Ref. no. How long do Description of Rationale and Existing controls Assessment of Recommended Residual risk remaining you keep the risk consequences for that contribute to residual (current) risk additional actions despite new safeguards personal identified the agency or manage risks recognising current to reduce or information individual identified measures mitigate risk and why? Principle 10: Use of information Ref. no. What are you Description of Rationale and Existing controls Assessment of Recommended Residual risk remaining going to use the risk consequences for that contribute to residual (current) risk additional actions despite new safeguards the personal identified the agency or manage risks recognising current to reduce or information individual identified measures mitigate risk for? Principle 11: Disclosure of information Ref. no. Who are you Description Rationale and Existing controls Assessment of Recommended Residual risk remaining going to of the risk consequences for that contribute to residual (current) risk additional actions despite new safeguards disclose the identified the agency or manage risks recognising current to reduce or personal individual identified measures mitigate risk information to (if anyone) and why? Principle 12: Use of Unique Identifiers
Ref. no. How long do you keep personal information and why? Description of the risk identified Rationale and consequences for the agency or individual Existing controls that contribute to manage risks identified Assessment of residual (current) risk recognising current measures Recommended additional actions to reduce or mitigate risk Residual risk remaining despite new safeguards Principle 10: Use of information Ref. no. What are you going to use the personal information for? Description of the risk identified Rationale and consequences for the agency or individual Existing controls that contribute to manage risks identified Assessment of residual (current) risk recognising current measures Recommended additional actions to reduce or mitigate risk Residual risk remaining despite new safeguards Principle 11: Disclosure of information Ref. no. Who are you going to disclose the personal information to (if anyone) and why? Description of the risk identified Rationale and consequences for the agency or individual Existing controls that contribute to manage risks identified Assessment of residual (current) risk recognising current measures Recommended additional actions to reduce or mitigate risk Residual risk remaining despite new safeguards Principle 12: Use of Unique Identifiers