[Privacy Act 1988 and technology]
Technology planning around the Privacy Act 1988
Moving a database to Australia does not solve every Privacy Act issue. TWN helps map the systems, people, suppliers, and controls that handle personal information.
Trace the information
Map the full information life cycle. Include collection, use, sharing, storage, backup, retention, deletion, and access. Include SaaS apps, integrations, support channels, and admin paths, not just production databases.
Questions the technical review should answer
Your legal and privacy advisers set the interpretation for your organisation. We help supply the technical evidence they need:
- Where is personal information stored and replicated?
- Who can access it, including vendors and support teams?
- Can you prove access, changes, exports, and deletions?
- What happens if a supplier changes terms or becomes unavailable?
- Which controls and runbooks need an owner?