Free checklist
Australian Privacy Principles Checklist (13 APPs)
Answer one yes or no question for each of the 13 Australian Privacy Principles. Any no is a spot to look at first.
The 13 questions
Australian Privacy Principles checklist
Each question matches one Australian Privacy Principle. A no shows you where to look first. Your answers stay on this page and are not sent anywhere.
By the Savira teamPublished 18 October 2026Last reviewed 18 October 2026
Does the Privacy Act cover your business?
It depends. Most businesses with annual turnover of $3 million or less are exempt, but exceptions apply. Check before you start.
- APP 1
Open and transparent management
Do you have a current privacy policy that is easy to find on your website?
- APP 2
Anonymity and pseudonymity
Where practical, can people deal with you without giving their name?
- APP 3
Collection of solicited information
Do you only collect the personal information you need to run your business?
- APP 4
Unsolicited information
If you receive personal information you did not ask for, do you check whether you could have collected it?
- APP 5
Notification of collection
Do you tell people what you collect and why, at or before the time you collect it?
- APP 6
Use or disclosure
Do you only use or share personal information for the reason you collected it, or another reason the law allows?
- APP 7
Direct marketing
Does every marketing message you send include a simple way to opt out?
- APP 8
Cross-border disclosure
Do you know if customer information goes overseas (for example to a cloud or email tool), and have you checked how it is protected?
- APP 9
Government related identifiers
Do you avoid using a government identifier, like a Medicare or tax file number, as your own customer ID?
- APP 10
Quality of information
Do you take reasonable steps to keep the information you hold accurate, up to date and complete?
- APP 11
Security of information
Do you protect personal information from misuse and unauthorised access, and destroy it when you no longer need it?
- APP 12
Access to information
Can people ask to see the information you hold about them, and do you know how you would respond?
- APP 13
Correction of information
Can people ask you to correct their information, and do you have a way to act on it?
Keep a copy
The same 13 questions on one A4 page, ready to print and tick.
PDF, A4, 1 page
This is general information, not legal advice. Every business handles information a bit differently, so if you're not sure how this applies to yours, it's worth checking with a lawyer or privacy adviser.
Source: Australian Privacy Principles, Privacy Act 1988 (Cth), Schedule 1, via the Office of the Australian Information Commissioner (OAIC).
Does the Privacy Act apply to my small business?
It applies if your turnover is more than $3 million, or if you are a health service provider, trade in personal information or provide AML/CTF designated services. Check where you stand in our small business exemption guide.
Which of the 13 APPs affect my website?
Mainly APP 1 (your privacy policy), APP 3 and APP 5 (collecting and telling people), APP 7 (marketing), APP 8 (overseas tools) and APP 11 (security).
Is there an APP compliance checklist for small business?
This is it: 13 yes or no questions, one per Australian Privacy Principle, with what to do for each no.
Can I download the Privacy Act checklist as a PDF?
Yes. Finish the checklist and download your answers as a PDF.
Are my answers saved?
No. They stay in your browser unless you download the PDF.