As Australian privacy laws continue to evolve and regulators increase their focus on accountability, organisations need professionals who can confidently navigate complex privacy legal obligations, manage emerging risks and build trust through responsible data handling practices.
The CIPP/AU certification is a globally recognised credential that demonstrates your expertise in Australian privacy law and your ability to apply privacy principles in different business environments.
The CIPP/AU training is focused on the Australian privacy framework, including the Privacy Act 1988; the Australian Privacy Principles; state and territorial privacy obligations; regulatory enforcement; sector-specific considerations and emerging privacy issues. Australia’s privacy framework is being shaped by ongoing Privacy Act reforms and the Office of the Australian Information Commissioner’s (OAIC) heightened expectations and expanded enforcement powers, which are increasing the need for strong privacy governance and accountability.
The training provides foundational knowledge and practical strategies needed to navigate complex Australian privacy requirements, and support responsible data practices across organisations.
The CIPP/AU program was developed by the International Association of Privacy Professionals (IAPP), which is the world’s largest comprehensive global information privacy community.
Course Overview
This course will enable you to:
- Understand Australia’s privacy legislative framework, including the Privacy Act 1988 and Australian Privacy Principles (APPs).
- Apply privacy obligations when handling, using, managing and protecting personal information.
- Navigate the Australian privacy enforcement landscape and the role of the OAIC.
- Address emerging privacy challenges involving AI, cybersecurity, workplace monitoring and digital identity.
This course is a comprehensive program, led by our expert facilitator. Learn with like-minded peers to expertly prepare for the CIPP/AU exam. See below for the program in detail.
What’s included
- The benefits of learning in an environment which includes being able to share first hand experiences and questions with privacy-experienced peers
- Guidance from our expert facilitator
- Comprehensive course notes, in a Participant Guide (digital copy + hard copy shipped within Australia and to NZ)
- Exam voucher, and
- IAPP Membership.
Note: Your exam can be scheduled at a date and location to suit you. If you are already an IAPP Member, your membership will be extended by 12 months upon registering for this course.
Who should attend?
- Any professional who needs in-depth knowledge of the Australian privacy ecosystem for compliance and other privacy management responsibilities.
- Privacy Officers / Data Protection Officers
- Data Protection Managers
- Auditors
- Legal Compliance Officers
- Security Managers
- Information Managers
- Anyone involved with data protection processes and programs
Next available programs
ONLINE (LIVE VIRTUAL CLASSROOM) – Course is spread over 4 half-days.
Please contact us to request a quote for training a team in-house, across Australia or New Zealand, or subscribe to our newsletter to be notified of future dates.
Our Facilitator
Helios Salinger (previously Salinger Privacy) is a market leader in privacy training, consulting and pragmatic compliance tools. Salinger Privacy was established in 2004 by one of Australia’s foremost privacy experts on privacy law and practice, Anna Johnston. Our team have delivered training on behalf of the Australian, NSW and Victorian Privacy Commissioners, and the International Association of Privacy Professionals.
This training will be facilitated by Andrea Calleia, our Director of Learning. Andrea has extensive experience in the learning and development field, and has specialised in developing and delivering privacy training since 2003. Andrea managed the education program for the NSW Privacy Commissioner’s Office, and on behalf of Salinger Privacy facilitated Privacy Officer training for the Office of the Australian Information Commissioner.
The program in detail
The CIPP/AU training covers Australian privacy law through eight modules, moving from legal foundations and obligations across jurisdictions to the Australian Privacy Principles, operational controls, enforcement, sector-specific obligations, workplace privacy and emerging technologies.
Module 1: Foundations of Australian privacy law
Establishes the Australian privacy landscape, including the federated legal framework; the Privacy Act’s history, scope and 13 Australian Privacy Principles; the OAIC’s enforcement powers and extraterritorial reach; and Australia’s evolving approach to AI and automated decision-making regulation.
Module 2: Privacy across Australian jurisdictions
Covers the privacy obligations of Commonwealth agencies under the Australian Government Agencies Privacy Code, the foundational state and territory privacy statutes and their regulators, and how these regimes overlap with the Privacy Act.
Module 3: APPs, part one: Transparency and collection
Reviews the APPs relating to transparency and collection (1-5), privacy governance and policy requirements, anonymity and pseudonymity, solicited collection and sensitive information, plus unsolicited information and collection notices.
Module 4: APPs, part two: Use, disclosure and cross-border transfers
Reviews the APPs relating to post-collection handling (6-9), use and disclosure, direct marketing, cross-border disclosure and overseas accountability, and government-related identifiers.
Module 5: APPs, part three: Data integrity and individual rights
Reviews the APPs relating to data integrity and individual rights (10-13), information quality, security, retention and breach response, plus access and correction requests.
Module 6: Privacy enforcement in Australia
Discusses the OAIC’s enforcement powers and escalation model, its regulatory priorities and jurisdictional overlap with other regulators, and the penalties, case law and statutory tort that follow serious privacy breaches.
Module 7: Health information privacy, financial privacy and children’s privacy
Covers health information and emerging health technologies, financial information and the Consumer Data Right, and heightened protections for children’s personal information.
Module 8: Workplaces, surveillance and emerging frontiers
Considers the employee records exemption and its limits, workplace surveillance and automated decision-making, Commonwealth surveillance powers, and evolving obligations around data breaches, the Digital ID system, open data and cybersecurity.
