Privacy and Surveillance Course (Australia) 2026

1. السؤال 1 من 25

   What is the main federal privacy law in Australia?

   • AThe Surveillance Act 2001
   • BThe Privacy Act 1988
   • CThe Information Rights Act 2010
   • DThe Data Safety Act 1995
   أظهر الإجابة

   الإجابة: B. The Privacy Act 1988

   The Privacy Act 1988 (Cth) is the main federal privacy law. It contains the Australian Privacy Principles.

2. السؤال 2 من 25

   How many Australian Privacy Principles (APPs) are there?

   • A21
   • B13
   • C7
   • D10
   أظهر الإجابة

   الإجابة: B. 13

   The OAIC says there are 13 Australian Privacy Principles, covering collection, use, security, access and correction of personal information.

3. السؤال 3 من 25

   Which body oversees the Privacy Act and receives privacy complaints?

   • ASafe Work Australia's privacy branch
   • BThe Fair Work Commission
   • CThe OAIC (Information Commissioner)
   • DThe Australian Federal Police
   أظهر الإجابة

   الإجابة: C. The OAIC (Information Commissioner)

   The Office of the Australian Information Commissioner (OAIC) oversees the Privacy Act and takes complaints in writing.

4. السؤال 4 من 25

   You are handling records at a shopping centre. Which item counts as personal information?

   • AThe shopping centre's opening hours
   • BThe number of cars in the car park
   • CThe brand of the site's cameras
   • DA photo showing a visitor's face
   أظهر الإجابة

   الإجابة: D. A photo showing a visitor's face

   Personal information is information or an opinion that could identify a person. The OAIC lists photographs as an example.

5. السؤال 5 من 25

   Which of these is sensitive information under the Privacy Act?

   • AA person's work email address
   • BThe time a person signed in
   • CA person's criminal record
   • DA person's job title
   أظهر الإجابة

   الإجابة: C. A person's criminal record

   Sensitive information includes criminal record, health, religion, racial or ethnic origin and some biometric information. It has higher protection.

6. السؤال 6 من 25

   Most private organisations must follow the APPs once their annual turnover is above what amount?

   • A$1 million
   • B$3 million
   • C$10 million
   • D$50 million
   أظهر الإجابة

   الإجابة: B. $3 million

   The Privacy Act covers organisations with an annual turnover of more than $3 million, plus some smaller businesses.

7. السؤال 7 من 25

   A small security company with a turnover under $3 million guards a building under a Commonwealth contract. Is it covered by the Privacy Act?

   • AOnly if it employs more than 100 staff
   • BOnly for the records of its own staff
   • CYes, Commonwealth contractors are covered
   • DNo, every small business is exempt from it
   أظهر الإجابة

   الإجابة: C. Yes, Commonwealth contractors are covered

   The small business exemption does not apply to a contractor that provides services under a Commonwealth contract.

8. السؤال 8 من 25

   What is APP 11 about?

   • ADirect marketing to customers
   • BAnonymity and the use of pseudonyms
   • CCross-border disclosure of data
   • DSecurity of personal information
   أظهر الإجابة

   الإجابة: D. Security of personal information

   APP 11 requires reasonable steps to protect personal information from misuse, loss and unauthorised access, and to destroy or de-identify it when no longer needed.

9. السؤال 9 من 25

   What does APP 5 require when an organisation collects personal information?

   • ASend a copy of it to the OAIC each year
   • BTell the person about certain matters
   • CDelete it within 24 hours of collection
   • DGet the person's signature on a form
   أظهر الإجابة

   الإجابة: B. Tell the person about certain matters

   APP 5 is about notification: an organisation collecting personal information must tell the person about certain matters, such as why it is collected.

10. السؤال 10 من 25

    Since 10 June 2025, what can a person do about a serious invasion of their privacy?

    • ANothing, as privacy is not protected
    • BReport it to Safe Work Australia
    • CSue in court under a statutory tort
    • DAsk the OAIC to fine the person on the spot
    أظهر الإجابة

    الإجابة: C. Sue in court under a statutory tort

    The statutory tort for serious invasions of privacy started on 10 June 2025. People bring claims in court; the OAIC does not run it.

11. السؤال 11 من 25

    A shopping centre covered by the Privacy Act uses CCTV. When must it tell people their image may be captured?

    • AOnly if there is an incident
    • BAfter the footage is reviewed
    • COnly if someone asks
    • DBefore they are recorded
    أظهر الإجابة

    الإجابة: D. Before they are recorded

    The OAIC says a covered organisation must tell people that their image may be captured before they are recorded.

12. السؤال 12 من 25

    What must a covered organisation do with CCTV footage it no longer needs?

    • ADestroy or de-identify it
    • BPost it online for the public
    • CGive it to the local council
    • DKeep it forever just in case
    أظهر الإجابة

    الإجابة: A. Destroy or de-identify it

    The OAIC says recorded personal information must be kept secure and destroyed or de-identified when it is no longer needed.

13. السؤال 13 من 25

    A homeowner runs a security camera in a private capacity. What does the OAIC say about it?

    • AIt must be registered with the OAIC
    • BThe Privacy Act fully covers it
    • CThe OAIC must approve it first
    • DThe Privacy Act does not cover it
    أظهر الإجابة

    الإجابة: D. The Privacy Act does not cover it

    The Privacy Act does not cover a camera run by an individual in a private capacity, but state or territory surveillance laws may apply.

14. السؤال 14 من 25

    Under the NSW Workplace Surveillance Act 2005, how much written notice must employees usually get before surveillance starts?

    • A7 days
    • B24 hours
    • C28 days
    • D14 days
    أظهر الإجابة

    الإجابة: D. 14 days

    Section 10 requires written notice at least 14 days before surveillance of an employee starts, unless the employee agrees to less.

15. السؤال 15 من 25

    In NSW, what does the Workplace Surveillance Act 2005 require for camera surveillance of employees?

    • AVisible cameras and entrance signs
    • BCameras hidden from view of staff
    • CCameras that record only at night
    • DA police permit for every single camera
    أظهر الإجابة

    الإجابة: A. Visible cameras and entrance signs

    Section 11 requires the cameras (or their casing) to be clearly visible and signs at each entrance saying people may be under surveillance.

16. السؤال 16 من 25

    Under the NSW Workplace Surveillance Act 2005, where must an employer not carry out surveillance of employees?

    • AReception, foyers and waiting areas
    • BCar parks used by staff
    • CChange rooms, toilets and showers
    • DLoading docks and delivery bays
    أظهر الإجابة

    الإجابة: C. Change rooms, toilets and showers

    Section 15 prohibits surveillance of employees in change rooms, toilet facilities and showers or other bathing facilities at a workplace.

17. السؤال 17 من 25

    Which Victorian law makes it an offence to use optical or listening devices in workplace toilets, washrooms, change rooms or lactation rooms?

    • ASurveillance Devices Act 1999 (Vic)
    • BPrivacy Act 1988 (Commonwealth)
    • CInvasion of Privacy Act 1971 (Qld) s 43
    • DWorkplace Privacy Act 2011 (ACT)
    أظهر الإجابة

    الإجابة: A. Surveillance Devices Act 1999 (Vic)

    Section 9B of Victoria's Surveillance Devices Act 1999 creates this offence.

18. السؤال 18 من 25

    Which territory's Workplace Privacy Act 2011 requires employers to consult workers in good faith before introducing surveillance?

    • ANorthern Territory
    • BTerritory of Christmas Island
    • CJervis Bay Territory
    • DAustralian Capital Territory
    أظهر الإجابة

    الإجابة: D. Australian Capital Territory

    Sections 13 and 14 of the ACT Workplace Privacy Act 2011 require written notice of surveillance and good-faith consultation with workers during the notice period.

19. السؤال 19 من 25

    In Queensland, when does the listening device offence in the Invasion of Privacy Act 1971 not apply?

    • AWhen the recording is made on a mobile phone
    • BWhen the person recording is in the conversation
    • CWhen the recording lasts under 5 minutes
    • DWhen the conversation happens outdoors in a park
    أظهر الإجابة

    الإجابة: B. When the person recording is in the conversation

    Section 43(2)(a) says the offence does not apply where the person using the device is a party to the private conversation. Section 45 limits sharing the recording.

20. السؤال 20 من 25

    Under the NSW Surveillance Devices Act 2007, when may a party record a private conversation?

    • AOnly if a police officer is there as a witness
    • BWhenever they are standing in a public place such as a busy street
    • CWhenever they hold a current security licence in that state
    • DIf all principal parties consent, or to protect lawful interests
    أظهر الإجابة

    الإجابة: D. If all principal parties consent, or to protect lawful interests

    Section 7 allows it with the consent of all principal parties, or where one party consents and the recording is reasonably necessary to protect that party's lawful interests (or is not made to share it with outsiders).

21. السؤال 21 من 25

    A venue wants to scan every patron's ID, but looking at the ID would be enough for its purpose. What does the OAIC say?

    • AIt may scan if the patron is a regular
    • BIt may scan and keep the data for marketing
    • CIt should not scan if sighting is enough
    • DIt must scan every patron's ID by law
    أظهر الإجابة

    الإجابة: C. It should not scan if sighting is enough

    The OAIC says businesses can only collect what is reasonably necessary and should not scan ID if sighting it would be sufficient.

22. السؤال 22 من 25

    A co-worker wants a visitor's phone number from the sign-in log to ask them on a date. Is that allowed under APP 6?

    • AYes, if the visitor seemed friendly to them
    • BYes, if the co-worker is a manager
    • CNo, that is not why it was collected
    • DYes, because the log is company property
    أظهر الإجابة

    الإجابة: C. No, that is not why it was collected

    Under APP 6, information may be used only for its primary purpose unless an exception, such as consent, applies.

23. السؤال 23 من 25

    An organisation gives CCTV footage to police under the enforcement exception in APP 6. What else must it do?

    • ADelete its own copy of the footage
    • BMake a written note of the disclosure
    • CReport the police officer to the OAIC
    • DAsk the person filmed for their permission
    أظهر الإجابة

    الإجابة: B. Make a written note of the disclosure

    APP 6.5 says that when an entity uses or discloses information under the enforcement exception, it must make a written note of it.

24. السؤال 24 من 25

    Under the Notifiable Data Breaches scheme, when must a covered organisation notify affected people and the OAIC?

    • AOnly if the breach is reported in the media
    • BOnly if more than 1,000 people are affected
    • CWhen serious harm is likely to result
    • DOnly if the police ask it to notify
    أظهر الإجابة

    الإجابة: C. When serious harm is likely to result

    The scheme requires notification when a breach is likely to result in serious harm to a person whose information is involved.

25. السؤال 25 من 25

    A person thinks a company mishandled their personal information. What should they usually do first?

    • ACall 000 to report it
    • BComplain to the company first
    • CPost the complaint on social media
    • DGo straight to the OAIC by phone
    أظهر الإجابة

    الإجابة: B. Complain to the company first

    The OAIC says you must first complain to the organisation. If it does not respond within 30 days, or you are unhappy, you can complain to the OAIC in writing.

لوحة المفاتيح: 1–4 للإجابة، وEnter للسؤال التالي.