# Australia Privacy Act Compliance Assessment Record

## Organisation Details

| Field | Value |
|-------|-------|
| Organisation Name | Zenith Global Logistics Australia Pty Ltd |
| ABN | 12 345 678 901 |
| Address | Level 20, 60 Martin Place, Sydney NSW 2000 |
| Annual Turnover | >AUD 3 million (Privacy Act applies) |
| Assessment Date | 14 March 2026 |
| Privacy Officer | Sarah Mitchell, Privacy and Compliance Lead |

## APP Compliance Status

| APP | Subject | Status | Evidence |
|-----|---------|--------|----------|
| APP 1 | Open and transparent management | Compliant | Privacy policy at zenithglobal.com.au/privacy |
| APP 2 | Anonymity and pseudonymity | Compliant | Anonymous inquiry option available |
| APP 3 | Collection | Compliant | Minimal collection; consent for sensitive info |
| APP 4 | Unsolicited information | Compliant | Destruction procedure for unsolicited PI |
| APP 5 | Notification | Compliant | Collection notices at all touchpoints |
| APP 6 | Use or disclosure | Compliant | Purpose limitation documented |
| APP 7 | Direct marketing | Compliant | Opt-out processed within 5 business days |
| APP 8 | Cross-border disclosure | Compliant | Contractual safeguards with overseas recipients |
| APP 9 | Government identifiers | Compliant | Not adopted as internal identifier |
| APP 10 | Quality | Compliant | Annual data quality review |
| APP 11 | Security | Compliant | ISO 27001; annual pen testing |
| APP 12 | Access | Compliant | Privacy portal; 30-day response |
| APP 13 | Correction | Compliant | Self-service correction available |

## Automated Decision-Making Register

| System | Data Inputs | Decision Type | Affects Rights | Human Review | Impact Assessment |
|--------|-------------|---------------|----------------|-------------|-------------------|
| Credit scoring engine | Payment history, revenue, industry | Credit limit determination | Yes | Available | Completed Dec 2025 |
| Route optimisation AI | Shipment data, traffic patterns | Delivery scheduling | No | N/A | N/A |

## Compliance Checklist

| Requirement | Status |
|------------|--------|
| Privacy policy (APP 1) | Compliant |
| Breach notification procedure (Part IIIC) | Compliant |
| Cross-border safeguards (APP 8) | Compliant |
| Automated decision transparency (2024) | Compliant |
| Right to erasure procedures (2024) | Compliant |
| Children's code readiness | Monitoring OAIC code development |
| Annual privacy training | Compliant |