Per IPP 13 of Privacy Act 2020 + OPC guidance: unique identifiers + PIA. Requirements include (a) IPP 13 - Unique Identifiers - agency must not assign a unique identifier to an individual unless reasonably necessary + must not require the individual to disclose another agency's unique identifier unless reasonably necessary + (b) conduct Privacy Impact Assessments (PIA) per OPC guidance for processing with significant privacy implications + (c) implement Privacy by Design across systems + processes + procurement + (d) implement Agents and Service Providers controls including contractual safeguards + (e) maintain documented PIAs + safeguards + (f) integrate with broader privacy programme.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.