Westman Printing
GRC 018a · V1.5 · 14 September 2026 · Westman Printing - Reacon

Australian Privacy Law

Part 1 Training
Document information
Version history
AuthorVersionDateSummary of changes
Ben Le1.505/08/2025Change Owner and Approver; amend document layout
Owner
NameTitle/PositionResponsibilities
Ben LeHead of Technology OperationsTo update and authorise changes
Reviewer/Approver
NameReviewer/ApproverCurrent Review DateNext Review Date
Ben LeApprover14/09/202601/09/2027
Kenny ThongReviewer14/09/202601/09/2027
Audience
Business DepartmentDate TrainedEffective From Date
Reacon staffNext annual training due Sep 2026September 2027
Glossary
TermDefinition
GRCGovernance, Risk Management and Compliance
OAICOffice of the Australian Information Commissioner
Reference/supporting documents
Document typeDocument name
Privacy Policy published on websiteReacon Privacy Policy_9 April 2021
Government LegislationPrivacy Act 1988 Compilation No. 79_6 Nov 2018
As part of our ISO 9001 Quality Management System, this training must be completed within 2 weeks of circulation.

Welcome to the Essentials of Privacy Law Training

Training slide Training slide

In February 2018, the Notifiable Data Breaches (NDB) scheme came into effect. This states that any organisation that the Privacy Act covers must notify affected individuals and the Office of the Australian Information Commissioner (OAIC) when a data breach is likely to result in serious harm to an individual whose personal information in involved.

Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide

On 12 December 2022, amendments to the Privacy Act mean that penalties can be up to $2,500,000 for individuals or $50,000,000 for companies.

Training slide Training slide

You play an important role in ensuring that your organisation is complying with the Privacy Law. You need to think about privacy requirements in all aspects of your job.

This training will look at the most important privacy requirements that apply generally to Businesses, to help you understand your responsibilities so that you can assist your Organisation in becoming a 'privacy friendly' business.

If you are ever concerned about the way personal information is being handled in your Organisation, or if you are unsure about your responsibilities, you should contact:

Remember, it is in your best interests to ask questions and to make sure you know what your obligations are.

Training slide Training slide Training slide

Reacon Privacy Policy can be found here: P:\Quality Procedures\Quality Policies & Procedures\Quality and Compliance

Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide

If you have any questions about this, contact GRC team on grcteam@reacongroup.com

Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide

As our clients provide data to us to produce their direct marketing campaigns, we must assume that they have collected the data lawfully.

Training slide Training slide Training slide Training slide Training slide Training slide Training slide

This is also covered in annual QF411 Information Security Training.

Training slide Training slide Training slide Training slide Training slide Training slide Training slide Training slide
GRC 018b · V1.7 · 15 September 2026 · Westman Printing - Reacon

Australian Privacy Law

Part 2 Assessment

This section assesses your understanding of the topics covered in Australian Privacy Law training.

There are 8 questions below. You must answer all of them before submitting. Some questions accept more than one answer — read each question carefully.

The pass mark is set at 75%. If unsuccessful, you will be required to re-sit the assessment until you pass.

Score: 0/8

Q1 Which one or more of the following are areas covered by Australian Privacy Principles? Select all that apply
Not quite — please review and try this question again.
Q2 Is the following statement true or false? “The Australian Privacy Principles are designed to protect individuals by ensuring that their personal information is collected, used and disclosed fairly, and by giving individuals some control over how their information is used and disclosed.” Select one
Not quite — please review and try this question again.
Q3 Which one of the following organisations would not be required to comply with the Australian Privacy Law Principles? Select one
Not quite — please review and try this question again.
Q4 Which of the following types of information requires the most care under the Privacy Law? Select one
Not quite — please review and try this question again.
Q5 Under the Privacy Law, it is a legal requirement for organisations to make their Privacy Policy available to individuals — Select all that apply
Not quite — please review and try this question again.
Q6 Generally, sensitive information about an individual should not be collected without their consent. Which one or more of the following would be examples of sensitive information? Select all that apply
Not quite — please review and try this question again.
Q7 Which of the following statements about direct marketing is correct? Select one
Not quite — please review and try this question again.
Q8 Which one or more of the following are important to ensure that information has a high standard of ‘data quality’? Select all that apply
Not quite — please review and try this question again.
ASSESSMENT PASSED
0/8
0%

Assessment submitted

Your answers have been recorded. A GRC reviewer will confirm your result.