Reports

Privacy Impact Assessment Register

Tourism Australia’s Privacy Impact Assessment Register was last updated on 17 July 2026.

The Privacy (Australian Government Agencies – Governance) APP Code 2017 (Cth) (the APP Code) requires that all agencies, including Tourism Australia, must conduct a Privacy Impact Assessment (PIA) for all high privacy risk projects.

A project may be a high privacy risk project if Tourism Australia considers that the project involves any new or changed ways of handling personal information that are likely to have a significant impact on the privacy of individuals.

Tourism Australia is also required to conduct a PIA if directed to do so by the Office of the Australian Information Commissioner (OAIC).

Tourism Australia is required to maintain a register of all PIAs it conducts and publish that register, or a version of that register, on its website. Further, Tourism Australia may publish a PIA, including Tourism Australia’s response to PIA recommendations, a summary version or an edited copy of a PIA, on its website.

This Privacy Impact Assessment Register is published in full compliance with those requirements.

More information:

For more information, please contact the Privacy Officer via email at privacy@tourism.australia.com with the subject 'Privacy Impact Assessment Register'.