Go to top of page

APSC Privacy Policy (Part A)


The APSC has adopted the layered privacy notice format. The Australian Information Commissioner's guidelines on the Australian Privacy Principles (APPs) note that using a layered approach to the provision of information may assist an individual's understanding of the information in the policy.

The APSC's overall APP Privacy Policy comprises the following parts:

The Complete Privacy Policy is further divided into Part A and Part B. Part A is this document and it provides information about the APSC's privacy practices, including:

  • how an individual may access their personal information and seek its correction;
  • how an individual may complain about breaches of the Australian Privacy Principles (APPs); and
  • disclosure of personal information to overseas recipients.

Part B of the Complete Privacy Policy provides information about the kinds of personal information usually collected and held by the Commission including:

  • how that information is collected and held; and
  • the purposes for which that information is collected, held and disclosed.

Employees of the APSC provide support to four different 'agencies' which are each separate APP entities for the purposes of the Privacy Act:

  • the APSC;
  • the Merit Protection Commissioner;
  • the Remuneration Tribunal; and
  • the Defence Force Remuneration Tribunal.

The Merit Protection Commissioner's privacy policy is available on the website of the APSC. The Remuneration Tribunal and Defence Force Remuneration Tribunal privacy policies are available from their respective websites.

While this policy indicates the APSC's general privacy practices, it should be noted that regulation 9.2 of the Public Service Regulations 1999 provides authority for personal information about APS employees to be disclosed by the APS Commissioner in the exercise of certain powers.


The purpose of this policy is to:

  • clearly communicate the personal information handling practices of the APSC;
  • enhance the transparency of APSC operations; and
  • provide individuals with a better and more complete understanding of the sort of personal information the APSC holds, and the way the APSC handles that information.

The Australian Public Service Commission

The APSC is a Statutory Agency under the Public Service Act 1999 (PS Act) comprising the APS Commissioner and APS employees who assist the Commissioner. The APSC is an agency for the purposes of the Privacy Act 1988 and the APS Commissioner is the principal executive of the agency.

The vision of the APSC is to lead and shape a unified, high-performing APS. The APSC's planned outcome, for the 2013-14 Portfolio Budget Statements, is to increase awareness and adoption of best practice public administration by the Australian Public Service (APS) through leadership, promotion, advice and professional development, drawing on research and evaluation. The APSC takes a central, leadership role in providing expertise, guidance, performance monitoring and some centralised services to all agencies. The APSC also undertakes statutory functions under the PS Act, including functions to strengthen the integrity of the APS.

Meaning of certain words and phrases

This Policy uses abbreviations for some words and phrases as follows:

  • APP or APPs refers to the Australian Privacy Principles under section 14 of the Privacy Act;
  • APS means Australian Public Service;
  • APSC means Australian Public Service Commission;
  • FOI Act means the Freedom of Information Act 1982, which is available for download from www.comlaw.gov.au;
  • OAIC means Office of the Australian Information Commissioner;
  • Personal information has the same meaning as in the Privacy Act and includes any information about an identified individual, or an individual who is reasonably identifiable;
  • Privacy Act means the Privacy Act 1988, which is available for download from www.comlaw.gov.au; and
  • Privacy Contact Officer refers to the officer whose contact details are listed under the heading 'Contact Details' below.

Anonymity and pseudonymity

In general, you have the right to interact anonymously or pseudonymously with this office. There are circumstances, however, where it is impractical for this office to deal with individuals without knowing the identity of the individuals.

If you are seeking information of a general nature from this office, it is unlikely that you will be required to provide your real identity for that purpose. In general, you will not be disadvantaged by dealing anonymously or pseudonymously with this office. However, without knowing your real identity, the type of information we are able to provide to you may be limited.

Before disclosing confidential or personal information, this office will generally need to establish your identity before doing so. In part, this is for the purpose of protecting against the unauthorised disclosure of personal information. Similarly, if you are seeking information about specific circumstances, this office may be unable provide information without knowing the specific details of your request (which may require that you disclose your identity to this office).

If you wish to deal anonymously or pseudonymously with this office, please advise us as early as possible.

Access and correction

You may request access to personal information about you that we hold and you may also request that we correct personal information about you. If you wish to request access or correction, please contact the APSC's Privacy Contact Officer. Before providing access to or correcting personal information about you, we may require you to verify your identity.

APPs 12 and 13 provide individuals with a right of access to and correction of personal information held by an agency. Similar rights also exist under the FOI Act. Whenever possible, the APSC will provide access to and correction of personal information without the need for formal procedures under the legislation.

If you request access or correction, we will provide access or correct the information unless there are valid reasons for not doing so under the Privacy Act, the FOI Act or another relevant law. If we do not provide you with access or we do not make requested changes, we will notify you of the reasons for not doing so and we will also notify you of your review rights.

The access and correction rights under the Privacy Act and the FOI Act are different. The OAIC has published detailed guidelines about access to and correction of personal information. The OAIC's guidelines include information about the practical differences between the Privacy Act and the FOI Act in terms of access to and correction of personal information.


If you believe the APSC has breached any of the APPs, you may submit a complaint to the APSC. Complaints must be made in writing to the Privacy Contact Officer at the email or postal address listed in this policy.

You may submit a complaint anonymously. However, in order to properly consider and respond to your request, the APSC may require further information from you. Therefore, please include your contact details if you submit a complaint.

The APSC will respond to complaints within 30 days of receipt. If you are dissatisfied with the APSC's response to a complaint, you may complain to the OAIC. The OAIC is an independent external body.

Disclosure of personal information to overseas recipients

Most personal information collected and held by the APSC will not be disclosed to overseas recipients.

One of the Australian Public Service Commissioner's functions, under paragraph 41(2)(i) of the PS Act, is to "work with other governments (including foreign governments) on matters relating to public sector workforce management, leadership and career management". In performing this function, a limited amount of personal information about individuals involved in these activities may be disclosed overseas.

Retention and destruction of records

The APSC manages its records in accordance with the Archives Act 1983 (the Archives Act). Records, including records containing personal information, are created and kept as required by the Archives Act. From time to time, records may be destroyed or transferred to the National Archives of Australia (NAA). Records may be destroyed in accordance with:

The APSC's RDA (records authority 2007/00367755) was issued by the NAA on 7 April 2008 and is publicly available from the website of the NAA (or by request to the APSC's Privacy Contact Officer). The RDA includes information about the minimum period that various types of records must be kept before being destroyed or transferred to the NAA.

Further information about records authorities and 'normal administrative practice' can be found on the NAA's website at www.naa.gov.au.

Contact details

If you wish to contact the APSC about a privacy-related matter, including questions about this policy, please contact the APSC's Privacy Contact Officer by one of the following methods:


Privacy Officer

Australian Public Service Commission

GPO Box 3176



privacy [at] apsc.gov.au


02 6202 3571


Last reviewed: 
29 July 2020