The Australian Information Commissioner has powers to conduct privacy assessments of agencies and organisations the Privacy Act 1988 covers.
The OAIC publishes finalised reports of these assessments (previously called audits) to help promote good privacy practice. If a report contains classified content, we may not be able to publish it.