Our regulatory approach
We have a range of regulatory responsibilities and powers under the Privacy Act 1988 and the Freedom of Information Act 1982 (FOI Act) and other legislation.
The documents below outline our approach to using our regulatory powers. They’re designed to guide our decision-making process when taking regulatory action on privacy, freedom of information, Consumer Data Right and digital health issues, as well as our international efforts.
Organisations with obligations under the Privacy Act or FOI Act, as well as the public, will also find them helpful to understand our regulatory approach.
See also our Freedom of information guidelines, in particular, Part 1 and Parts 10 to 15.
