Privacy, confidentiality & security
|The Australian Bureau of Statistics (ABS) is committed to upholding the privacy, confidentiality and security of the personal information it collects. Not only does the ABS have strong legislative protections that safeguard the privacy of an individual's information, it has a proud 100-year history of maintaining community trust in the way it collects, uses, discloses and stores your personal information collected in the Census.|
Law protects the privacy of your informationUnder the Census and Statistics Act 1905, the personal information you provide in the Census remains strictly confidential to the ABS. The ABS never has and never will release identifiable Census data.
As an Australian Government agency, we also comply with the Privacy Act 1988 (Privacy Act) and handle your personal information in accordance with the Australian Privacy Principles (APPs).
All ABS staff are legally bound never to release your personal information to any individual or organisation outside of the ABS, this includes temporary staff working on the Census. It’s an offence for any ABS staff, past or present, to divulge, directly or indirectly, any information collected under this Act. Penalties include fines of up to $21,600 or imprisonment for up to 2 years, or both, for anybody convicted of breaching this obligation.
We cannot, and will not share or provide your identifiable personal information to any government department or organisation.
Are names and addresses collected in the Census?Names and addresses (usual residence, address on Census night, address one year ago, workplace address and address five years ago) have been collected in every modern Census. Like all topics, with the exception of a person’s religion, they are a compulsory part of the Census.
Why does the ABS collect names and address in the Census?The collection of names and addresses in the Census is a critical part of ensuring the quality and value of the Census.
Names are collected in the Census for a number of reasons, including:
Addresses are collected in the Census for a number of reasons, including:
What are the benefits of retaining names and address collected in the Census?The benefits of retaining names and address in the Census are significant. Names and addresses will be used by the ABS to generate anonymous keys that can be used to combine existing data sets to create richer and more valuable statistics for Australia.
The new data sets, containing no names and addresses, will improve the lives of Australians by:
The use of anonymised names during the linkage process will ensure that Australians can have confidence in the quality of the data that is being used to support decisions. If governments and decisions makers are to make smart choices affecting all our lives, they need the best possible statistics.
More information about the benefits of Data Integration is available on the Data Integration Frequently Asked Questions page
When should the ABS destroy names and addresses?In recent Censuses names and addresses have been destroyed at the end of Census data processing, approximately eighteen months after the Census. This has reduced the value of the Census data and the ability for it to be used to inform future planning and decisions.
Recent public consultation and engagement has revealed that Australians expect the ABS to keep their information secure and to use their data for the benefit of them, their community and Australia.
There is also an expectation that the ABS should retain and use the information collected in the Census for as long as there is a benefit for the community to do so. Consistent with the Australian Privacy Principles, the information should be destroyed once this need no longer exists.
For the 2016 Census, the ABS will destroy names and addresses when there is no longer any community benefit to their retention or four years after collection (i.e. August 2020), whichever is earliest.
The ABS has and will always ensure that sufficient safeguards are in place to protect the privacy and confidentiality of the information it collects in the Census, including names and addresses.
Who did the ABS consult when making the decision to retain names and addresses in the Census?The ABS has undertaken consultation processes and testing in preparation for the 2016 Census that has indicated that there will be a continuing high level of public support for the Census and trust in the ABS to manage their information both securely and confidentially.
The ABS invited public comment on the proposal to retain names and addresses from the 2016 Census by issuing a media release and accompanying statement of intent on November 11, 2015. Direct consultation was undertaken with each State and Territory Privacy Commissioner and the Australian Information Commissioner. The ABS also engaged a private research company to undertake sessions with members of the public across a range of demographics and locations to understand their opinions on this issue.
Consistent with best practice, the ABS conducted a Privacy Impact Assessment to assess the potential risks the retention of names and addresses from responses to the 2016 Census might have to the privacy of individuals, and to assess the ABS’ proposed approach to managing, minimising or eliminating those risks. The Privacy Impact Assessment was undertaken in accordance with the framework for Privacy Impact Assessments set out in the Office of the Australian Information Commissioner’s Guide to undertaking Privacy Impact Assessments.
Following the outcomes of the Privacy Impact Assessment, the direct consultation and consideration of all the public submissions received the ABS made the decision to retain names and address from the 2016 Census.
Are similar practices undertaken in other countries?Canada and New Zealand retain the names and addresses from every Census in order to enhance the value and use of the information collected in the Census, by combining Census data with other national datasets. It is common and accepted practice in many other countries, for trusted National Statistical Offices to unleash the power of statistics using data integration.
How will the ABS protect my privacy?The ABS has legal obligations to keep data secure and ensure that it does not disclose identifiable information about a person, household or business. The ABS never has and never will release identifiable Census data. Key measures to safeguard information include strong encryption of data, restricted access on a need-to-know basis and monitoring of all staff, including regular audits. After data collection and processing, the ABS removes names and addresses from other personal and household information. Names and addresses will be stored securely and separate from one another. No one working with Census data will be able to view your personal information (name or address) at the same time as your other Census responses (such as age, sex, occupation, level of education or income). Stored separately and securely, individuals names will also be substituted with a linkage key, a computer generated code, completely anonymising the personal information. Only these anonymous linkage keys will be used by the ABS to bring data sets together. This practice is known as the Functional Separation principle.
The ABS’ application for Accreditation addresses in detail how we adhere to the separation principles. The key layers of protection that will be in place as a result of applying functional separation are listed in the 2015 Privacy Impact Assessment. (Source - Privacy Impact Assessment – Retention of Names and Addresses from 2016 Census, page 14)
As an accredited data integrating authority, the ABS complies with a set of key principles for any project that combines Census data with other data, including assessing every project to ensure that the project provides a significant public benefit and safeguards privacy.
The ABS is transparent about every data integration project and publishes the details online.
The ABS complies with the mandatory requirements established by the Australian Commonwealth Protective Security Policy Framework, which include implementing governance, physical, and information security measures to protect data held by the ABS.
The ABS will conduct regular audits of the safeguards, the use and the need for the retention of names and addresses collected in the Census.
Which agencies or groups is information shared with?The Census and Statistics Act 1905, ensures that Census data is never released in identifiable form, or released to any court, tribunal or other agency. This will not change. No identifiable, private or confidential data will be shared by the ABS with anyone.
Non-identifiable statistics produced from Census data are freely available on the ABS website and is used by the community, academics, local/state/federal governments, media and businesses. For example, in this article you can see how the Australian Census Longitudinal Dataset helps to understand housing transitions for older Australians.
How secure is my personal information?A critical feature of the Census and the online form is the first-rate security it uses to protect the privacy of all personal information collected. The security measures in place have been independently tested and reviewed to ensure that your personal information is secure. The connection from the user's computer to the online form is protected using, at a minimum, 128-bit TLS encryption, the same encryption technology used for internet banking. The system has also been designed to be best practice and complies with the Australian Government Information Security Manual developed by the Defence Signals Directorate.
The independent assessment of ABS’ compliance with statutory privacy principles as well as wider privacy concerns and principles also found that “ABS security measures meet the highest standards.” (Source - 2006 Census of Population and Housing – Enhancing the Population Census – Privacy Impact Assessment, 2005, para 7.10)
Australian Signals Directorate strategies are implemented by the ABS. These strategies include strategies specifically designed to mitigate targeted cyber intrusions. The ABS took part in an Australian National Audit Office cross-agency audit in 2014 on information technology system security against cyber-attacks. The ABS was rated as being in a Cyber Secure Zone (having high-level protection from external attacks and internal breaches and disclosure of information). (Source - Cyber Attacks: Securing Agencies' ICT Systems, ANAO Audit Report No.50 2013–14)
Do these changes affect the Census Time Capsule?Since 2001, more and more Australians have chosen to have their name identified Census information saved for future generations via the Census Time Capsule initiative, where the National Archives of Australia will hold the information securely for 99 years, before publicly releasing the information.
In 2011, 60.6 per cent of respondents elected to have their name identified Census information archived for the future. This was up from 56.1 per cent in 2006 and 52.7 per cent in 2001. There are no proposed changes to the Census Time Capsule initiative for the 2016 Census.
More information on data integrationFurther information on Data Integration can be found on the ABS Data Integration page
How does the ABS protect the privacy of information provided outside the Census form?Information is collected outside the Census form to help conduct the Census. It includes contact information such as your name, email address, address and telephone number. This information may be collected during the conduct of the Census, including when you contact the Census Inquiry Service, submit an online form, write to us or are contacted by an ABS Officer.
Personal information collected outside the Census form is subject to protections of the Privacy Act and is handled in accordance with the Australian Privacy Principles (APPs).