New IPOLA resources - Privacy registers and checklists
Four new privacy tools are now available on the IPOLA Resources webpage, including personal information and privacy risk registers, as well as associated checklists.
The Personal Information Register Template helps agencies to explore and understand the types of personal information they hold, including sensitive information. This is a foundational step each agency should engage in when planning how to implement the IPOLA reforms.
The Privacy Risk Register Template is a tool to assist agencies identify, assess, document and manage privacy risks to ensure controls are implemented to reduce or remove the potential impact to both the agency and individuals that may be affected. This tool is supported by the three Privacy Impact Assessment (PIA) resources already available online.
Two additional checklists are now also available. The ‘What is Personal Information Checklist is designed to guide staff and help them determine if information is or is not personal information. While the Contracted Service Providers Checklist will support agencies in determining when they may be required to take reasonable steps to bind CSPs to comply with the Queensland Privacy Principles.
Agency staff are encouraged to read and use the new resources:
OIC will continue to rollout further resources that respond to stakeholder feedback provided through surveys and focus groups. Please subscribe to the OIC weekly newsletter or quarterly IPOLA newsletter to keep up to date.