Privacy

The Privacy Act 1988 (Privacy Act) explains how we must handle your personal information. It includes the Australian Privacy Principles (APPs). These rules guide how we collect, use, disclose, store and protect your personal information.

This webpage contains general information about how we protect your personal information. It also directs you to resources where you can find more information.

Privacy Policy

Our privacy policy includes details on:

why we collect, hold, use and disclose your personal information
how we collect, hold, store and protect your personal information
how you can access or correct your personal information
how you can complain if you think we have handled your personal information incorrectly.

We may update our privacy policy at any time. You can access the latest version on our website.

Privacy Notice

When we collect your personal information, we must tell you certain things in accordance with our obligations under the APPs. We generally do this in our Privacy Notice - Form 1442i. We may also make a specific privacy notice available which considers collection of your personal information in particular circumstances.

Our privacy notice includes details on:

who we are and what we do
what is personal information
collection of your personal information required or authorised by law
how we collect, hold, use and disclose your personal information.

Use of Artificial Intelligence

We use artificial intelligence (AI) to support our work. This includes:

service delivery
risk management
compliance and fraud detection
law enforcement and security
policy and corporate work
administrative activities and operational functions.

This means that we may use AI technology to process your personal information.

Our AI Transparency Statement explains how we have adopted and use AI.

For more information on how AI may be used to process your personal information, view our privacy policy.

Access to personal information - For individuals

You can ask for access to your personal information held by the department (other than exempt documents) under the Privacy Act or Freedom of Information Act 1982 (FOI Act).

You can ask for copies of your records or documents.

For more information on the processes under the Privacy Act and the FOI Act, visit Personal access requests.

Corrections of personal information

You can ask us to amend or annotate your personal information. How we do this depends on the situation and must be consistent with our obligations under the Archives Act 1983 for Commonwealth records.

You can find more information in our privacy policy. This includes guidance for the correction of personal information for:

Australian citizens
ImmiCard holders
Permanent and temporary visa holders.

If we cannot correct your information based on the evidence you give us, you can apply under the FOI Act to amend or add a note to your records.

For more information, visit Personal access requests.

We cannot create a new identity for you, This includes where a person chooses to change their name. If you want to change your name, you must contact your State and Territory Registrars of Births, Deaths, and Marriages (RBDM).

Privacy Impact Assessment Register

We maintain a Privacy Impact Assessment (PIA) Register. This lists PIAs completed since 1 July 2018, as required by the Privacy (Australian Government Agencies – Governance) APP Code 2017.

Data matching programs

We use data matching to help detect and manage risks. For more information, view the department’s privacy policy.

The temporary skilled visas data matching program with the Australian Tax Office

We have developed a data matching program with the Australian Tax Office (ATO) to help us detect and deal with compliance risks in the temporary skilled visa program more effectively. For more information, see the temporary skilled visas data matching program with the ATO.

Feedback and complaints

You can give feedback or make a complaint about our service by completing an online feedback form or writing to:

The Manager
Global Feedback Unit
GPO Box 241
Melbourne Vic. 3001
Australia

Make a privacy complaint

You can complain if you think we have mishandled your personal information by using the above information.

You can also contact the Office of the Australian Information Commissioner (OAIC) and make a complaint directly to them. They may ask you try to resolve the complaint directly with us first.

The OAIC has the power to investigate complaints. They can also initiate their own motion investigation into the actions of the department.

For information about making a complaint or contacting the OAIC, visit Contact OAIC.