The Great Barrier Reef Marine Park Authority (Reef Authority) is required by the Privacy (Australian Government Agencies – Governance) APP Code 2017 (the Code) to conduct a Privacy Impact Assessment (PIA) for all high risk privacy projects.

A project may be a high risk privacy project if the Reef Authority considers that the project involves any new or changed ways of handling personal information that are likely to have a significant impact on the privacy of individuals.

The Reef Authority is also required to conduct a PIA if directed to do so by the Office of the Australian Information Commissioner (OAIC).

The Reef Authority is required to maintain a register of all PIAs it conducts and publish that register, or a version of that register, on its website.

This Privacy Impact Assessment Register is published in full compliance with those requirements.