Australian Privacy Principles (APPs) APP-6: APP 6 - Use or disclosure of personal information

What else in your programme already covers this

This control maps to 41 controls across 16 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

APEC Cross-Border Privacy Rules (CBPR) System · 5 controls

CBPR-03 Uses of Personal Information
CBPR-PR-08 Use limited to stated purposes
CBPR-PR-09 Grounds for unrelated use
CBPR-PR-12 Disclosure consistent with original purpose
CBPR-PR-13 Grounds for other disclosure

APPI · 4 controls

APPI-A17 Specification of the Purpose of Use
APPI-A18 Restriction on Handling Beyond the Purpose of Use
APPI-A19 Prohibition of Improper Use
APPI-A27 Restriction on Provision to Third Parties

Australia My Health Records Act 2012 · 4 controls

MYHR-CUD-1 Authorised collection, use and disclosure only
MYHR-CUD-2 Prohibition on unauthorised collection, use and disclosure
MYHR-CUD-3 Use limited to My Health Record purposes
MYHR-CUD-6 Prohibition on use for a prohibited purpose

CCPA/CPRA · 4 controls

CCR §7050 Service Provider and Contractor Obligations
§1798.100 General Duties of Businesses that Collect Personal Information
§1798.115 Right to Know Personal Information Sold or Shared and Recipients
§1798.121 Right to Limit Use and Disclosure of Sensitive Personal Information

ISO 27701:2019 · 4 controls

7.2.1 Identify and document purpose
7.2.2 Identify lawful basis
7.4.2 Limit processing
7.5.4 Records of PII disclosure to third parties

ACT Workplace Privacy Act 2011 · 3 controls

22(1) s 22(1) and (2) No adverse action on the basis of surveillance records unless the notice said so
22(3) s 22(3) Use and disclosure of surveillance records limited to permitted purposes
39 s 39 Covert surveillance information used or disclosed only for a relevant purpose

Queensland Residential Tenancies and Rooming Accommodation Act 2008 · 3 controls

s202-204 s 202 to s 204 No unlawful entry, no photos of tenant belongings in adverts, no open homes or auctions without consent
s308C-I s 308C to s 308I Domestic violence notices ending a tenancy interest: respond, notify co-tenants, no costs, confidentiality
s459 s 459 List a former tenant in a tenancy database only on a prescribed reason and after review

Australia NDIS Practice Standards and Quality Indicators · 2 controls

core-12.1 Information management: informed consent to collect, use and disclose information
m3-6.3 Collaboration: information shared across the team with family consent

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-DSP-10 Sensitive Data Transfer
CCM-DSP-12 Limitation of Purpose in Personal Data Processing

GDPR · 2 controls

GDPR-Art.5 Principles relating to processing of personal data
GDPR-Art.6 Lawfulness of processing

NSW Surveillance Devices Act 2007 · 2 controls

11 s 11 No communication or publication of private conversations or activities obtained unlawfully
14 s 14 No communication or publication of computer information from unlawful data surveillance

NSW Workplace Surveillance Act 2005 · 2 controls

s18 s 18 Use and disclosure of notified surveillance records
s37 s 37 Covert surveillance information used or disclosed for a relevant purpose only

Australia Consumer Data Right - Banking (CDR) · 1 control

AUCDR-PS-6 Privacy Safeguard 6 - Use or disclosure of CDR data

FedRAMP High · 1 control

AC-4 Information Flow Enforcement

Victoria Surveillance Devices Act 1999 · 1 control

11 s 11 No communication or publication of private conversations or activities recorded by surveillance devices, except as permitted

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of Australian Privacy Principles (APPs) have you already done?

Australian Privacy Principles (APPs) APP-6 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of Australian Privacy Principles (APPs) your existing evidence covers. Hold GDPR and 11 of 13 Australian Privacy Principles (APPs) controls already carry evidence.

If you hold GDPR84.6% covered · 2 gaps If you hold ISO 27701:201976.9% covered · 3 gaps If you hold APEC Cross-Border Privacy Rules (CBPR) System69.2% covered · 4 gaps If you hold CCPA/CPRA69.2% covered · 4 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the GDPR pair alone.

See the released pairs, $299 each Browse the graph free