PassEveryTest
English

Privacy and Surveillance Course (Australia) 2026

This course is for security officers, control room staff and supervisors in Australia who handle CCTV, logs, ID checks and incident reports. It covers the Privacy Act and the Australian Privacy Principles, state workplace surveillance and recording laws, sharing footage, and data breaches. It is general knowledge, not legal advice, and it does not replace the training needed for a state or territory security licence.

  • Course
  • Australia
  • 25 questions
  • Checked October 13, 2026

Quick answer

This free course has about 30 minutes of lessons and a 25-question test. Score 80% or more to download a certificate of completion (private, not accredited). Checked against official sources on October 13, 2026.

Start with the lessonsPrivacy and Surveillance Course (Australia): Lessons: about 30 minutes of reading. Every test question is covered in the lessons.

What you will learn

  • Explain what personal and sensitive information are
  • Describe who must follow the Australian Privacy Principles
  • Apply the main CCTV and workplace surveillance rules in NSW, the ACT and Victoria
  • Explain how recording laws differ between states
  • Handle ID checks, logs and requests for footage correctly
  • Recognise and report a data breach

Score 80% or more to download your certificate.

  1. Question 1 of 25

    What is the main federal privacy law in Australia?
    Show answer

    Answer: B. The Privacy Act 1988

    The Privacy Act 1988 (Cth) is the main federal privacy law. It contains the Australian Privacy Principles.

  2. Question 2 of 25

    How many Australian Privacy Principles (APPs) are there?
    Show answer

    Answer: B. 13

    The OAIC says there are 13 Australian Privacy Principles, covering collection, use, security, access and correction of personal information.

  3. Question 3 of 25

    Which body oversees the Privacy Act and receives privacy complaints?
    Show answer

    Answer: C. The OAIC (Information Commissioner)

    The Office of the Australian Information Commissioner (OAIC) oversees the Privacy Act and takes complaints in writing.

  4. Question 4 of 25

    You are handling records at a shopping centre. Which item counts as personal information?
    Show answer

    Answer: D. A photo showing a visitor's face

    Personal information is information or an opinion that could identify a person. The OAIC lists photographs as an example.

  5. Question 5 of 25

    Which of these is sensitive information under the Privacy Act?
    Show answer

    Answer: C. A person's criminal record

    Sensitive information includes criminal record, health, religion, racial or ethnic origin and some biometric information. It has higher protection.

  6. Question 6 of 25

    Most private organisations must follow the APPs once their annual turnover is above what amount?
    Show answer

    Answer: B. $3 million

    The Privacy Act covers organisations with an annual turnover of more than $3 million, plus some smaller businesses.

  7. Question 7 of 25

    A small security company with a turnover under $3 million guards a building under a Commonwealth contract. Is it covered by the Privacy Act?
    Show answer

    Answer: C. Yes, Commonwealth contractors are covered

    The small business exemption does not apply to a contractor that provides services under a Commonwealth contract.

  8. Question 8 of 25

    What is APP 11 about?
    Show answer

    Answer: D. Security of personal information

    APP 11 requires reasonable steps to protect personal information from misuse, loss and unauthorised access, and to destroy or de-identify it when no longer needed.

  9. Question 9 of 25

    What does APP 5 require when an organisation collects personal information?
    Show answer

    Answer: B. Tell the person about certain matters

    APP 5 is about notification: an organisation collecting personal information must tell the person about certain matters, such as why it is collected.

  10. Question 10 of 25

    Since 10 June 2025, what can a person do about a serious invasion of their privacy?
    Show answer

    Answer: C. Sue in court under a statutory tort

    The statutory tort for serious invasions of privacy started on 10 June 2025. People bring claims in court; the OAIC does not run it.

  11. Question 11 of 25

    A shopping centre covered by the Privacy Act uses CCTV. When must it tell people their image may be captured?
    Show answer

    Answer: D. Before they are recorded

    The OAIC says a covered organisation must tell people that their image may be captured before they are recorded.

  12. Question 12 of 25

    What must a covered organisation do with CCTV footage it no longer needs?
    Show answer

    Answer: A. Destroy or de-identify it

    The OAIC says recorded personal information must be kept secure and destroyed or de-identified when it is no longer needed.

  13. Question 13 of 25

    A homeowner runs a security camera in a private capacity. What does the OAIC say about it?
    Show answer

    Answer: D. The Privacy Act does not cover it

    The Privacy Act does not cover a camera run by an individual in a private capacity, but state or territory surveillance laws may apply.

  14. Question 14 of 25

    Under the NSW Workplace Surveillance Act 2005, how much written notice must employees usually get before surveillance starts?
    Show answer

    Answer: D. 14 days

    Section 10 requires written notice at least 14 days before surveillance of an employee starts, unless the employee agrees to less.

  15. Question 15 of 25

    In NSW, what does the Workplace Surveillance Act 2005 require for camera surveillance of employees?
    Show answer

    Answer: A. Visible cameras and entrance signs

    Section 11 requires the cameras (or their casing) to be clearly visible and signs at each entrance saying people may be under surveillance.

  16. Question 16 of 25

    Under the NSW Workplace Surveillance Act 2005, where must an employer not carry out surveillance of employees?
    Show answer

    Answer: C. Change rooms, toilets and showers

    Section 15 prohibits surveillance of employees in change rooms, toilet facilities and showers or other bathing facilities at a workplace.

  17. Question 17 of 25

    Which Victorian law makes it an offence to use optical or listening devices in workplace toilets, washrooms, change rooms or lactation rooms?
    Show answer

    Answer: A. Surveillance Devices Act 1999 (Vic)

    Section 9B of Victoria's Surveillance Devices Act 1999 creates this offence.

  18. Question 18 of 25

    Which territory's Workplace Privacy Act 2011 requires employers to consult workers in good faith before introducing surveillance?
    Show answer

    Answer: D. Australian Capital Territory

    Sections 13 and 14 of the ACT Workplace Privacy Act 2011 require written notice of surveillance and good-faith consultation with workers during the notice period.

  19. Question 19 of 25

    In Queensland, when does the listening device offence in the Invasion of Privacy Act 1971 not apply?
    Show answer

    Answer: B. When the person recording is in the conversation

    Section 43(2)(a) says the offence does not apply where the person using the device is a party to the private conversation. Section 45 limits sharing the recording.

  20. Question 20 of 25

    Under the NSW Surveillance Devices Act 2007, when may a party record a private conversation?
    Show answer

    Answer: D. If all principal parties consent, or to protect lawful interests

    Section 7 allows it with the consent of all principal parties, or where one party consents and the recording is reasonably necessary to protect that party's lawful interests (or is not made to share it with outsiders).

  21. Question 21 of 25

    A venue wants to scan every patron's ID, but looking at the ID would be enough for its purpose. What does the OAIC say?
    Show answer

    Answer: C. It should not scan if sighting is enough

    The OAIC says businesses can only collect what is reasonably necessary and should not scan ID if sighting it would be sufficient.

  22. Question 22 of 25

    A co-worker wants a visitor's phone number from the sign-in log to ask them on a date. Is that allowed under APP 6?
    Show answer

    Answer: C. No, that is not why it was collected

    Under APP 6, information may be used only for its primary purpose unless an exception, such as consent, applies.

  23. Question 23 of 25

    An organisation gives CCTV footage to police under the enforcement exception in APP 6. What else must it do?
    Show answer

    Answer: B. Make a written note of the disclosure

    APP 6.5 says that when an entity uses or discloses information under the enforcement exception, it must make a written note of it.

  24. Question 24 of 25

    Under the Notifiable Data Breaches scheme, when must a covered organisation notify affected people and the OAIC?
    Show answer

    Answer: C. When serious harm is likely to result

    The scheme requires notification when a breach is likely to result in serious harm to a person whose information is involved.

  25. Question 25 of 25

    A person thinks a company mishandled their personal information. What should they usually do first?
    Show answer

    Answer: B. Complain to the company first

    The OAIC says you must first complain to the organisation. If it does not respond within 30 days, or you are unhappy, you can complain to the OAIC in writing.

What to know before the test

  • The Privacy Act 1988 contains 13 Australian Privacy Principles and is overseen by the OAIC.
  • The APPs cover organisations with a turnover above $3 million, plus some smaller ones, such as contractors under a Commonwealth contract.
  • In NSW, employees must get written notice at least 14 days before workplace surveillance starts, and cameras must be visible with signs at each entrance.
  • In Victoria, using optical or listening devices in workplace toilets, washrooms, change rooms or lactation rooms is an offence.
  • Covered organisations must notify affected people and the OAIC when a data breach is likely to result in serious harm.

Frequently asked questions

Can I record conversations with my body-worn camera?

It depends on your state and your employer's policy. In Queensland a party to a conversation may record it, while in NSW a party generally needs the consent of all principal parties unless a narrow exception applies, such as protecting their lawful interests.

Do we need signs for CCTV?

A business covered by the Privacy Act must tell people their image may be captured before they are recorded. For employees in NSW, the Workplace Surveillance Act 2005 also requires signs at each entrance.

Can I give CCTV footage to the police?

APP 6 allows sharing that is reasonably necessary for police enforcement activities, and the organisation must make a written note of it. Follow your site's procedure and let the authorised person release it.

How long can CCTV footage be kept?

The OAIC says recordings must be destroyed or de-identified when they are no longer needed. Your employer's policy should set the actual period.

Is the certificate accredited or officially recognised?

No. It is a private certificate of completion for knowledge only. It is not recognised, accredited or approved by any government, licensing body, regulator or educational institution, and it does not replace any licence, certification or training required by law.

Sources

Related tests