wrong.**

```
 1  The club app has a privacy policy.
 2  The policy says the club may share members' details with partners.
 3  So the club can give members' emails to a sports shop for advertising.
 4  So it doesn't need to ask members first.
```

Line: {{field-15}}

Why is it wrong?

{{lines-2}}

:::


:::teacher-note

**Answer:** line 3

Line 3: advertising isn't why members gave their emails. APP 6 needs their agreement first, whatever the policy says.

:::


:::typical

## Elaborate: fix the breaches

:::


## Make: Elaborate: the privacy notice


Work in the tutorial. Plan first: what will you change, and how will you test it?

{{box-4}}

## Exit ticket

:::keep-together

**Name two Australian Privacy Principles and what each requires.**

{{lines-3}}

:::


:::teacher-note

**Answer:** Any two: APP 3 collect only what is needed; APP 5 tell people what and why; APP 6 use and share only for that purpose unless they agree; APP 11 keep it secure; APP 12 let people see it.

:::