Privacy Impact Assessment Disclosure Log

In accordance with OAIC recommendations, DHA publishes a summary of all Privacy Impact Assessments (PIAs) undertaken from 1 July 2018 on its PIA disclosure log.

A privacy impact assessment (PIA) is a systematic tool used to assess the privacy impacts of a project or procurement activity and sets out recommendations for managing, minimising or eliminating that impact. In accordance with the Office of the Australian Information Commissioner's recommendations, DHA publishes a summary of its PIAs in this disclosure log. This contributes to the transparency of the project's development and intent, and demonstrates to stakeholders and the community that the project has undergone critical privacy analysis.

PIA's from 2018 and 2019


Project name and summary



24 Aug 2018                                                                            Third party investigation where personal information held by DHA will be disclosed to an external third party investigator engaged by DHA.
Proceed with the procurement of the third party investigator provided:
1. information and any subsequent report is transferred via secure file transfer
2. no cloud based / overseas storage by investigator, and
3. written notice provided to the investigator at the conclusion of the investigation that all personal information must be destroyed or permanently de-identified.
4 October 2018
14 Sep 2018 Enhancements to DHA’s existing Information Technology systems and processes. Waiting on threshold assessment to be completed. In progress
19 Sep 2018 Information Communications Technology Asset Management.

Data for assets to be moved into internal workflow system.
No requirement for full PIA - project can proceed.

There is no change identified to the type of personal information collected. The only change relates to where the information is stored. Transfer will be conducted internally.
7 Nov 2018
17 Oct 2018 System changes to allow automation of some processes to improve Contact Centre efficiency. Waiting on threshold assessment to be completed. In progress
23 Oct 2018 Monthly workforce dashboard (where employee information will be aggregated to report on top line/overall totals). Full PIA required before project can proceed.

Consideration of the type (and potentially, sensitivity) of the information to be reported on is needed.
In progress
14 Dec 2018 Defence member platform: Maintenance certificates.

System improvements to automate the process for the recovery of tenant charges and invoicing.
No requirement for PIA - project to proceed.

There is no change to the information that is sent to Defence.
21 Jan 2019
14 Jan 2019 Additional fields added to DHA’s Client Management profiles (recording contractor security clearances). No requirement for PIA - project to proceed.

No additional personal information collected / transferred. This relates to information that DHA already holds (security clearance of DHA contractors). The only change relates to how that information is displayed to improve allocation of on-base maintenance / repairs to contractors that hold the appropriate security clearance.
21 Jan 2019
18 Jan 2019 Experian custom audience.

Third party provider to match DHA held lessor and lead data against over 14 million Australians to create a target audience for online and social platforms.
Waiting on threshold assessment to be completed. In progress