Queensland's privacy regime is set out in the Information Privacy Act 2009 (IP Act).
Under the IP Act, the University is legally required to comply with the Information Privacy Principles (IPPs), which are set out in Schedule 3 to the Act. The IPPs cover the collection, storage, use, disclosure and access obligations of agencies. Under the IP Act, agencies are required to take reasonable steps to protect the personal information they hold from misuse and loss and from unathorised access, modification or disclosure.
The University of Queensland is in the process of reviewing its Privacy Management Policy following the commencement of the IP Act.