Privacy Management Plan

This Privacy Management Plan is an important tool in explaining how Port Authority upholds and respects the privacy of employees, contractors and others about whom it holds personal and health information, in accordance with the following key Privacy Laws:

• Privacy and Personal Information Protection Act 1998 (PPIPA); and
• Health Records & Information Privacy Act 2002 (HRIPA).

The Plan is a requirement of section 33(2) of the PPIPA and explains:

• the policies and practices in place to achieve privacy compliance
• who to contact with questions about the information collected and held by Port Authority
• how to access and amend your personal information
• what to do if Port Authority may have breached its privacy obligations
• the internal review procedures in place.

Port Authority also applies the Privacy Act 1998 (Cth) in relation to personal information which is required to be handled in accordance with the federal privacy legislation e.g., Tax File Numbers of individuals. 

The Privacy Management Plan covers all personal and health information, irrespective of whether it is collected from employees, customers, tenants, service providers, members of the public and/or other stakeholders. This Plan is also used in training and as a reference for employees of Port Authority to understand and comply with their obligations. These obligations are reinforced by Port Authority's Code of Conduct and through initiatives outlined in this Plan (see 7.1 Roles and Responsibilities for more detail).