Home / All Courses / Privacy and Data Protection (Australian Privacy Principles)
Privacy and Data Protection (Australian Privacy Principles)

A practical, visual introduction to Australian privacy law for everyday work. Learn what the Privacy Act 1988 (Cth) requires, what the 13 Australian Privacy Principles say about collecting, using, storing, securing and disclosing personal information, the rights individuals have over their own data and how the Notifiable Data Breaches scheme works, as paced slides with diagrams, a workplace decision scenario, quick self-checks and notes on how privacy laws differ across states and territories.
What You Will Learn
- Explain the purpose of the Privacy Act 1988 (Cth) and what counts as personal and sensitive information
- Identify who must comply with the Australian Privacy Principles and the extra protection sensitive information receives
- Describe how personal information must be collected, used, disclosed and secured across the 13 APPs
- Outline an individual's right to access and correct the personal information an organisation holds about them
- Recognise an eligible data breach and the steps required under the Notifiable Data Breaches scheme
Course Content
- Protecting personal information is part of everyone's job
- By the end of this course, you'll be able to:
- The Privacy Act 1988 sets the national rules for handling personal information
- Personal information is any information that can identify you
- Sensitive information carries the highest level of protection
- Not every business is covered, but many are
- Which privacy law applies where you work
- APP 1 requires you to manage personal information openly and transparently
- APP 2 lets people deal with you anonymously or under a pseudonym
- Collect only what you actually need
- APP 4 tells you what to do with information you never asked for
- APP 5 requires you to tell people when you collect their information
- APP 6 ties use and disclosure to the reason you collected the information
- Direct marketing must offer an easy opt-out
- APP 8 keeps you accountable when data goes overseas
- APP 9 limits the use of government related identifiers
- APP 10 says the information you hold must be accurate
- APP 11 requires you to protect information and dispose of it safely
- Individuals have rights over their own data
- Serious or repeated breaches can bring heavy penalties
- A data breach is unauthorised access, disclosure, or loss of personal information
- An 'eligible data breach' turns on the risk of serious harm
- Respond to a suspected breach in four steps
- Your first move at work is to report it internally, fast
- Now put the principles to work
- A day on the customer service desk
- The five things to carry away
Who This Course Is For
All staff who collect, access, handle or store personal information, including office, customer service, HR, IT, records and management roles.
Written by Kam Askari, Managing Director of Creative Directions Management Consulting Pty Ltd, ISO 9001, ISO 14001 and ISO 45001 Lead Auditor. MBA, Graduate Diploma in Occupational Health and Safety, MAICD. Checked against the sources listed below.
Sources and Legal References
This course is aligned to 5 official sources. Legal and regulatory references checked between 15 August 2026 and 31 August 2026.
Sources and Further Reading
This course draws on the following official sources. Always rely on the current version on the regulator’s website.
- LegislationPrivacy Act 1988 (Cth)As at 15/08/2026
- LegislationPrivacy Amendment (Notifiable Data Breaches) Act 2017 (Cth)As at 29/08/2026
- LegislationCriminal Code Act 1995 (Cth)As at 29/08/2026
- Regulator guidanceOAIC, About the Notifiable Data Breaches schemeAs at 31/08/2026
- Regulator guidanceThe Privacy Act (OAIC overview)As at 31/08/2026
Always rely on the current version on the regulator’s website.
Seven day refund if you have not started
Or
For employers and teams
Buy Seats for Your Team
$39.00 per seat, inc GST
Total inc GST$195.00
Or
What You Get
Certificate of Completion
This is to certify that
has successfully completed
All learning modules and the final assessment
Kam Askari
Director, Creative Directions Management Consulting Pty Ltd
This is a certificate of completion of a non-accredited professional development course. It is not a nationally recognised qualification, a VET statement of attainment, a competency card, a licence, or evidence of competency. It is issued by Creative Directions Management Consulting Pty Ltd, which is not a Registered Training Organisation.
Sample layout. Certificate ID WP-SAMPLE-0001 verifies as Hazardous Manual Tasks and Manual Handling Safety.
- Certificate verified by its ID
- 100% online, self-paced
- Six months of access
Bought for yourself: six months of access from the day you pay. Team seat: six months from the day the worker activates their code.
Suggested Next Courses

Email Scams and Invoice Fraud Awareness
45 minutes
Online, self-paced

Records and Information Management Awareness
35 minutes
Online, self-paced
