PC06: Personal Information is Used Only for Relevant Purposes

Introduction

As part of the accreditation process to become fully Gatekeeper accredited, the Australian Taxation Office (ATO) Public Key Infrastructure (PKI) was required to provide a suite of supporting policy documents. These documents include a privacy policy which is detailed in nine policy documents PC01-PC09.

This document sets out the Tax Office's PKI policy in regard to the use of personal information to ensure that personal information it holds in relation to issuing Keys and Certificates is used only for relevant purposes. The Information Privacy Principle (IPP) relevant to this policy is IPP9. In complying with IPP9 the Tax Office uses the personal information to fulfil its obligations in relation to the Certificate Practice Statement (CPS) and the Certificate Policy Statement (CP) which are publicly available at http://www.ato-pki.ato.gov.au/.

According to the Privacy Act 1988, personal information means information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about a natural person whose identity is apparent, or can reasonably be ascertained, from the information or opinion.