eCompliance Central
AI, privacy & cyber

Privacy principles

This course provides employees and organisations with a clear understanding of their responsibilities under Australia’s Privacy Act 1988 (Cth). Participants will learn how to correctly collect, use, store, and disclose personal information in line with the Australian Privacy Principles (APPs), and how to apply those obligations when using AI tools at work. The course also covers the recent privacy reforms, including the statutory right for individuals to sue over serious invasions of privacy, substantially increased penalties, and the automated decision-making disclosure requirements commencing December 2026.

Self-paced online moduleSCORM, Rise 360 or hostedScenario-basedCertificate of completionLegislation mapping included
Built for

Who this course is for

Whether you're learning solo or rolling training out across a whole team, the course fits.

All employees
The foundations everyone needs to work safely and respectfully.
People leaders & managers
Modelling behaviour, spotting risk early and responding well.
HR and people & culture
Policies, procedures and prevention in practice.
Small businesses without a compliance team
Practical, ready-to-run training that meets the obligation.
Curriculum

Inside the course

Understand the purpose of the Privacy Act 1988 (Cth) and who it protects.
Learn what constitutes personal and sensitive information, and why privacy compliance matters.
Grounded in law

The legislation this course covers

Privacy Act 1988 (Cth)

Australia’s primary privacy legislation governing the handling of personal information.

Australian Privacy Principles (APPs)

Thirteen principles outlining how organisations must collect, use, disclose, store, and manage personal information.

Privacy and Other Legislation Amendment Act 2024

Introduced the statutory tort for serious invasions of privacy, anti-doxxing offences, a tiered civil penalty regime, and automated decision-making transparency obligations.

Notifiable Data Breaches (NDB) scheme

Sets out when an eligible data breach must be reported and how.

Regulatory Oversight

Office of the Australian Information Commissioner (OAIC), responsible for enforcing privacy compliance.

Content reviewed by subject-matter experts and updated when legislation changes.

Make it yours.

Your policies, your scenarios, your branding — three customisation levels, from logo and terminology to fully tailored media and role-based learning paths. Typical turnaround: 5–15 business days.

Compliance pack

This course comes in the AI-ready workplace pack.

The pack bundles it with AI compliance Australia and Cybersecurity awareness and best practices — quoted together, customised as a set, one rollout.

This course is intended for educational purposes only and provides general guidance on privacy obligations. It does not constitute legal advice. Content reviewed as at July 2026.

Train your team this week.

Quoted per teamPrivacy principles