Privacy and security

Data collected under the C&S Act is only available to ABS staff who have a genuine 'need to know'. An ABS staff member has a genuine 'need to know' if they would be hindered in their work without access to it. ABS staff are only given the least amount of information they need to know. 

In the early stages of data collection, names and addresses are needed to ensure the quality of the statistics. For example, we sometimes need to reach out to respondents to verify the data they reported. Only staff working on these tasks can access files with names and addresses. 

All ABS employees and contractors must sign an Undertaking of Fidelity and Secrecy. This means they must not share any information they get while working at the ABS, even after they leave. Breaking this rule can lead to serious penalties, including up to 2 years in prison and/or a fine. 

The ABS buildings and computers provide a secure environment for confidential information. Entry to an ABS building is only through a monitored security area. Only staff and escorted visitors can enter. Some work areas are limited to specific staff members. 

The ABS uses a secure and modern computing environment to safely collect, process and publish information.

Each year, the ABS independently assesses its systems to make sure they meet all Australian Government IT security standards. This includes:

• strong encryption to protect your ABS Survey Account
• secure processing systems that meet or exceed the Australian Information Security Standard (AS/NZS 4444)
• regular review of cyber security controls.

Our critical systems have been certified through the Australian Signals Directorate. Specifically, through the Information Security Registered Assessors Program (IRAP). The IRAP is how the Australian Government checks if a computer system has been built securely.

ABS websites use secure HTTPS connections. This protects any personal information submitted through online forms or surveys. This meets the Australian Government Standards. 

Once we assure quality, we anonymise names and addresses. We don’t need this information to produce statistics. This step adds extra protection to your information.

We will not share any identifiable data unless:

• you have given clear consent
• you would reasonably expect the information to be shared
• the law requires or permits it.

When paper or online forms are no longer needed, they are stored securely. Then, they are destroyed under government approved processes.

Under the C&S Act, the ABS can only use information it collects for statistical purposes. It cannot be used in any way that affects the rights, benefits, or entitlements of any individual, household, or organisation.

When publishing statistics, we apply methods including:

• limiting the amount of detail released
• slightly adjusting outputs to prevent identification
• suppressing information where necessary.

Any exceptions under the Act apply only to specific business data, never to households.