Self-assessment · 3 minutes

Privacy readiness check

Ten questions based on the Australian Privacy Principles. You will see an indicative result and your top three priorities.

Your answers stay in your browser. Nothing is stored or sent to Lexora unless you choose to email your result.

  1. 01Does someone in your organisation have clear, written responsibility for privacy?
  2. 02Does your privacy policy accurately describe how you collect, use and disclose personal information today?
  3. 03Do people receive a collection notice at the point you collect their information?

    For example on forms, intake processes and sign-up pages.

  4. 04Do you know which systems and suppliers hold personal information?
  5. 05Do you have a documented process for access and correction requests?
  6. 06Do you have a data breach response plan that names who does what?
  7. 07Have you rehearsed that plan in the last 12 months?
  8. 08Do you have retention periods, and is information actually destroyed or de-identified when no longer needed?
  9. 09Do you carry out privacy impact assessments before new projects or suppliers that involve personal information?
  10. 10Do you know which of your systems make, or substantially help make, decisions that significantly affect individuals?

    Privacy policies must describe certain automated decisions from 10 December 2026.