Greenleaf, Graham; Waters, Nigel; Bygrave, Lee --- "Strengthening uniform privacy principles: an analysis of the ALRC's proposed principles" [2008] UNSWLRS 17

Last Updated: 5 September 2008

Strengthening uniform privacy principles: an analysis of the ALRC's proposed principles
Graham Greenleaf, Nigel Waters and Lee Bygrave

This paper will shortly be available for download.

Citation

This paper is the first of six submissions that will appear in the UNSW Law Research Series as part of a series made to the Australian Law Reform Commission on the Review of Australian Privacy Law Discussion Paper 72 by researchers on the ‘Interpreting Privacy Principles’ project based at the Cyberspace Law and Policy Centre, University of New South Wales.

Abstract

This submission responds to Part D of the Australian Law Reform Commission’s
Discussion Paper 72 Review of Australian Privacy Law, September 2007 which deal with the information privacy principles lying at the heart of the Privacy Act 1988 and the definitions which are essential to their meaning.

As part of its Review of Australian Privacy Law, the ALRC has proposed that the Privacy Act should be amended to consolidate the current Information Privacy Principles and National Privacy Principles into a single set of privacy principles—the Unified Privacy Principles (UPPs)—that would be generally applicable to agencies and organisations, subject to exceptions as required. The ALRC has also proposed that amendments be made to some key definitions. This submission supports a single set of principles, but makes numerous suggestions for improvements to the proposed UPPs to ensure they represent world best practice and address some of the weaknesses and ambiguities exposed by experience of the current principles Suggestions include more clearly defining ‘personal information’, ‘consent’ and ‘authorised by law’; express application of collection principles to collection by observation or surveillance; stronger notification requirements; a condition of ‘proportionality’ in collection and use; a separate retention principle, and a re-worked transborder data flow principle that does not leave so much discretion to data exporters as the current NPP 9.