South Australia’s Information Privacy Principles Instruction (IPPS)

Unlike few other Australian states and territories, the South Australian State does not have privacy legislation targeting public or private sector organizations/agencies. The South Australian government published a series of guidelines known as the Information Privacy Principles Instruction (IPPS) / Instruction to safeguard the privacy of personal data stored by public sector organizations. It was first enacted in 1989 and has undergone various amendments, with the latest amendment done in May 2020.

Organizations must follow the principles set forth by the IPPS when collecting, using, storing, and disclosing personal information. These guidelines are:

1. Personal information collection must be lawful, fair, and not unreasonably intrusive. An agency must not collect inaccurate, irrelevant, out-of-date, incomplete, or excessively personal information.
2. The agency must take reasonable measures to ensure accurate, complete, and up-to-date personal information.
3. Unless the individual has given consent or the use is permitted by law, personal information must not be used or disclosed for a purpose other than the one for which it was obtained.
4. Personal information must be stored securely, and the agency must take reasonable steps to protect it from unauthorized access, modification, or disclosure.
5. Individuals have the right to access their personal information held by the agency and to request corrections if it is inaccurate, incomplete, or out of date.

The IPPI aims to balance public sector organizations' need to collect and utilize personal information for their purposes while ensuring the protection and observance of individuals' privacy rights.