[Insert a PROJECT TITLE or description of your project or proposal here] Note: See Appendix C, Risks and Mitigations Examples” “Privacy – Assessment of potential risks and possible mitigations to reduce or manage adverse effects Principle 1 : Purpose of collection of personal information Ref. no. Purpose of Description of Rationale and Existing controls Assessment of Recommended Residual risk remaining collecting the the risk consequences for that contribute to residual current risk additional actions to despite new safeguards information the agency or manage risks reduce or mitigate individual identified risk Principle 2: Source of personal information Ref. no. Source of Description of Rationale and Existing controls Assessment of Recommended Residual risk remaining personal the risk consequences for that contribute to residual current risk additional actions to despite new safeguards information identified the agency or manage risks reduce or mitigate individual identified risk Principle 3: Collection of personal information from the subject Ref. no. Telling the Description of Rationale and Existing controls Assessment of Recommended Residual risk remaining individual what the risk consequences for that contribute to residual current risk additional actions to despite new safeguards you’re doing identified the agency or manage recognising current reduce or mitigate individual identified measures risk
[Insert a PROJECT TITLE or description of your project or proposal here] Note: See Appendix C, “Privacy Risks and Mitigations – Examples” Assessment of potential risks and possible mitigations to reduce or manage adverse effects Principle 1 : Purpose of collection of personal information Ref. no. Purpose of collecting the information Description of the risk Rationale and consequences for the agency or individual Existing controls that contribute to manage risks identified Assessment of residual current risk Recommended additional actions to reduce or mitigate risk Residual risk remaining despite new safeguards Principle 2: Source of personal information Ref. no. Source of personal information Description of the risk identified Rationale and consequences for the agency or individual Existing controls that contribute to manage risks identified Assessment of residual current risk Recommended additional actions to reduce or mitigate risk Residual risk remaining despite new safeguards Principle 3: Collection of personal information from the subject Ref. no. Telling the individual what you’re doing Description of the risk identified Rationale and consequences for the agency or individual Existing controls that contribute to manage identified Assessment of residual current risk recognising current measures Recommended additional actions to reduce or mitigate risk Residual risk remaining despite new safeguards