CCTV Privacy Law Mapper
Regimes

Australian Privacy Principles (APPs)

For CCTV at an Australian site: APP 1 (an up-to-date privacy policy), APP 3 (collect only what is reasonably necessary, by fair means and within the law), APP 5 (notify people of the collection), APP 6 (use or disclose for the purpose collected or a secondary purpose APP 6 itself allows, which is where a police request sits), APP 8 (before footage goes overseas) and APP 11 (security, and destroy or de-identify when no longer needed). The consent APP 3 asks for sensitive information, and the state surveillance and workplace surveillance acts, are named, not quoted.

Where it is placed
Placed for sites in Australia, and only when you say the Australian Privacy Act applies to you (many small businesses are exempt); on "not sure" its lines read as questions.
Date last read
29 Sep 2026
Clauses cited
6 of 13 held
The standard itself
Australian Privacy Principles (APPs) on compliance.theartofservice.com
Places
Australia, New South Wales, Victoria, Queensland, Western Australia, South Australia, Tasmania, Australian Capital Territory, Northern Territory

Clauses cited, and the findings that cite them

ClauseTitleFindings
APP APP 1Open and transparent management of personal information6
APP APP 3Collection of solicited personal information1, 10, 11
APP APP 5Notification of the collection of personal information6
APP APP 6Use or disclosure of personal information14
APP APP 8Cross-border disclosure of personal information7
APP APP 11Security of personal information5, 13
APP APP 1Open and transparent management of personal information

APP 1 - Open and transparent management of personal information. Manage personal information in an open and transparent way, including having a clearly expressed and up-to-date APP privacy policy.

What a reviewer asks to see: Published APP privacy policy; Evidence of open data-handling practices; Policy review records
Where camera lists usually fall short: No APP privacy policy; Policy out of date; Practices not transparent
Source: Australian Privacy Principles (APPs), read 29 Sep 2026
APP APP 3Collection of solicited personal information

APP 3 - Collection of solicited personal information. Only collect personal information that is reasonably necessary for the entity's functions or activities, by lawful and fair means.

What a reviewer asks to see: Justification of necessity for collection; Lawful and fair collection methods; Heightened protection for sensitive information
Where camera lists usually fall short: Over-collection; Unlawful/unfair collection; Sensitive info collected without consent
Source: Australian Privacy Principles (APPs), read 29 Sep 2026
APP APP 5Notification of the collection of personal information

APP 5 - Notification of the collection of personal information. Notify individuals of the collection of their personal information and the matters set out in APP 5.

What a reviewer asks to see: Collection notices (APP 5 matters); Timing of notification
Where camera lists usually fall short: No collection notice; Notice missing APP 5 matters
Source: Australian Privacy Principles (APPs), read 29 Sep 2026
APP APP 6Use or disclosure of personal information

APP 6 - Use or disclosure of personal information. Only use or disclose personal information for the purpose it was collected (primary purpose) or a permitted secondary purpose.

What a reviewer asks to see: Use/disclosure tied to primary or permitted purpose; Records of use and disclosure
Where camera lists usually fall short: Use/disclosure for unrelated purpose; No basis recorded
Source: Australian Privacy Principles (APPs), read 29 Sep 2026
APP APP 8Cross-border disclosure of personal information

APP 8 - Cross-border disclosure of personal information. Before disclosing personal information overseas, take reasonable steps to ensure the overseas recipient does not breach the APPs.

What a reviewer asks to see: Overseas disclosure assessment; Contractual safeguards with overseas recipients; Records of cross-border disclosures (APP 8.4)
Where camera lists usually fall short: Overseas disclosure without safeguards; No assessment of recipient
Source: Australian Privacy Principles (APPs), read 29 Sep 2026
APP APP 11Security of personal information

APP 11 - Security of personal information. Take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure, and destroy or de-identify it when no longer needed.

What a reviewer asks to see: Information security controls for personal information; Destruction/de-identification of redundant PI
Where camera lists usually fall short: PI not secured; Redundant PI retained
Source: Australian Privacy Principles (APPs), read 29 Sep 2026

See the specimen list run Map your own list