As part of the accreditation process to become fully Gatekeeper accredited, the Australian Taxation Office (ATO) Public Key Infrastructure (PKI) was required to provide a suite of supporting policy documents. These documents include a privacy policy which is detailed in nine policy documents, PC01-PC09.
This document sets out the Tax Office PKI’s policy in regard to the accuracy of personal information it collects and holds in relation to issuing keys and certificates. The Information Privacy Principle (IPP) relevant to this policy is IPP8. According to IPP8, the Tax Office should not use personal information without taking steps to ensure that the information is accurate, up to date and complete. In taking these steps the Tax Office can have regard to the purpose for which the information is to be used.
According to the Privacy Act 1988, personal information means information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about a natural person whose identity is apparent, or can reasonably be ascertained, from the information or opinion.