Analysis Of Privacy Policy | Assessment

Running head: ANALYSIS OF PRIVACY POLICY
ANALYSIS OF PRIVACY POLICY
Name of student
Name of university
Author’s note:

ANALYSIS OF PRIVACY POLICY1
Table of Contents
Description of laws or regulations the University A needs to comply with from privacy and
security perspective....................................................................................................................2
Description of the obligations of University A under those laws and regulations.....................3
Importance of those obligations and the consequence if data is breached.................................6
Procedure for the University A and its workforce to demonstrate the compliance...................7
Description of additional areas that need to be considered in the initiative...............................9
References:...............................................................................................................................11

ANALYSIS OF PRIVACY POLICY2
Description of laws or regulations the University A needs to comply with from privacy
and security perspective
In order to implement student management system, the University A needs to comply with
applicable rules and regulations from privacy and security perspective.
While designing student management system it is important to identify applicable rules and
regulations for legal and regulatory compliances. The student management system required to
access personal information of the students and therefore rules and regulations related to data
security and data privacy is applicable in this context.
These laws and regulations are described in details in this context:
The Privacy Act 1988:
This is a privacy regulation act which regulates processing of personal information about
individuals. The privacy act was introduced for promoting and protecting privacy of
individuals. It regulates how government agencies and organizations with annual turnover
exceeding $3 million including other organizations as well process personal information
(OAIC 2019). The Privacy Act consists of 13 Australian Privacy Principles (APPs), which is
applicable to some private sector organisations and most of the Australian Government
agencies as well. These are together known as ‘APP entities’.
Privacy Amendment (Enhancing Privacy Protection) Act 2012 (Amending Act):
The Privacy Amendment (Enhancing Privacy Protection) Act 2012 (the Act) introduces the
Australian Privacy Principles (APPs), which is a combination and replacement of the
National Privacy Principles and the Information Privacy Principles that are contained in
the Privacy Act 1988 (Cth). The APPs makes it mandatory for organizations to comply with
the rules provided for “collection, storage, security, use, disclosure, access and correction of

ANALYSIS OF PRIVACY POLICY3
personal information acquired by an organisation” (Legislation.gov.au. 2019). In this context,
personal information refers to any information which is capable of identifying an individual.
Privacy Amendment (Notifiable Data Breaches) Act 2017
The Privacy Amendment (Notifiable Data Breaches) Act 2017 (Cth) is an amendment to
the Privacy Act 1988 (Cth) (Privacy Act) which makes it mandatory for entities that are
regulated by the Privacy Act to notify “eligible data breach” to the owner of the data (OAIC
2019). In previous data protection and privacy act, it was not required to notify individuals
about the data breach, however introduction of this new amendment requires organizations to
not only identify data breach, but to provide notification about the data breach as well.
Description of the obligations of University A under those laws and regulations
There are various obligations that the University A needs to consider that are provided in the
laws and regulations.
The Privacy Amendment (Enhancing Privacy Protection) Act 2012 (the Act) provides the
Australian Privacy Principles (APPs), which is a combination and replacement of the
National Privacy Principles and the Information Privacy Principles that are contained in
the Privacy Act 1988 (Cth).
Therefore, while discussing about obligations for The Privacy Amendment (Enhancing
Privacy Protection) Act 2012 (the Act), it applies to the Privacy Act 1988 (Cth) as well.
The Australian Privacy Principles (APPs) includes 13 privacy principles which are (OAIC
2019):
APP 1 — Open and transparent management of personal information
According to this privacy principle, the APP entities need to ensure that management of
personal information is open and transparent. This requires to provide an APP privacy policy