Last Updated on نوفمبر 8, 2023
Learn how you can leverage Securiti’s Data Command Center to address data security, privacy, governance, and compliance.
See a demo
The Australian Capital Territory Information Privacy Act 2014 (the Act) is a law that regulates the handling of personal information by Australian Capital Territory (ACT) public sector agencies. The Act mandates that ACT government entities comply with a set of territory privacy principles to protect individuals’ right to privacy.
The Act sets out 13 Territory Privacy Principles (TPPs) that must be followed by ACT public sector agencies when collecting, storing, using, and disclosing personal information. The TPPs include topics related to personal information collection, use, disclosure, storage, and security and are comparable to the Victorian Information Privacy Principles.
The Act establishes the Office of the Information Commissioner, whose duties include regulating and upholding the Act's provisions, investigating privacy concerns, and promoting awareness of individuals' rights and responsibilities.
Under the Act, individuals have the right to access and correct their personal information held by ACT public sector agencies. Individuals can also complain to the Territory’s Information Commissioner if they believe that any act of the public agency has interfered with their privacy.
Securiti enables organizations to comply with the Australian Capital Territory Information Privacy Act 2014 & Territory Privacy Principles (TPPs) through AI-driven PI data discovery, DSR automation, documented accountability, enhanced visibility into data processing activities, and AI-driven process automation.
Securiti supports enterprises in their journey toward compliance with the Australian Capital Territory Information Privacy Act 2014 & Territory Privacy Principles (TPPs) through automation, enhanced data visibility, and identity linking.
Request a demo today to learn how Securiti can aid you and your organization's compliance efforts.
Schedule 1
With the help of Securiti’s multi-regulation, collaborative, readiness, and privacy impact assessment system, you can measure your organization's posture against Australian Capital Territory Information Privacy Act 2014 & Territory Privacy Principles (TPPs), identify the gaps and address the risks.
TPP 2.1+ TPP 12 + TPP 10 + TPP 13
DSR automation allows data subjects to request access, update, correct, and anonymize their personal data. Securiti’s DSR automation also enables organizations to create customized data subject rights request forms embedded in websites, verify identities, and aggregate requests into a fulfillment automation workbench.
TPP 8
Track data flows regarding the transfer of personal information to an overseas recipient and collect and maintain an inventory of data assets and data processing activities. Helps ensure that such an entity handles personal information in accordance with the standards set under Information Privacy Act 2014.
TPP 3.3 + TPP 6.1(a)
Automates obtaining consent from data subjects when collecting, using and disclosing personal information and sensitive personal information.
TPP 7
Allows the secure capturing of consent from data subjects when using or disclosing personal information for direct marketing purposes. Securiti's Consent Management Platform enables organizations to obtain end-users' consent for data access, retrieval, and advertising purposes.
TPP 1.3 + 1.4 + 1.5 + 1.6 + TPP 5
Automatically generates and updates the policy regarding collecting and using personal information.
TPP 11
Helps implement technical and operational measures to protect personal information from misuse, interference or loss, unauthorized access, modification, and disclosure. Ensures that personal data is de-identified, erased, or destroyed once it is no longer used/required
Purpose: The Act aims to protect individuals’ privacy rights by regulating how ACT public sector agencies handle personal information.
Scope: All ACT public sector organizations, such as government departments, regional councils, and statutory authorities, are subject to the Act.
Territory Privacy Principles (TPPs): The Act sets out 13 TPPs that govern the handling of personal information by ACT public sector agencies.
Office of Information Commissioner: The Act creates the Office of Information Commissioner, which is in charge of upholding the Act's rules, looking into privacy concerns, and providing awareness of individuals' rights and responsibilities. Each Commissioner will serve for a term of 7 years.
Enforcement Mechanisms: The Act includes several enforcement measures, such as the Commissioner's authority to look into privacy violations and take appropriate action, as well as the right of individuals to access and update their personal data held by ACT public sector organizations. If an individual makes a privacy complaint, the Commissioner is empowered to make inquiries and investigations regarding the complaint as he/she deems necessary.
Deemed Breach: If a public sector agency discloses the personal information about an individual to an overseas recipient in such a manner that contravenes TPPs under the Act, it is considered a "deemed breach".
International Data Transfers: The Act prohibits the transfer of personal data outside of the ACT unless appropriate safeguards adequately protect the data. The public sector agency must ensure that overseas recipients do not breach the TPPs in relation to the information.
Penalties: ACT public sector organizations that violate the Act's rules risk fines and penalties and harm to their reputation and public distrust. Any person who uses or divulges the protected personal information about someone else would be subject to a 50 penalty unit or imprisonment for 6 months or both. (As per the Crimes Act 1914, one penalty unit equals 275 AUD).
At Securiti, our mission is to enable organizations to safely harness the incredible power of Data & AI.
Copyright © 2024 Securiti · Sitemap · XML Sitemap
info@securiti.ai
Securiti, Inc.
300 Santana Row
Suite 450
San Jose, CA 95128
