What is the Privacy Act?
The Privacy Act 1988 (Privacy Act) is Australian legislation that protects the way your personal information is handled.
Australian privacy principles
The Privacy Act contains 13 Australian Privacy Principles (APPs). The APPs regulate how we collect, store, provide access to and use personal information.
1. Open and transparent management of personal information
Ensures your personal information is managed in an open and transparent way. This includes having a clear, up-to-date privacy policy.
2. Anonymity and pseudonymity
Notes that people must be given the option to remain anonymous or use a pseudonym, except in limited cases.
3. Collection of solicited personal information
Outlines when solicited personal information can be collected. It enforces higher standards for sensitive information.
4. Dealing with unsolicited personal information
Determines how unsolicited personal information is dealt with.
5. Notification of personal information collection
Highlights when and what you must be told about when your information is collected.
6. Use or disclosure of personal information
Outlines the way and times that your personal information can be used or disclosed.
7. Direct marketing
Explains that personal information can only be used for direct marketing in certain circumstances.
8. Cross-border disclosure of personal information
Outlines what needs to be done to protect your personal information before it's disclosed overseas.
9. Adoption, use or disclosure of government related identifiers
Specifies when your government-related identifier can be used and disclosed by a government department or third party.
10. Quality of personal information
Requires that stringent measures are taken to ensure the accuracy and quality of personal information before it's disclosed to other parties.
11. Security of personal information
Ensures your personal information is protected from misuse, interference, loss, unauthorised access, modification and disclosure. It also details circumstances where personal information should be destroyed or de-identified.
12. Access to personal information
Describes how your requests to access your personal information must be handled.
13. Correction of personal information
Specifies how requests to correct the personal information must be handled.
Our privacy policy
The Privacy Act requires anyone bound by the Australian Privacy Principles (APPs) to have a privacy policy.
You should read our privacy policy if you're:
-
An applicant of an intellectual property (IP) right
-
An owner of an IP right
-
An attorney or agent for an applicant or owner
-
An individual whose personal information may be given to, or held, by IP Australia
-
A contractor, consultant, supplier or vendor of goods or services to IP Australia
-
A person seeking employment with IP Australia
-
An IP Australia employee.
Detailed information on the Privacy Act and APPs can be found at the Office of the Australian Information Commissioner (OAIC).
Your personal information
We collect personal information about you only when it's necessary for, or directly related to, our functions or activities.
We're committed to protecting your personal details and the security of your information.
How we handle your information
We don't give your personal information to other government agencies or private-sector organisations unless one of the following applies:
-
You've given us your permission
-
You're aware that information of this kind is usually passed to those bodies or agencies
-
The disclosure is required or authorised by law (such as our IP rights legislation)
-
It's a special situation that:
-
will prevent or lessen a serious and imminent threat to somebody's life, health or safety
-
relates to suspected unlawful activity or serious misconduct.
-
We only disclose personal information to overseas recipients:
-
With your consent
-
Where legally authorised
-
When required by an international treaty or convention.
When personal information is no longer required, we destroy or delete it in a secure manner.
You can request details of personal information we hold about you at any time. Reach out to us if you'd like to access or correct your information.
How we use your information online
We use a number of online platforms and third party software as part of our business operations. They allow us to:
-
Monitor the performance of our systems
-
Improve our online customer experience
-
Communicate with you.
Dynatrace application performance monitoring (APM) platform
Our online services platform uses Dynatrace Application Performance Monitoring (APM) to monitor technical faults. This allows our systems support team to quickly rectify issues and identify improvements.
Dynatrace doesn't collect personally identifiable information.
Clickstream data
Clickstreams record your path when navigating a web page or the internet.
When you visit our website, our internet service provider (ISP) makes a record of your visit and logs your clickstream information.
We use this information to see what pages you've visited on our website. We analyse it to improve overall customer experience, establish priorities and allocate resources.
We don't identify you or your browsing activities, except if a law enforcement agency provides a warrant to inspect our ISP logs as part of an official investigation.
Cookies
A cookie is a short piece of data sent from a web server to a web browser on your computer or device when you visit a website. We use cookies to help co-ordinate your experience
We can't use cookies to find out names, email address or anything about your computer. We don't store or collect cookie information.
Survey Monkey
We use Survey Monkey to administer online surveys. These surveys use third party cookies.
The information collected by the cookies is not capable of identifying. It's only used to ensure our surveys run effectively. We only use this information for statistical and maintenance purposes. For more information, see Survey Monkey's Privacy Policy.
Qualtrics
We use Qualtrics to administer online surveys. Qualtrics uses cookies to analyse, measure and improve its performance. These surveys also use third party cookies.
Neither we or Qualtrics retain control over, or access to, the information supplied by the cookies to third parties.
You can find out how to amend your cookie setting to suit your preferences in Qualtrics privacy statement and Qualtrics Cookie Statement.
Google Analytics
We use Google Analytics to collect anonymous information about how you arrive at and interact with our website. Google uses first-party cookies and JavaScript code to collect this information.
Google Analytics doesn't track any application processes or procedures from online services.
You can opt out of Google Analytics by disabling or refusing the cookie or disabling JavaScript.
Eventbrite
We coordinate our events through Eventbrite. Eventbrite facilitates the registration process and handles any personal information collected in accordance with their Privacy Policy. They'll also provide your name, contact details and email address to us for the purpose of registration for the event.
Any personal information collected by IP Australia will be handled in accordance with our Privacy Policy and the Privacy Act 1988.
Emails
We have a number of subscription-based email lists to keep you informed about what's happening at IP Australia. If you choose to subscribe to any of these lists, you'll need to provide us with personal information such as your contact details and email address. We don't share this information with anyone.
Online services
If you apply for an IP right in Australia, you'll need to register with our online services. Before you can register, you need to read, accept and agree to follow our terms and conditions.
We don't disclose this information to any other government departments or private organisations.
How we handle high privacy risk projects
Under the Privacy (Australian Government Agencies – Governance) APP Code 2017 (Cth) (APP Code), we're required to conduct a privacy impact assessment (PIA) for each high privacy risk project.
| PIA | Date of completion |
| TM-Link — release 1 | July 2018 |
| Smart trade mark | July 2018 |
| RIO auto user provisioning | April 2019 |
| Performance management system and recruitment system | May 2019 |
| Customer satisfaction survey | May 2019 |
| Digital access service | June 2018 |
| Transactional digital services party address book | November 2019 |
| Patent landscape reports | November 2019 |
| Business intelligence and analytics platform | December 2019 |
| New support ticket portal | April 2020 |
| Adobe Acrobat update | June 2020 |
| New fax system | June 2020 |
| Transactional digital services – web build | July 2020 |
| Interactive voice response | July 2020 |
| Contact centre transition | April 2021 |
| TM-Link 2021 | July 2021 |
| ICT advisory services | December 2021 |
| LXP learning experience platform | April 2022 |
| ServiceNow ITMS tool | May 2022 |