Privacy and Surveillance Course (Australia) 2026

1. Tanong 1 ng 25

   What is the main federal privacy law in Australia?

   • AThe Surveillance Act 2001
   • BThe Privacy Act 1988
   • CThe Information Rights Act 2010
   • DThe Data Safety Act 1995
   Ipakita ang sagot

   Sagot: B. The Privacy Act 1988

   The Privacy Act 1988 (Cth) is the main federal privacy law. It contains the Australian Privacy Principles.

2. Tanong 2 ng 25

   How many Australian Privacy Principles (APPs) are there?

   • A21
   • B13
   • C7
   • D10
   Ipakita ang sagot

   Sagot: B. 13

   The OAIC says there are 13 Australian Privacy Principles, covering collection, use, security, access and correction of personal information.

3. Tanong 3 ng 25

   Which body oversees the Privacy Act and receives privacy complaints?

   • ASafe Work Australia's privacy branch
   • BThe Fair Work Commission
   • CThe OAIC (Information Commissioner)
   • DThe Australian Federal Police
   Ipakita ang sagot

   Sagot: C. The OAIC (Information Commissioner)

   The Office of the Australian Information Commissioner (OAIC) oversees the Privacy Act and takes complaints in writing.

4. Tanong 4 ng 25

   You are handling records at a shopping centre. Which item counts as personal information?

   • AThe shopping centre's opening hours
   • BThe number of cars in the car park
   • CThe brand of the site's cameras
   • DA photo showing a visitor's face
   Ipakita ang sagot

   Sagot: D. A photo showing a visitor's face

   Personal information is information or an opinion that could identify a person. The OAIC lists photographs as an example.

5. Tanong 5 ng 25

   Which of these is sensitive information under the Privacy Act?

   • AA person's work email address
   • BThe time a person signed in
   • CA person's criminal record
   • DA person's job title
   Ipakita ang sagot

   Sagot: C. A person's criminal record

   Sensitive information includes criminal record, health, religion, racial or ethnic origin and some biometric information. It has higher protection.

6. Tanong 6 ng 25

   Most private organisations must follow the APPs once their annual turnover is above what amount?

   • A$1 million
   • B$3 million
   • C$10 million
   • D$50 million
   Ipakita ang sagot

   Sagot: B. $3 million

   The Privacy Act covers organisations with an annual turnover of more than $3 million, plus some smaller businesses.

7. Tanong 7 ng 25

   A small security company with a turnover under $3 million guards a building under a Commonwealth contract. Is it covered by the Privacy Act?

   • AOnly if it employs more than 100 staff
   • BOnly for the records of its own staff
   • CYes, Commonwealth contractors are covered
   • DNo, every small business is exempt from it
   Ipakita ang sagot

   Sagot: C. Yes, Commonwealth contractors are covered

   The small business exemption does not apply to a contractor that provides services under a Commonwealth contract.

8. Tanong 8 ng 25

   What is APP 11 about?

   • ADirect marketing to customers
   • BAnonymity and the use of pseudonyms
   • CCross-border disclosure of data
   • DSecurity of personal information
   Ipakita ang sagot

   Sagot: D. Security of personal information

   APP 11 requires reasonable steps to protect personal information from misuse, loss and unauthorised access, and to destroy or de-identify it when no longer needed.

9. Tanong 9 ng 25

   What does APP 5 require when an organisation collects personal information?

   • ASend a copy of it to the OAIC each year
   • BTell the person about certain matters
   • CDelete it within 24 hours of collection
   • DGet the person's signature on a form
   Ipakita ang sagot

   Sagot: B. Tell the person about certain matters

   APP 5 is about notification: an organisation collecting personal information must tell the person about certain matters, such as why it is collected.

10. Tanong 10 ng 25

    Since 10 June 2025, what can a person do about a serious invasion of their privacy?

    • ANothing, as privacy is not protected
    • BReport it to Safe Work Australia
    • CSue in court under a statutory tort
    • DAsk the OAIC to fine the person on the spot
    Ipakita ang sagot

    Sagot: C. Sue in court under a statutory tort

    The statutory tort for serious invasions of privacy started on 10 June 2025. People bring claims in court; the OAIC does not run it.

11. Tanong 11 ng 25

    A shopping centre covered by the Privacy Act uses CCTV. When must it tell people their image may be captured?

    • AOnly if there is an incident
    • BAfter the footage is reviewed
    • COnly if someone asks
    • DBefore they are recorded
    Ipakita ang sagot

    Sagot: D. Before they are recorded

    The OAIC says a covered organisation must tell people that their image may be captured before they are recorded.

12. Tanong 12 ng 25

    What must a covered organisation do with CCTV footage it no longer needs?

    • ADestroy or de-identify it
    • BPost it online for the public
    • CGive it to the local council
    • DKeep it forever just in case
    Ipakita ang sagot

    Sagot: A. Destroy or de-identify it

    The OAIC says recorded personal information must be kept secure and destroyed or de-identified when it is no longer needed.

13. Tanong 13 ng 25

    A homeowner runs a security camera in a private capacity. What does the OAIC say about it?

    • AIt must be registered with the OAIC
    • BThe Privacy Act fully covers it
    • CThe OAIC must approve it first
    • DThe Privacy Act does not cover it
    Ipakita ang sagot

    Sagot: D. The Privacy Act does not cover it

    The Privacy Act does not cover a camera run by an individual in a private capacity, but state or territory surveillance laws may apply.

14. Tanong 14 ng 25

    Under the NSW Workplace Surveillance Act 2005, how much written notice must employees usually get before surveillance starts?

    • A7 days
    • B24 hours
    • C28 days
    • D14 days
    Ipakita ang sagot

    Sagot: D. 14 days

    Section 10 requires written notice at least 14 days before surveillance of an employee starts, unless the employee agrees to less.

15. Tanong 15 ng 25

    In NSW, what does the Workplace Surveillance Act 2005 require for camera surveillance of employees?

    • AVisible cameras and entrance signs
    • BCameras hidden from view of staff
    • CCameras that record only at night
    • DA police permit for every single camera
    Ipakita ang sagot

    Sagot: A. Visible cameras and entrance signs

    Section 11 requires the cameras (or their casing) to be clearly visible and signs at each entrance saying people may be under surveillance.

16. Tanong 16 ng 25

    Under the NSW Workplace Surveillance Act 2005, where must an employer not carry out surveillance of employees?

    • AReception, foyers and waiting areas
    • BCar parks used by staff
    • CChange rooms, toilets and showers
    • DLoading docks and delivery bays
    Ipakita ang sagot

    Sagot: C. Change rooms, toilets and showers

    Section 15 prohibits surveillance of employees in change rooms, toilet facilities and showers or other bathing facilities at a workplace.

17. Tanong 17 ng 25

    Which Victorian law makes it an offence to use optical or listening devices in workplace toilets, washrooms, change rooms or lactation rooms?

    • ASurveillance Devices Act 1999 (Vic)
    • BPrivacy Act 1988 (Commonwealth)
    • CInvasion of Privacy Act 1971 (Qld) s 43
    • DWorkplace Privacy Act 2011 (ACT)
    Ipakita ang sagot

    Sagot: A. Surveillance Devices Act 1999 (Vic)

    Section 9B of Victoria's Surveillance Devices Act 1999 creates this offence.

18. Tanong 18 ng 25

    Which territory's Workplace Privacy Act 2011 requires employers to consult workers in good faith before introducing surveillance?

    • ANorthern Territory
    • BTerritory of Christmas Island
    • CJervis Bay Territory
    • DAustralian Capital Territory
    Ipakita ang sagot

    Sagot: D. Australian Capital Territory

    Sections 13 and 14 of the ACT Workplace Privacy Act 2011 require written notice of surveillance and good-faith consultation with workers during the notice period.

19. Tanong 19 ng 25

    In Queensland, when does the listening device offence in the Invasion of Privacy Act 1971 not apply?

    • AWhen the recording is made on a mobile phone
    • BWhen the person recording is in the conversation
    • CWhen the recording lasts under 5 minutes
    • DWhen the conversation happens outdoors in a park
    Ipakita ang sagot

    Sagot: B. When the person recording is in the conversation

    Section 43(2)(a) says the offence does not apply where the person using the device is a party to the private conversation. Section 45 limits sharing the recording.

20. Tanong 20 ng 25

    Under the NSW Surveillance Devices Act 2007, when may a party record a private conversation?

    • AOnly if a police officer is there as a witness
    • BWhenever they are standing in a public place such as a busy street
    • CWhenever they hold a current security licence in that state
    • DIf all principal parties consent, or to protect lawful interests
    Ipakita ang sagot

    Sagot: D. If all principal parties consent, or to protect lawful interests

    Section 7 allows it with the consent of all principal parties, or where one party consents and the recording is reasonably necessary to protect that party's lawful interests (or is not made to share it with outsiders).

21. Tanong 21 ng 25

    A venue wants to scan every patron's ID, but looking at the ID would be enough for its purpose. What does the OAIC say?

    • AIt may scan if the patron is a regular
    • BIt may scan and keep the data for marketing
    • CIt should not scan if sighting is enough
    • DIt must scan every patron's ID by law
    Ipakita ang sagot

    Sagot: C. It should not scan if sighting is enough

    The OAIC says businesses can only collect what is reasonably necessary and should not scan ID if sighting it would be sufficient.

22. Tanong 22 ng 25

    A co-worker wants a visitor's phone number from the sign-in log to ask them on a date. Is that allowed under APP 6?

    • AYes, if the visitor seemed friendly to them
    • BYes, if the co-worker is a manager
    • CNo, that is not why it was collected
    • DYes, because the log is company property
    Ipakita ang sagot

    Sagot: C. No, that is not why it was collected

    Under APP 6, information may be used only for its primary purpose unless an exception, such as consent, applies.

23. Tanong 23 ng 25

    An organisation gives CCTV footage to police under the enforcement exception in APP 6. What else must it do?

    • ADelete its own copy of the footage
    • BMake a written note of the disclosure
    • CReport the police officer to the OAIC
    • DAsk the person filmed for their permission
    Ipakita ang sagot

    Sagot: B. Make a written note of the disclosure

    APP 6.5 says that when an entity uses or discloses information under the enforcement exception, it must make a written note of it.

24. Tanong 24 ng 25

    Under the Notifiable Data Breaches scheme, when must a covered organisation notify affected people and the OAIC?

    • AOnly if the breach is reported in the media
    • BOnly if more than 1,000 people are affected
    • CWhen serious harm is likely to result
    • DOnly if the police ask it to notify
    Ipakita ang sagot

    Sagot: C. When serious harm is likely to result

    The scheme requires notification when a breach is likely to result in serious harm to a person whose information is involved.

25. Tanong 25 ng 25

    A person thinks a company mishandled their personal information. What should they usually do first?

    • ACall 000 to report it
    • BComplain to the company first
    • CPost the complaint on social media
    • DGo straight to the OAIC by phone
    Ipakita ang sagot

    Sagot: B. Complain to the company first

    The OAIC says you must first complain to the organisation. If it does not respond within 30 days, or you are unhappy, you can complain to the OAIC in writing.

Keyboard: 1–4 para sumagot, Enter para sa susunod na tanong.