Privacy and Surveillance Course (Australia) 2026
This course is for security officers, control room staff and supervisors in Australia who handle CCTV, logs, ID checks and incident reports. It covers the Privacy Act and the Australian Privacy Principles, state workplace surveillance and recording laws, sharing footage, and data breaches. It is general knowledge, not legal advice, and it does not replace the training needed for a state or territory security licence.
En bref
Ce cours gratuit comprend environ 30 minutes de leçons et un test de 25 questions. Obtenez 80 % ou plus pour télécharger une attestation de réussite (privée, non accréditée). Vérifié à partir des sources officielles le 13 octobre 2026.
Ce que vous allez apprendre
- Explain what personal and sensitive information are
- Describe who must follow the Australian Privacy Principles
- Apply the main CCTV and workplace surveillance rules in NSW, the ACT and Victoria
- Explain how recording laws differ between states
- Handle ID checks, logs and requests for footage correctly
- Recognise and report a data breach
Obtenez 80 % ou plus pour télécharger votre certificat.
-
Question 1 sur 25
Voir la réponse
Réponse: B. The Privacy Act 1988
The Privacy Act 1988 (Cth) is the main federal privacy law. It contains the Australian Privacy Principles.
-
Question 2 sur 25
Voir la réponse
Réponse: B. 13
The OAIC says there are 13 Australian Privacy Principles, covering collection, use, security, access and correction of personal information.
-
Question 3 sur 25
Voir la réponse
Réponse: C. The OAIC (Information Commissioner)
The Office of the Australian Information Commissioner (OAIC) oversees the Privacy Act and takes complaints in writing.
-
Question 4 sur 25
Voir la réponse
Réponse: D. A photo showing a visitor's face
Personal information is information or an opinion that could identify a person. The OAIC lists photographs as an example.
-
Question 5 sur 25
Voir la réponse
Réponse: C. A person's criminal record
Sensitive information includes criminal record, health, religion, racial or ethnic origin and some biometric information. It has higher protection.
-
Question 6 sur 25
Voir la réponse
Réponse: B. $3 million
The Privacy Act covers organisations with an annual turnover of more than $3 million, plus some smaller businesses.
-
Question 7 sur 25
Voir la réponse
Réponse: C. Yes, Commonwealth contractors are covered
The small business exemption does not apply to a contractor that provides services under a Commonwealth contract.
-
Question 8 sur 25
Voir la réponse
Réponse: D. Security of personal information
APP 11 requires reasonable steps to protect personal information from misuse, loss and unauthorised access, and to destroy or de-identify it when no longer needed.
-
Question 9 sur 25
Voir la réponse
Réponse: B. Tell the person about certain matters
APP 5 is about notification: an organisation collecting personal information must tell the person about certain matters, such as why it is collected.
-
Question 10 sur 25
Voir la réponse
Réponse: C. Sue in court under a statutory tort
The statutory tort for serious invasions of privacy started on 10 June 2025. People bring claims in court; the OAIC does not run it.
-
Question 11 sur 25
Voir la réponse
Réponse: D. Before they are recorded
The OAIC says a covered organisation must tell people that their image may be captured before they are recorded.
-
Question 12 sur 25
Voir la réponse
Réponse: A. Destroy or de-identify it
The OAIC says recorded personal information must be kept secure and destroyed or de-identified when it is no longer needed.
-
Question 13 sur 25
Voir la réponse
Réponse: D. The Privacy Act does not cover it
The Privacy Act does not cover a camera run by an individual in a private capacity, but state or territory surveillance laws may apply.
-
Question 14 sur 25
Voir la réponse
Réponse: D. 14 days
Section 10 requires written notice at least 14 days before surveillance of an employee starts, unless the employee agrees to less.
-
Question 15 sur 25
Voir la réponse
Réponse: A. Visible cameras and entrance signs
Section 11 requires the cameras (or their casing) to be clearly visible and signs at each entrance saying people may be under surveillance.
-
Question 16 sur 25
Voir la réponse
Réponse: C. Change rooms, toilets and showers
Section 15 prohibits surveillance of employees in change rooms, toilet facilities and showers or other bathing facilities at a workplace.
-
Question 17 sur 25
Voir la réponse
Réponse: A. Surveillance Devices Act 1999 (Vic)
Section 9B of Victoria's Surveillance Devices Act 1999 creates this offence.
-
Question 18 sur 25
Voir la réponse
Réponse: D. Australian Capital Territory
Sections 13 and 14 of the ACT Workplace Privacy Act 2011 require written notice of surveillance and good-faith consultation with workers during the notice period.
-
Question 19 sur 25
Voir la réponse
Réponse: B. When the person recording is in the conversation
Section 43(2)(a) says the offence does not apply where the person using the device is a party to the private conversation. Section 45 limits sharing the recording.
-
Question 20 sur 25
Voir la réponse
Réponse: D. If all principal parties consent, or to protect lawful interests
Section 7 allows it with the consent of all principal parties, or where one party consents and the recording is reasonably necessary to protect that party's lawful interests (or is not made to share it with outsiders).
-
Question 21 sur 25
Voir la réponse
Réponse: C. It should not scan if sighting is enough
The OAIC says businesses can only collect what is reasonably necessary and should not scan ID if sighting it would be sufficient.
-
Question 22 sur 25
Voir la réponse
Réponse: C. No, that is not why it was collected
Under APP 6, information may be used only for its primary purpose unless an exception, such as consent, applies.
-
Question 23 sur 25
Voir la réponse
Réponse: B. Make a written note of the disclosure
APP 6.5 says that when an entity uses or discloses information under the enforcement exception, it must make a written note of it.
-
Question 24 sur 25
Voir la réponse
Réponse: C. When serious harm is likely to result
The scheme requires notification when a breach is likely to result in serious harm to a person whose information is involved.
-
Question 25 sur 25
Voir la réponse
Réponse: B. Complain to the company first
The OAIC says you must first complain to the organisation. If it does not respond within 30 days, or you are unhappy, you can complain to the OAIC in writing.
Clavier : 1–4 pour répondre, Entrée pour la question suivante.
À savoir avant l’examen
- The Privacy Act 1988 contains 13 Australian Privacy Principles and is overseen by the OAIC.
- The APPs cover organisations with a turnover above $3 million, plus some smaller ones, such as contractors under a Commonwealth contract.
- In NSW, employees must get written notice at least 14 days before workplace surveillance starts, and cameras must be visible with signs at each entrance.
- In Victoria, using optical or listening devices in workplace toilets, washrooms, change rooms or lactation rooms is an offence.
- Covered organisations must notify affected people and the OAIC when a data breach is likely to result in serious harm.
Questions fréquentes
Can I record conversations with my body-worn camera?
It depends on your state and your employer's policy. In Queensland a party to a conversation may record it, while in NSW a party generally needs the consent of all principal parties unless a narrow exception applies, such as protecting their lawful interests.
Do we need signs for CCTV?
A business covered by the Privacy Act must tell people their image may be captured before they are recorded. For employees in NSW, the Workplace Surveillance Act 2005 also requires signs at each entrance.
Can I give CCTV footage to the police?
APP 6 allows sharing that is reasonably necessary for police enforcement activities, and the organisation must make a written note of it. Follow your site's procedure and let the authorised person release it.
How long can CCTV footage be kept?
The OAIC says recordings must be destroyed or de-identified when they are no longer needed. Your employer's policy should set the actual period.
L’attestation est-elle accréditée ou reconnue officiellement ?
Non. C’est une attestation de réussite privée, uniquement pour vos connaissances. Elle n’est reconnue, accréditée ni approuvée par aucun gouvernement, organisme de délivrance des permis, autorité de réglementation ou établissement d’enseignement, et elle ne remplace aucun permis, aucune certification ni aucune formation exigés par la loi.
Sources
- Australian Privacy Principles (OAIC)
- Small business (OAIC)
- Security cameras (OAIC)
- APP guidelines chapter 6: use or disclosure (OAIC)
- About the Notifiable Data Breaches scheme (OAIC)
- Workplace Surveillance Act 2005 (NSW)
- Invasion of Privacy Act 1971 (Qld)
- ALRC Report 123: workplace surveillance
- Workplace Privacy Act 2011 (ACT)