GRC 018b · V1.7 · 15 September 2026 · Westman Printing - Reacon

Australian Privacy Law

Part 2 Assessment

This section assesses your understanding of the topics covered in Australian Privacy Law training.

There are 8 questions below. You must answer all of them before submitting. Some questions accept more than one answer — read each question carefully.

The pass mark is set at 75%. If unsuccessful, you will be required to re-sit the assessment until you pass.

Score: 0/8

Trainee name

Signed Type your full name to sign

Date

Q1 Which one or more of the following are areas covered by Australian Privacy Principles? Select all that apply

Openness and transparency Privacy rights of children Collection of solicited information Direct marketing

Not quite — please review and try this question again.

Q2 Is the following statement true or false? “The Australian Privacy Principles are designed to protect individuals by ensuring that their personal information is collected, used and disclosed fairly, and by giving individuals some control over how their information is used and disclosed.” Select one

True False

Not quite — please review and try this question again.

Q3 Which one of the following organisations would not be required to comply with the Australian Privacy Law Principles? Select one

A not-for-profit charity with a turnover of $5 million per annum A large multi-national company with headquarters in the UK A small business with a turnover of $1.5 million per annum All of the above would be required to comply with the Australian Privacy Law Principles

Not quite — please review and try this question again.

Q4 Which of the following types of information requires the most care under the Privacy Law? Select one

Personal information Information collected from the individual Sensitive information Identifying information

Not quite — please review and try this question again.

Q5 Under the Privacy Law, it is a legal requirement for organisations to make their Privacy Policy available to individuals — Select all that apply

Within 30 days of a request by an individual Free of charge On a website Only when sensitive information is collected, used or disclosed

Not quite — please review and try this question again.

Q6 Generally, sensitive information about an individual should not be collected without their consent. Which one or more of the following would be examples of sensitive information? Select all that apply

Home address Belonging to a political party Religious beliefs Having a criminal record

Not quite — please review and try this question again.

Q7 Which of the following statements about direct marketing is correct? Select one

It doesn't matter if personal information is sensitive information; the same restrictions on direct marketing always apply An organization can always use personal information for direct marketing purposes if they have the individual's consent If you have received an individual's consent to use their personal information for direct marketing, you don't need to include an option for them to opt out All of the above are correct

Not quite — please review and try this question again.

Q8 Which one or more of the following are important to ensure that information has a high standard of ‘data quality’? Select all that apply

The information must be accurate The information must be complete The information must be collected from the individual The information must be up to date

Not quite — please review and try this question again.

ASSESSMENT PASSED

0/8

0%

Assessment submitted

Your answers have been recorded. A GRC reviewer will confirm your result.

GRC 018b – Australian Privacy Law · Part 2 Assessment · Reacon