{ "entity_id": "O-000792", "folder": "Office-of-the-Australian-Information-Commissioner", "name": "Office of the Australian Information Commissioner", "type": "Non-corporate Commonwealth Entity", "jurisdiction": "Commonwealth", "portfolio": "Attorney-General's", "website": "http://www.oaic.gov.au", "data_status": "rich", "completeness": { "has_strategy_brief": true, "has_strategy_structured": true, "has_vision": false, "has_kpi_targets": true, "has_kpi_results": true, "has_strategy_overview": true, "has_legislation_text": true, "has_legislation_structured": true, "has_global_initiatives_text": true, "has_global_initiatives_structured": true, "n_global_initiatives": 9, "has_ideas": true, "has_artifacts": true, "n_ideas": 8, "n_legislation": 9, "n_artifacts": 13, "n_kpi_targets": 4, "n_kpi_results": 4, "n_outcomes": 1, "verified_own_data": true }, "strategy_profile": { "status": "published", "confidence": "high", "summary": "To promote and uphold privacy and information access rights.", "official_site_url": "http://www.oaic.gov.au", "source_documents": [ { "type": "annual_report", "title": "OAIC_Annual-Report-2023-24 (PDF, 5918 KB)", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/243592/OAIC_Annual-Report-2023-24_Digital.pdf", "period": "2023-24", "confidence": "high" }, { "type": "annual_report", "title": "Annual report 2022-23 (PDF, 5450 KB)", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0029/94295/OAIC_Annual-Report-2022-23.pdf", "period": "2022-23", "confidence": "high" }, { "type": "annual_report", "title": "Download the print version", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0021/23097/OAIC_annual-report-2021-22_final.pdf", "period": "2021-22", "confidence": "high" }, { "type": "annual_report", "title": "Download the print version", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0020/10829/oaic-annual-report-2020-21.pdf", "period": "2020-21", "confidence": "high" }, { "type": "annual_report", "title": "Download the print version (PDF, 6681 KB)", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0021/9291/oaic-annual-report-2019-20.pdf", "period": "2019-20", "confidence": "high" }, { "type": "corporate_plan", "title": "Corporate plan 2025–26 (PDF, 5144 KB)", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "period": "2025-26", "confidence": "high" }, { "type": "corporate_plan", "title": "OAIC Corporate plan 2024–25 (PDF, 2154 KB)", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0022/241375/Corporate-plan-2024.pdf", "period": "2024-25", "confidence": "high" }, { "type": "corporate_plan", "title": "Download the print version (PDF, 8373 KB)", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0020/82532/OAIC-Corporate-plan-2023-24.pdf", "period": "2023-24", "confidence": "high" }, { "type": "corporate_plan", "title": "Download the print version (PDF, 12841 KB)", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0035/38897/OAIC-Corporate-Plan-2022-23.pdf", "period": "2022-23", "confidence": "high" }, { "type": "corporate_plan", "title": "Download the print version (PDF, 6761 KB)", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0007/4102/oaic-corporate-plan-2021-22.pdf", "period": "2021-22", "confidence": "high" } ], "purpose": { "text": "To promote and uphold privacy and information access rights.", "source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "source_page": 9, "source_deep_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf#page=9" }, "vision": null, "strategic_priorities": [ { "title": "Rights preservation in new and emerging technologies", "description": "Rights preservation in new and emerging technologies", "source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "source_page": 16, "source_deep_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf#page=16" }, { "title": "Rebalancing power and information asymmetries", "description": "Rebalancing power and information asymmetries", "source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "source_page": 16, "source_deep_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf#page=16" }, { "title": "Ensuring timely access to government information", "description": "Ensuring timely access to government information", "source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "source_page": 16, "source_deep_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf#page=16" }, { "title": "Excessive collection and retention of personal information", "description": "Excessive collection and retention of personal information", "source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "source_page": 16, "source_deep_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf#page=16" }, { "title": "Systemic failures to enable timely access to government information", "description": "Systemic failures to enable timely access to government information", "source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "source_page": 16, "source_deep_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf#page=16" }, { "title": "Advertising technology (Ad tech) such as pixel tracking", "description": "Advertising technology (Ad tech) such as pixel tracking", "source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "source_page": 16, "source_deep_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf#page=16" } ], "values": [ { "name": "Independent", "description": "", "source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "source_page": null }, { "name": "Agile", "description": "", "source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "source_page": null }, { "name": "Engaged", "description": "", "source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "source_page": null }, { "name": "Targeted", "description": "", "source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "source_page": null }, { "name": "Expert", "description": "", "source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "source_page": null } ], "outcomes": [ { "name": "Outcome 1: Provision of public access to Commonwealth Government information, protection of individuals’ personal information, and performance of Information Commissioner, freedom of information and privacy functions", "description": "The OAIC’s activities support the effective regulation of the Consumer Data Right (CDR) and the advancement of online privacy protections.", "activities": [ "Influence and uphold privacy and information access rights frameworks", "Advance online privacy protections for Australians", "Encourage and support proactive release of government information", "Take a contemporary, harms-based approach to regulation" ], "source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "source_page": 7, "source_deep_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf#page=7" } ], "performance_measures": [ { "code": "PRI01", "measure": "Effectiveness of the OAIC’s contribution to the regulation of the Consumer Data Right (CDR) as measured by stakeholder feedback", "target": "Baseline to be set", "latest_result": "71", "status": "Achieved", "target_source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "target_source_page": 26, "result_source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/243592/OAIC_Annual-Report-2023-24_Digital.pdf", "result_source_page": 23 }, { "code": "PRI02", "measure": "Percentage of regulated entities that report satisfaction with OAIC guidance and resources", "target": "Baseline to be set", "latest_result": "78%", "status": "Not achieved", "target_source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "target_source_page": 28, "result_source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/243592/OAIC_Annual-Report-2023-24_Digital.pdf", "result_source_page": 23 }, { "code": "FOI01", "measure": "Percentage of OAIC recommendations accepted by agencies following FOI complaint investigations", "target": "90%", "latest_result": "65%", "status": "Not achieved", "target_source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "target_source_page": 30, "result_source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/243592/OAIC_Annual-Report-2023-24_Digital.pdf", "result_source_page": 26 }, { "code": "FOI02", "measure": "Initial assessments are completed and recorded on all proactive regulatory activities to ensure appropriate and proportionate regulatory responses", "target": "100%", "latest_result": "97%", "status": "Achieved", "target_source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "target_source_page": 31, "result_source_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/243592/OAIC_Annual-Report-2023-24_Digital.pdf", "result_source_page": 26 } ], "document_alignment_terms": { "must_support": [ "To promote and uphold privacy and information access rights.", "Rights preservation in new and emerging technologies", "Rebalancing power and information asymmetries", "Ensuring timely access to government information", "Excessive collection and retention of personal information", "Systemic failures to enable timely access to government information", "Advertising technology (Ad tech) such as pixel tracking" ], "watch_terms": [ "Effectiveness of the OAIC’s contribution to the regulation of the Consumer Data Right (CDR) as measured by stakeholder feedback", "Percentage of regulated entities that report satisfaction with OAIC guidance and resources", "Percentage of OAIC recommendations accepted by agencies following FOI complaint investigations", "Initial assessments are completed and recorded on all proactive regulatory activities to ensure appropriate and proportionate regulatory responses" ], "avoid_claiming_without_evidence": [] }, "review_note": "" }, "global_initiatives": { "focus_areas": [ "Privacy regulation", "Freedom of information", "Consumer Data Right regulation", "Advertising technology oversight" ], "initiatives": [ { "name": "GDPR (General Data Protection Regulation)", "focus_area": "Privacy regulation", "jurisdiction": "EU", "run_by": "European Commission", "year": "2018", "status": "Active", "what_it_does": "The GDPR sets strict guidelines for the collection and processing of personal data across the EU, aiming to give individuals control over their personal information and to harmonize data protection laws across Europe.", "why_relevant": "", "find_more_title": "Learn more about GDPR", "find_more_url": "https://www.google.com/search?q=GDPR+data+protection+regulation" }, { "name": "California Consumer Privacy Act (CCPA)", "focus_area": "Privacy regulation", "jurisdiction": "California, USA", "run_by": "California Attorney General", "year": "2020", "status": "Active", "what_it_does": "The CCPA gives California residents more control over their personal information and imposes requirements on businesses that collect personal data, including rights to access, delete, and opt-out of the sale of personal information.", "why_relevant": "", "find_more_title": "California Consumer Privacy Act", "find_more_url": "https://www.google.com/search?q=California+Consumer+Privacy+Act" }, { "name": "New Zealand Privacy Act 2020", "focus_area": "Privacy regulation", "jurisdiction": "New Zealand", "run_by": "Office of the Privacy Commissioner", "year": "2020", "status": "Active", "what_it_does": "The Privacy Act 2020 strengthens privacy protections in New Zealand by giving individuals greater control over their personal information and imposing stricter obligations on organizations that handle personal data.", "why_relevant": "", "find_more_title": "New Zealand Privacy Act 2020", "find_more_url": "https://www.google.com/search?q=New+Zealand+Privacy+Act+2020" }, { "name": "Freedom of Information Act (FOIA)", "focus_area": "Freedom of information", "jurisdiction": "United States", "run_by": "Office of Government Information Services", "year": "1974", "status": "Active", "what_it_does": "The FOIA allows public access to government documents and information, promoting transparency and accountability in government operations.", "why_relevant": "", "find_more_title": "Freedom of Information Act", "find_more_url": "https://www.google.com/search?q=Freedom+of+Information+Act+USA" }, { "name": "UK Freedom of Information Act 2000", "focus_area": "Freedom of information", "jurisdiction": "United Kingdom", "run_by": "Information Commissioner’s Office", "year": "2000", "status": "Active", "what_it_does": "The UK Freedom of Information Act 2000 mandates public authorities to provide information to the public upon request, promoting transparency and accountability.", "why_relevant": "", "find_more_title": "UK Freedom of Information Act 2000", "find_more_url": "https://www.google.com/search?q=UK+Freedom+of+Information+Act+2000" }, { "name": "Consumer Data Right (CDR) in Australia", "focus_area": "Consumer Data Right regulation", "jurisdiction": "Australia", "run_by": "Australian Government", "year": "2020", "status": "Active", "what_it_does": "The CDR is a regulatory framework designed to facilitate the secure sharing of consumer data across financial services, enhancing competition and innovation.", "why_relevant": "", "find_more_title": "Australian Consumer Data Right", "find_more_url": "https://www.google.com/search?q=Australian+Consumer+Data+Right" }, { "name": "Open Banking in the UK", "focus_area": "Consumer Data Right regulation", "jurisdiction": "United Kingdom", "run_by": "Financial Conduct Authority", "year": "2018", "status": "Active", "what_it_does": "Open Banking allows banks and financial institutions to share customer data securely with third-party providers, promoting competition and innovation in the financial sector.", "why_relevant": "", "find_more_title": "UK Open Banking", "find_more_url": "https://www.google.com/search?q=UK+Open+Banking" }, { "name": "Data Protection and Digital Information Bill (DPDIB) in the UK", "focus_area": "Advertising technology oversight", "jurisdiction": "United Kingdom", "run_by": "UK Government", "year": "2022", "status": "Active", "what_it_does": "The DPDIB aims to update data protection laws and introduce new measures to regulate advertising technology, including greater transparency and accountability for data use.", "why_relevant": "", "find_more_title": "UK Data Protection and Digital Information Bill", "find_more_url": "https://www.google.com/search?q=UK+Data+Protection+and+Digital+Information+Bill" }, { "name": "AdTech Regulatory Framework in Singapore", "focus_area": "Advertising technology oversight", "jurisdiction": "Singapore", "run_by": "Personal Data Protection Commission", "year": "2020", "status": "Active", "what_it_does": "Singapore’s regulatory framework for advertising technology focuses on ensuring transparency and accountability in data use, protecting consumer privacy while fostering innovation.", "why_relevant": "", "find_more_title": "Singapore AdTech Regulations", "find_more_url": "https://www.google.com/search?q=Singapore+AdTech+Regulations" } ], "count": 9 }, "strategy": { "reporting_period": "2023-24", "corporate_plan_period": "2025-26", "vision": null, "vision_source_page": null, "purposes": "To promote and uphold privacy and information access rights.", "purposes_source_page": 9, "how_we_deliver": "The OAIC promotes an organisational culture that supports best regulator practice. We are committed to supporting and building the capability of our staff, guided by four pillars which apply across all aspects of our work: We are proactive and adopt a risk-based, enforcement-focused posture. Our approach is proportionate to seek opportunities to engage and consult genuinely with stakeholders; provide up-to-date, clear and accessible guidance and information to assist regulated entities with compliance; be receptive to feedback and diverse stakeholder views; seek to increase transparency in decision-making processes, and seek continuous improvement against these principles.", "how_we_deliver_source_page": 10, "government_priorities": [ { "text": "Rights preservation in new and emerging technologies", "source_page": 16 }, { "text": "Rebalancing power and information asymmetries", "source_page": 16 }, { "text": "Ensuring timely access to government information", "source_page": 16 }, { "text": "Excessive collection and retention of personal information", "source_page": 16 }, { "text": "Systemic failures to enable timely access to government information", "source_page": 16 }, { "text": "Advertising technology (Ad tech) such as pixel tracking", "source_page": 16 } ], "outcomes": [ { "name": "Outcome 1: Provision of public access to Commonwealth Government information, protection of individuals’ personal information, and performance of Information Commissioner, freedom of information and privacy functions", "description": "The OAIC’s activities support the effective regulation of the Consumer Data Right (CDR) and the advancement of online privacy protections.", "key_activities": [ "Influence and uphold privacy and information access rights frameworks", "Advance online privacy protections for Australians", "Encourage and support proactive release of government information", "Take a contemporary, harms-based approach to regulation" ], "source_page": 7 } ], "values": [ "Independent", "Agile", "Engaged", "Targeted", "Expert" ], "values_framework_name": null, "kpi_targets_2025_26": [ { "code": "PRI01", "measure": "Effectiveness of the OAIC’s contribution to the regulation of the Consumer Data Right (CDR) as measured by stakeholder feedback", "target": "Baseline to be set", "source_page": 26 }, { "code": "PRI02", "measure": "Percentage of regulated entities that report satisfaction with OAIC guidance and resources", "target": "Baseline to be set", "source_page": 28 }, { "code": "FOI01", "measure": "Percentage of OAIC recommendations accepted by agencies following FOI complaint investigations", "target": "90%", "source_page": 30 }, { "code": "FOI02", "measure": "Initial assessments are completed and recorded on all proactive regulatory activities to ensure appropriate and proportionate regulatory responses", "target": "100%", "source_page": 31 } ], "kpi_results_2024_25": [ { "code": "PRI01", "measure": "Effectiveness of the OAIC’s contribution to the regulation of the Consumer Data Right (CDR) as measured by stakeholder feedback", "result": "71", "status": "Achieved", "source_page": 23 }, { "code": "PRI02", "measure": "Time taken to finalise privacy complaints", "result": "78%", "status": "Not achieved", "source_page": 23 }, { "code": "FOI01", "measure": "Percentage of FOI complaints finalised within 12 months", "result": "65%", "status": "Not achieved", "source_page": 26 }, { "code": "FOI02", "measure": "Time taken to finalise written privacy and information access enquiries from the public within 10 working days", "result": "97%", "status": "Achieved", "source_page": 26 } ], "_source_urls": { "annual_report_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/243592/OAIC_Annual-Report-2023-24_Digital.pdf", "corporate_plan_url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf" } }, "ideas": [ { "id": "foi-complaint-finalization", "idea_type": "kpi-recovery", "category": "Case Processing", "title": "Reduce FOI complaint finalization time", "scale": "Medium", "impact": "High", "effort": "High", "proof": "Evidence-backed", "beneficiaries": "Public", "description": "Implement a targeted review and feedback loop for FOI complaints to reduce the time taken to finalise complaints.", "evidence_quote": "‘Time taken to finalise privacy complaints was 78% last year’ [AR p.23]", "source": "annual-reports/2023-24.pdf [AR p.23]", "implementation_steps": [ "Develop a feedback loop", "Train staff on new processes", "Monitor complaint finalization times" ], "risks_to_manage": [ "Resistance to change", "Increased workload" ] }, { "id": "adopt-global-privacy-checklist", "idea_type": "global-import", "category": "Regulation & Policy", "title": "Adopt EU’s Privacy Checklist", "scale": "Large", "impact": "Very High", "effort": "High", "proof": "Evidence-backed", "beneficiaries": "Regulated entities", "description": "Adopt and adapt the EU’s Privacy Checklist to guide regulated entities in complying with Australian privacy laws.", "evidence_quote": "‘EU’s Privacy Checklist’ [global-intel/association-worldbank.org-governance.txt]", "source": "global-intel/association-worldbank.org-governance.txt", "implementation_steps": [ "Review EU’s Privacy Checklist", "Adapt checklist for Australian context", "Disseminate to regulated entities" ], "risks_to_manage": [ "Cultural differences", "Compliance costs" ] }, { "id": "foi-recommendation-acceptance", "idea_type": "strategy-execution", "category": "Case Processing", "title": "Increase acceptance of OAIC recommendations", "scale": "Large", "impact": "High", "effort": "High", "proof": "Plausible", "beneficiaries": "Public", "description": "Launch a targeted outreach and education program to increase the acceptance rate of OAIC recommendations following FOI complaint investigations.", "evidence_quote": "‘Percentage of OAIC recommendations accepted by agencies following FOI complaint investigations target is 90%’ [CP p.30]", "source": "corporate-plans/2025-26.pdf [CP p.30]", "implementation_steps": [ "Develop outreach program", "Train staff on communication strategies", "Track recommendation acceptance rates" ], "risks_to_manage": [ "Agency resistance", "Resource allocation" ] }, { "id": "public-dashboard-foi-stats", "idea_type": "operational-fix", "category": "Data & Performance", "title": "Build public dashboard for FOI statistics", "scale": "Small", "impact": "Medium", "effort": "Medium", "proof": "Evidence-backed", "beneficiaries": "Public", "description": "Create a public dashboard showing weekly active-compliance-monitoring counts by FOI Act decision class.", "evidence_quote": "‘Time taken to finalise FOI complaints was 65% last year’ [AR p.26]", "source": "annual-reports/2023-24.pdf [AR p.26]", "implementation_steps": [ "Gather data", "Design dashboard", "Publish on OAIC website" ], "risks_to_manage": [ "Data accuracy", "Technical issues" ] }, { "id": "complaint-triage-system", "idea_type": "operational-fix", "category": "Case Processing", "title": "Implement complaint triage system", "scale": "Small", "impact": "High", "effort": "Medium", "proof": "Evidence-backed", "beneficiaries": "Staff", "description": "Develop a triage system to categorize and prioritize privacy and FOI complaints for faster resolution.", "evidence_quote": "‘Time taken to finalise privacy complaints was 78% last year’ [AR p.23]", "source": "annual-reports/2023-24.pdf [AR p.23]", "implementation_steps": [ "Design triage system", "Train staff", "Pilot and refine" ], "risks_to_manage": [ "Staff training", "System integration" ] }, { "id": "foi-response-report", "idea_type": "operational-fix", "category": "Data & Performance", "title": "Generate monthly FOI response report", "scale": "Small", "impact": "Medium", "effort": "Low", "proof": "Evidence-backed", "beneficiaries": "Management", "description": "Generate a monthly report detailing the status of FOI complaint investigations and resolutions.", "evidence_quote": "‘Time taken to finalise FOI complaints was 65% last year’ [AR p.26]", "source": "annual-reports/2023-24.pdf [AR p.26]", "implementation_steps": [ "Define report metrics", "Automate data collection", "Disseminate report" ], "risks_to_manage": [ "Data collection errors", "Reporting delays" ] }, { "id": "privacy-policy-review", "idea_type": "strategy-execution", "category": "Regulation & Policy", "title": "Conduct annual review of privacy policies", "scale": "Large", "impact": "High", "effort": "High", "proof": "Plausible", "beneficiaries": "Regulated entities", "description": "Conduct an annual comprehensive review and update of privacy policies to ensure they align with current laws and best practices.", "evidence_quote": "‘Regulatory activities include reviewing decisions made under the FOI Act’ [CP p.10]", "source": "corporate-plans/2025-26.pdf [CP p.10]", "implementation_steps": [ "Review current policies", "Update policies", "Communicate changes" ], "risks_to_manage": [ "Policy compliance", "Resource allocation" ] }, { "id": "data-breach-dashboard", "idea_type": "operational-fix", "category": "Risk & Assurance", "title": "Create data breach dashboard", "scale": "Small", "impact": "High", "effort": "Medium", "proof": "Evidence-backed", "beneficiaries": "Public", "description": "Develop a real-time dashboard to display data breach incidents and OAIC’s response actions.", "evidence_quote": "‘Amendments were also made to the Australian Information Commissioner Act 2010 in line with the OAIC’s advice’ [pages/annual-reports-index__03.html]", "source": "pages/annual-reports-index__03.html", "implementation_steps": [ "Design dashboard", "Integrate data sources", "Publish on OAIC website" ], "risks_to_manage": [ "Data security", "Public trust" ] } ], "legislation_administered": [ { "title": "Australian Information Commissioner Act 2010", "year": "2010", "type": "Act", "role": "The OAIC administers this Act to promote and uphold privacy and information access rights.", "register_url": "https://www.legislation.gov.au/search?query=Australian%20Information%20Commissioner%20Act%202010" }, { "title": "Freedom of Information Act 1982", "year": "1982", "type": "Act", "role": "The OAIC administers this Act to protect and uphold the public’s right of access to documents.", "register_url": "https://www.legislation.gov.au/search?query=Freedom%20of%20Information%20Act%201982" }, { "title": "Privacy Act 1988", "year": "1988", "type": "Act", "role": "The OAIC administers this Act to protect individuals’ personal information.", "register_url": "https://www.legislation.gov.au/search?query=Privacy%20Act%201988" }, { "title": "Consumer Data Right (Authorised Deposit-Taking Institutions) Designation 2019", "year": "2019", "type": "Instrument", "role": "The OAIC administers this instrument to regulate the Consumer Data Right.", "register_url": "https://www.legislation.gov.au/search?query=Consumer%20Data%20Right%20%28Authorised%20Deposit-Taking%20Institutions%29%20Designation%202019" }, { "title": "Consumer Data Right (Energy Sector) Designation 2020", "year": "2020", "type": "Instrument", "role": "The OAIC administers this instrument to regulate the Consumer Data Right in the energy sector.", "register_url": "https://www.legislation.gov.au/search?query=Consumer%20Data%20Right%20%28Energy%20Sector%29%20Designation%202020" }, { "title": "My Health Records Act 2012", "year": "2012", "type": "Act", "role": "The OAIC administers this Act to regulate My Health Record system.", "register_url": "https://www.legislation.gov.au/search?query=My%20Health%20Records%20Act%202012" }, { "title": "My Health Records Rules 2016", "year": "2016", "type": "Instrument", "role": "The OAIC administers these rules to regulate My Health Record system.", "register_url": "https://www.legislation.gov.au/search?query=My%20Health%20Records%20Rules%202016" }, { "title": "Digital ID Act 2024", "year": "2024", "type": "Act", "role": "The OAIC administers this Act to regulate the Digital ID system.", "register_url": "https://www.legislation.gov.au/search?query=Digital%20ID%20Act%202024" }, { "title": "Identity Verification Services Act 2023", "year": "2023", "type": "Act", "role": "The OAIC administers this Act to regulate identity verification services.", "register_url": "https://www.legislation.gov.au/search?query=Identity%20Verification%20Services%20Act%202023" } ], "artifacts": [ { "category": "annual-reports", "year": "2023-24", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/243592/OAIC_Annual-Report-2023-24_Digital.pdf", "file": "annual-reports/2023-24.pdf", "bytes": 6060164, "link_text": "OAIC_Annual-Report-2023-24 (PDF, 5918 KB)" }, { "category": "annual-reports", "year": "2022-23", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0029/94295/OAIC_Annual-Report-2022-23.pdf", "file": "annual-reports/2022-23.pdf", "bytes": 5581065, "link_text": "Annual report 2022-23 (PDF, 5450 KB)" }, { "category": "annual-reports", "year": "2021-22", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0021/23097/OAIC_annual-report-2021-22_final.pdf", "file": "annual-reports/2021-22.pdf", "bytes": 4475382, "link_text": "Download the print version" }, { "category": "annual-reports", "year": "2020-21", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0020/10829/oaic-annual-report-2020-21.pdf", "file": "annual-reports/2020-21.pdf", "bytes": 7487371, "link_text": "Download the print version" }, { "category": "annual-reports", "year": "2019-20", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0021/9291/oaic-annual-report-2019-20.pdf", "file": "annual-reports/2019-20.pdf", "bytes": 6841446, "link_text": "Download the print version (PDF, 6681 KB)" }, { "category": "corporate-plans", "year": "2025-26", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "file": "corporate-plans/2025-26.pdf", "bytes": 5267348, "link_text": "Corporate plan 2025–26 (PDF, 5144 KB)" }, { "category": "corporate-plans", "year": "2024-25", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0022/241375/Corporate-plan-2024.pdf", "file": "corporate-plans/2024-25.pdf", "bytes": 2205347, "link_text": "OAIC Corporate plan 2024–25 (PDF, 2154 KB)" }, { "category": "corporate-plans", "year": "2023-24", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0020/82532/OAIC-Corporate-plan-2023-24.pdf", "file": "corporate-plans/2023-24.pdf", "bytes": 8574440, "link_text": "Download the print version (PDF, 8373 KB)" }, { "category": "corporate-plans", "year": "2022-23", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0035/38897/OAIC-Corporate-Plan-2022-23.pdf", "file": "corporate-plans/2022-23.pdf", "bytes": 13149584, "link_text": "Download the print version (PDF, 12841 KB)" }, { "category": "corporate-plans", "year": "2021-22", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0007/4102/oaic-corporate-plan-2021-22.pdf", "file": "corporate-plans/2021-22.pdf", "bytes": 6923091, "link_text": "Download the print version (PDF, 6761 KB)" }, { "category": "other-pdfs", "year": "2019", "url": "https://www.naa.gov.au/sites/default/files/2019-12/agency-ra-2012-00305243.pdf", "file": "other-pdfs/agency-ra-2012-00305243.pdf", "bytes": 186265, "link_text": "OAIC’s Records Disposal Authority" }, { "category": "other-pdfs", "year": "2024-25", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0036/257769/OAIC_Annual-Report_Vol-1_2024-25.pdf", "file": "other-pdfs/OAIC_Annual-Report_Vol-1_2024-25.pdf", "bytes": 3878595, "link_text": "Annual report 2024-25 Volume 1 (PDF, 3788 KB)" }, { "category": "other-pdfs", "year": "2024-25", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0028/257770/OAIC_Annual-Report_Vol-2_2024-25.pdf", "file": "other-pdfs/OAIC_Annual-Report_Vol-2_2024-25.pdf", "bytes": 6150626, "link_text": "Annual report 2024-25 Volume 2 (PDF, 6006 KB)" } ], "_meta": { "snapshot_built_at": "2026-05-14T02:13:27+00:00", "strategy_brief_meta": { "model": "nova-micro", "folder": "Office-of-the-Australian-Information-Commissioner", "annual_report": { "file": "annual-reports\\2023-24.txt", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/243592/OAIC_Annual-Report-2023-24_Digital.pdf", "year": "2023-24" }, "corporate_plan": { "file": "corporate-plans\\2025-26.txt", "url": "https://www.oaic.gov.au/__data/assets/pdf_file/0025/255751/OAIC-Corporate-plan-2025-2026.pdf", "year": "2025-26" }, "usage": { "input_tokens": 33270, "output_tokens": 1078, "total_tokens": 34348, "model": "nova-micro" }, "cost_usd": 0.0013153700000000002, "elapsed_seconds": 6.73, "generated_at": "2026-05-13T03:52:13+00:00" }, "ideas_manifest": { "folder": "Office-of-the-Australian-Information-Commissioner", "entity_id": "O-000792", "model": "nova-micro", "generated_at": "2026-05-13T03:52:36+00:00", "elapsed_seconds": 5.4, "usage": { "input_tokens": 5458, "output_tokens": 1680, "total_tokens": 7138, "model": "nova-micro" }, "cost_usd": 0.00042623000000000004, "n_ideas": 8, "inputs": { "overview_chars": 5561, "brief_chars": 955, "legis_chars": 91795 } }, "global_intel_meta": { "folder": "Office-of-the-Australian-Information-Commissioner", "entity_id": "O-000792", "model": "nova-micro", "usage": { "input_tokens": 2462, "output_tokens": 1381, "total_tokens": 3843, "model": "nova-micro" }, "cost_usd": 0.00027951, "elapsed_seconds": 4.68, "generated_at": "2026-05-13T03:52:48+00:00" } } }