This policy applies to personal information collected by the Australian Electoral Commission (the ‘AEC’). The purpose of the policy is to:
The AEC is defined as an agency under, and therefore bound by, the provisions of the Privacy Act 1988 (Cth) (Privacy Act), including the Australian Privacy Principles (APPs). The APPs set out standards, rights and obligations for how we handle and maintain personal information. This includes how we collect, store, use, disclose, quality assure and secure personal information, as well as your rights to access or correct your personal information.
The AEC is established under the Commonwealth Electoral Act 1918 (Cth) (Electoral Act) comprising a Chairperson, the Electoral Commissioner and one other member.
The Electoral Commissioner and the Australian Public Service employees who assist the Commissioner together constitute a Statutory Agency under the Public Service Act 1999 (Cth) and the Electoral Commissioner is the principal executive of the agency. The functions and powers of the Commission are set out in section 7 of the Electoral Act.
The AEC is funded to deliver one purpose and one outcome – that is to maintain an impartial and independent electoral system for eligible voters through active roll management, efficient delivery of polling services, and targeted education and public awareness programs. The AEC must deliver electoral events, and its functions include:
In general, you have the right to interact anonymously or pseudonymously with the AEC. There are circumstances, however, where it is impractical for us to deal with individuals without knowing the identity of the individuals. This is particularly the case when interacting with the AEC in the performance of our statutory functions relating to the enrolment of electors and the conduct of elections. As these matters involve the exercise of individual rights and obligations, the AEC will require evidence of identity to enable the administration of those statutory functions to take place.
If you are seeking information of a general nature from the AEC, it is unlikely that you will be required to provide your real identity for that purpose. In general, you will not be disadvantaged by dealing anonymously or pseudonymously with us. However, without knowing your real identity, the type of information we are able to provide to you may be limited.
Before disclosing your confidential or personal information to you, the AEC will need to establish your identity. This is for the purpose of protecting you against the unauthorised disclosure of personal information that is in the possession of the AEC. Similarly, if you are seeking information about specific circumstances, we may be unable provide information without knowing the specific details of your request (which may require that you disclose your identity to us).
If you wish to deal anonymously or pseudonymously with the AEC, please advise us as early as possible.
In carrying out its functions and activities, the AEC usually collects personal information about individuals directly from those individuals or their authorised representative(s). In certain circumstances we may also obtain personal information from third parties including that which is collected by other Australian, state and territory government bodies or organisations.
We only collect personal information from a third party or from a publicly available source, if:
We collect this personal information in a variety of ways, including paper-based forms, by electronic means including online (through our website, the AEC mobile application (the ‘App’) and by email), over the telephone and by fax.
The AEC only collects personal information where that information is reasonably necessary for, or directly related to, one or more of our functions or activities.
The AEC maintains an impartial and independent electoral system for eligible voters through active Roll management, efficient delivery of polling services and targeted education and public awareness programs.
The personal information we collect and hold will vary depending on what we require to perform our functions and responsibilities. It may include:
The APPs place more stringent obligation on entities when they handle ‘sensitive information’1. Generally, we will only collect sensitive information if you consent and it is reasonably necessary for, or directly related to, one or more of our functions or activities. Sometimes we may collect or deal with sensitive information without your consent, such as when it is required or authorised by a law, or court or tribunal order. This includes express statutory provisions, as well as the more general application of the common law and the exercise of the Executive authority of the Australian Government.
The range of sensitive personal information we may collect and hold, includes:
The AEC collects and holds personal information for the purpose of carrying out its functions and activities.
In some cases, but subject to the Electoral Legislation and the Privacy Act, the AEC may use or disclose personal information for a purpose other than that for which it was collected. These other purposes include, for example:
We will not give your personal information to other government agencies, private sector organisations, or anyone else for a purpose other than that for which it was collected unless you consent or one of the following exceptions applies:
The AEC will only provide an individual’s personal information to a third party where permitted to do so by law. If a third party is acting as an individual’s authorised representative, the representative must have legal authority to access the relevant information. For example, if a person relies upon a power of attorney to seek information, the AEC will consider whether the instrument authorises the attorney to request and receive the relevant personal information on behalf of the principal.
As part of the nomination process, the Electoral Act sets out that individuals nominating as candidates for election as a Senator or Member of the House of Representatives must answer every mandatory question of the qualification checklist. The Electoral Act also provides for personal information collected from a candidate’s qualification checklist to be disclosed through publishing the qualification checklists and any additional documents provided on the AEC website and by delivering qualification checklists and any additional documents provided by successful candidates to the Senate or the House of Representatives, as relevant.
The AEC is a Document Issuer for the Commonwealth’s Identification Verification Service (IVS), which is hosted by the Attorney General’s Department. The AEC may use the IVS to assess and verify your proof of identity. For more information refer to our page on how the AEC contributes to the IVS for identity verification purposes.
Most personal information collected and held by the AEC will not be disclosed to anyone who is overseas. We may need to provide your personal information to an overseas recipient as part of our work. The Electoral Act enables certain electors residing outside Australia to be included on the Roll. Information may be provided to an AEC service provider who delivers services for the AEC to overseas electors.
The AEC also discloses personal information to its external service providers who provide services to the AEC, such as providers of software, systems and IT services. Where possible, when the AEC engages external service providers, we ensure the data is stored (and, where necessary, only accessed) within Australia. However, some of the AEC’s service providers may store or access data offshore, such as in the USA.
You have a right to access personal information we hold about you. That right of access must be exercised by you as an individual and not your nominated representative unless you have given a specific authorisation that refers to the particular information in the possession of the AEC. A power of attorney will not suffice as the authorisation.
You also have a right under the Privacy Act to request corrections to any personal information that we hold about you if you think the information is inaccurate, out-of-date, incomplete, irrelevant or misleading.
If you wish to request access to or correction of your personal information, please contact the AEC. Before providing access to or correcting personal information about you, we will require you to verify your identity.
It is also possible to access and correct documents held by us under the FOI Act. In some circumstances we will suggest that you make your request under the FOI Act. This is because:
Find out more information about how to make a request under the FOI Act on the Freedom of Information page.
Individuals can request access to their own personal information contained in a candidate’s qualification checklist, or, in the additional documents provided with that qualification checklist, after the 40 day period for petitions disputing an election or return to be lodged has ended, and the checklists and additional documents have been removed from the AEC’s website. If you wish to request access to your personal information contained within a qualification checklist or additional documents provided with a qualification checklist, please contact the AEC’s Privacy Officer. It should be noted that APP 13 – correction and amendment of personal information – does not apply to these documents.
The Privacy Act and the FOI Act sets out circumstances in which we can decline access to or correction of personal information. This includes situations where we are authorised or required to refuse access.
Generally, where we refuse to give you access, we will give you written notice of the reasons for refusal and the mechanisms available to you to dispute that decision.
The Privacy Act requires us to take reasonable steps to ensure that the personal information we hold is safe and secure. We are also required to take reasonable steps to ensure that the personal information that we collect is accurate, up-to-date, and complete. This may include correcting your personal information where it is appropriate to do so.
We aim to protect your personal information from loss, unauthorised access, use, modification or disclosure, and against other misuse. Among other things, we safeguard our information and communications technology (ICT) systems against unauthorised access, and ensure that paper-based files are secured. We also ensure that access to your personal information within our systems is only available to those people who need to have access in order to do electoral work.
If a data breach occurs, such as if personal information that we hold is subject to unauthorised loss, use or disclosure, we will respond in line with the Office of the Australian Information Commissioner’s guidance on reporting a data breach. We will aim to provide timely advice to you to ensure you are able to manage any loss—financial or otherwise—that could result from the breach.
AEC records, including records containing personal information, and electoral documents are created, kept and destroyed in accordance with the Archives Act 1983 (Cth) and the preservation and destruction provisions in the Electoral Act.
When the personal information that we collect:
we delete or destroy it in a secure manner.
If you believe the AEC has breached any of the APPs, you may submit a complaint to the AEC. Complaints must be made in writing to the Privacy Officer using the contact options listed in this policy.
You may submit a complaint anonymously. However, in order to properly consider and respond to your request, the AEC may require further information from you. Therefore, please include your contact details if you submit a complaint.
The AEC will respond to complaints within 30 days of receipt. Our contact details are set out in Section 4 below. If you are dissatisfied with the AEC's response to a complaint, you may complain to the Office of the Australian Information Commissioner (OAIC). The OAIC is an independent external body.
When an emergency declaration is in force, Part VIA of the Privacy Act allows us to collect, use and disclose personal information about an individual who we reasonably believe may be impacted by the emergency or disaster for permitted purposes, for example:
Further information on handling personal information in declared emergencies and disasters is available on the OAIC website.
The AEC is committed to protecting privacy online in accordance with the Privacy Act and the Guidelines for Federal and ACT Government Websites issued by the OAIC.
Where the AEC collects personal information submitted directly by a user, those electronic records may be stored in databases managed on behalf of the AEC by its ICT providers. Those ICT providers are required to comply with the AEC's ICT security policies and practices.
Where personal information is held in electronic files by the AEC, access to it is restricted to AEC employees whose duties require access to the information.
The AEC automatically collects generic information about all visitors to its online resources. That information is very limited and only used to:
When visiting the AEC website the site server makes a record of the visit and logs the following information:
This information is used only for statistical analysis and systems administration purposes. No attempt is made to identify users or their browsing activities, except in the unlikely event of an investigation by a law enforcement agency.
A ‘cookie’ is an electronic token that is passed to your browser which passes it back to the server whenever a page is sent to you.
The AEC website uses a cookie to maintain contact through a session. The cookie allows the website to recognise you as a unique user as you move from one page of the website to another. The cookie will expire when the browser session is closed or the computer is shut down. No attempt will be made to identify anonymous users or their browsing activities unless legally compelled to do so, such as in the event of an investigation.
In addition to web server logs, the AEC website uses Google Analytics, a web analytics service provided by Google Inc. Reports obtained from Google Analytics are used to help improve the efficiency and usability of its online services (including this web site and the App).
Google Analytics uses 'cookies' to help analyse how users use its online services. The information generated by the cookie about your use of the website or the App (including your IP address) will be transmitted to and stored by Google on servers in the United States.
Google will use this information for the purpose of evaluating your use of our online services, compiling reports on website activity for website and mobile application operators and providing other services relating to online activity and internet usage. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.
The AEC website also uses Google reCAPTCHA to protect the website from spam and abuse. When using the AEC website, information will be automatically captured through reCAPTCHA. For further information about the types of personal information collected and used by Google reCAPTCHA, please refer to our dedicated privacy notice.
By using the AEC’s online services, you consent to Google processing data about you in the manner and for the purposes set out above. Please refer to Google's Privacy Policy.
Search terms you enter when using the AEC search engine are collected, but are not associated with any other information that we collect. We use these search terms to ascertain what people are looking for on our site and to improve the services that we provide.
The AEC website contains links to other sites. The AEC is not responsible for the privacy practices or the content of such websites and has no knowledge if cookies or other tracking devices are used on linked websites.
These other sites may use web measurement tools, customisation technologies and persistent cookies to inform the service they provide to their users. You should read the privacy statement published on each website that you visit.
Your email address may be collected by the AEC if you provide it to us or if it is provided by a third party, and its collection is in the course of our functions. Your email address will only be used for the purpose for which you have provided it and will not be added to any mailing lists without your consent by way of a specific request in writing. The AEC will not use or disclose your email address for any other purpose, unless permitted or required by law.
Data you provide to the AEC is typically secured in transit using encryption technology; in some instances the level of security available for these connections will be adjusted if the systems you use are not compatible with modern standards. Once received, the data you provide is stored and managed by the AEC and its ICT service providers. The AEC’s ICT service providers are required to manage data in accordance with the AEC’s ICT security policies, practices, and applicable contractual agreements.
While every effort is made to secure information transmitted to the AEC website over the internet, there may be inherent risks associated with the transmission of information via the internet and there is therefore a possibility that this information could be accessed by a third party while in transit.
For those who do not wish to use the internet, the AEC provides alternative ways of obtaining and providing information.
If you wish to contact the AEC about a privacy-related matter, including questions about this policy, please contact the AEC's Privacy Officer.
You can make a privacy enquiry to us in writing, over the phone, or through our online privacy enquiry form.
You can make a privacy complaint to us in writing, over the phone, or through our online complaints form by selecting ‘Privacy’ from the drop-down menu.
In writing: The Privacy Officer
Australian Electoral Commission,
Locked Bag 4007
Canberra ACT 2601
Australia.
By phone: 13 23 26
Assisted contact options are also available.
You can also obtain further information from the Office of the Australian Information Commissioner website, or by telephone on 1300 363 992.
1Section 6 of the Privacy Act defines ‘sensitive information’. See Glossary for details.