Frameworks · Australian Privacy Principles
Australian Privacy Principles and Notifiable Data Breaches readiness
Australian Privacy Principles readiness in TrustProof takes you through all 13 APPs and the Notifiable Data Breaches scheme under the Privacy Act 1988, with evidence and owner sign-offs. It is not legal advice and there is no Privacy Act certification; your legal adviser or an independent privacy assessor decides what your evidence shows.
Key facts
What you can check
- Requirement library
- 25 items covering all 13 APPs and sections 26WE, 26WH, 26WK and 26WL of the Notifiable Data Breaches scheme, in TrustProof's own words with principle and section numbers only.
- Data breach assessments
- An assessment log with dates for suspected eligible data breaches (assessed within 30 days), and procedures and templates for notifying the OAIC and affected people. TrustProof does not notify anyone for you.
- Security evidence from AWS
- APP 11.1 security can draw on 23 read-only AWS checks, such as encryption, MFA and logging. They show AWS configuration, not how personal information is handled.
- 2024 Privacy Act changes
- Covers the automated-decision transparency item (APP 1.7) that starts on 10 December 2026. The Act keeps changing, so get legal advice on your obligations.
- SHA-256 sign-offs
- Each owner sign-off pins a SHA-256 fingerprint of exactly what was approved. If the document or decision changes, the sign-off stops counting until it is approved again.
- Hosted in AWS Sydney
- TrustProof runs on AWS in the Sydney region (ap-southeast-2), encrypted at rest and in transit.
What TrustProof does
- Walks you through each APP and the data breach scheme with plain-language questions
- Tracks your privacy policy, collection notices, retention schedule and breach response plan with review dates
- Keeps access, correction and breach assessment logs as evidence
- Shows red, amber or green readiness for each item, 24 hours a day
- Gives your privacy assessor their own dashboard, with two-step verification
What TrustProof doesn't do
- TrustProof does not certify, and there is no Privacy Act certification.
- It is not legal advice and does not decide whether the Privacy Act applies to you or whether a breach must be notified.
- TrustProof is not affiliated with or endorsed by the OAIC.
FAQ
Frequently asked questions
Is there a Privacy Act certification?
No. The OAIC regulates the Privacy Act and does not certify organisations. Your legal adviser or an independent privacy assessor reviews your evidence.
Does TrustProof decide whether a data breach is notifiable?
No. Your organisation makes that assessment, with legal advice where needed. TrustProof keeps the procedure, the assessment log and the notification templates in one place.
Does it cover the 2024 Privacy Act changes?
It includes the automated-decision item in privacy policies (APP 1.7, from 10 December 2026) and treats security as technical and organisational measures. Further changes are expected, so get legal advice.
Does TrustProof notify the OAIC or affected people for us?
No. Your organisation notifies the OAIC and the people affected. TrustProof helps you keep the procedure, the templates and a log with timestamps.
What does it cost?
The first AWS scan is free. One-Button Fix is A$1,499 one-off. Plans are a one-off Readiness Programme plus Continuous Monitoring from A$899 a month. All prices are in Australian dollars and include GST.