OAIC Privacy Management Framework 2.2: 2.2 Maintain personal information handling processes across the lifecycle

Develop and maintain processes that make the handling of personal information consistent with the entity's obligations. The processes cover the whole information lifecycle (before collection, after collection, while held and once no longer needed), give extra attention to higher-risk areas such as sensitive information, service providers, contractors, outsourcing and offshore storage, and state clearly how staff are expected to handle personal information in their everyday work, tailored to how each part of the business uses it.

Other controls in Step 2: Establish robust and effective privacy practices, procedures and systems – OAIC Privacy Management Framework

2.1 2.1 Keep an up-to-date record of personal information holdings
2.3 2.3 Integrate privacy into induction and regular training
2.4 2.4 Maintain a clearly expressed, current privacy policy and consistent notices
2.5 2.5 Manage privacy and personal information security risks
2.6 2.6 Undertake privacy impact assessments for new or changed handling
2.7 2.7 Handle privacy enquiries and complaints
2.8 2.8 Enable prompt and easy access and correction
2.9 2.9 Develop a data breach response plan

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All OAIC Privacy Management Framework controls