Privacy Programme Practices (non-statutory)
Operational privacy programme practices that are not obligations under any single statute. Separated from the Australian Privacy Principles on 2026-08-19 because Schedule 1 of the Privacy Act 1988 defines exactly 13 principles and these are not among them.
Privacy Programme Practices (non-statutory) is a compliance framework from Australia with 1 domains and 7 controls that map to 3 other frameworks. The largest domains are Privacy programme practices (7 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (1)
Privacy programme practices
| Code | Title |
|---|---|
| COMP | Complaints handling |
| GOV-PO | Privacy officer and accountability |
| NDB | Notifiable Data Breaches scheme |
| PIA | Privacy Impact Assessment |
| REG | Records of disclosures |
| TRN | Privacy training and awareness |
| VEN | Vendor and contracted service provider management |
Your Compliance Coverage
If you comply with Privacy Programme Practices (non-statutory), you already cover:
Maps to 3 other frameworks
What is Privacy Programme Practices (non-statutory) and who does it apply to?
Privacy Programme Practices (non-statutory) is a compliance framework from Australia with 1 domains and 7 controls. Operational privacy programme practices that are not obligations under any single statute. Separated from the Australian Privacy Principles on 2026-08-19 because Schedule 1 of the Privacy Act 1988 defines exactly 13 principles and these are not among them. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Privacy Programme Practices (non-statutory) actually require?
Privacy Programme Practices (non-statutory) has 7 controls organised across 1 domains. The largest domains are Privacy programme practices (7 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Privacy Programme Practices (non-statutory) do I already cover?
Privacy Programme Practices (non-statutory) maps to 3 other compliance frameworks. The top mapping partners are GDPR (71% coverage), ISO 27701:2019 (14% coverage), Consumer Data Right Rules 2020 (selected operational obligations) (14% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement Privacy Programme Practices (non-statutory)?
Start your Privacy Programme Practices (non-statutory) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Privacy Programme Practices (non-statutory) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 7 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.
Get Started Free →Free forever — no credit card required