The Privacy (Australian Government Agencies – Governance) APP Code 2017External Link (Privacy Code) requires us to undertake privacy impact assessments (PIAs).
We carry out PIAs where the project involves a new or changed way of handling personal information, that is likely to have a significant impact on the privacy of individuals.
The Privacy Code also requires us to maintain and publish a register (or a version of the register) of completed PIAs from 1 July 2018 on our website.
|
PIA title |
Project name |
Date of PIA |
|---|---|---|
|
Phoenix Taskforce bulk data disclosure |
Phoenix Taskforce bulk data disclosure to the Building Commission of New South Wales (BC NSW) |
26/08/2025 |
|
5028 Identity Management PIA |
5028 Identity Management |
15/08/2025 |
|
Siebel Upgrade Project Privacy Impact Assessment |
Siebel Upgrade Project 5145 |
6/08/2025 |
|
Voice Biometrics Upgrade – 2026 |
4911 Voice Biometrics New Solution |
5/08/2025 |
|
Shadow Economy Taskforce PIA |
Shadow Economy Taskforce |
22/07/2025 |
|
Department of Environment, Science and Innovation Queensland (DESI) Bulk Data Disclosure – Phoenix Taskforce |
Phoenix Taskforce bulk data disclosure to the Department of Environment, Science and Innovation Queensland (DESI) |
18/07/2025 |
|
Environment Protection Authority New South Wales Bulk Data Disclosure – Phoenix Taskforce |
Phoenix Taskforce bulk data disclosure to the Environmental Protection Authority New South Wales (EPA NSW) |
16/07/2025 |
|
Environment Protection Authority South Australia Bulk Data Disclosure – Phoenix Taskforce |
Phoenix Taskforce bulk data disclosure to the Environmental Protection Authority, South Australia (EPA SA) |
14/07/2025
|
|
FINAL RAM PUBLISHER NDIA PIA – 27 June 2025 |
14653 Relationship Authorisation Manager (RAM) Publisher Service and onboarding National Disability Insurance Agency (NDIA) |
27/06/2025 |
|
Privacy Impact Assessment – 'Online Sellers' Industry Segment |
SEP ENF Strat 1.3 LPF Online Sellers |
25/06/2025 |
|
5005: Superannuation on Government-funded Parental Leave Pay (PLP) |
Superannuation on Government-funded Parental Leave Pay (PLP) |
20/06/2025 |
|
High-Risk Linking Model Enhancement |
High-Risk Linking Model Enhancement |
19/06/2025 |
|
Identity Crime Model (IDC) Model |
Identity Crime Model (IDC) Model |
10/06/2025 |
|
ASIC & ATO MoG PIA – Telephony Data |
ATO Machinery of Government Change – Registry Transition |
2/06/2025 |
|
STP ATO and Department of Home Affairs PIA 5093 |
5093 Migration Systems Reform |
14/05/2025 |
|
ATO app and secure messaging |
ATO app and secure messaging |
12/05/2025 |
|
AFCX (Implementation) |
Australian Financial Crimes Exchange (AFCX) Project SPC-9108 |
22/04/2025 |
|
Uber for Business |
Uber for Business |
14/04/2025 |
|
myID Driver Licence using Face Verification Service (FVS) |
myID Driver Licence using Face Verification Service |
09/04/2025 |
|
Transition to the Exchange (T2E) of RAM |
Relationship Authorisation Manager Transition to the Exchange |
14/03/2025 |
|
Corporate Recruitment System – eRecruit |
eRecruit IT Security Uplift |
11/02/2025 |
|
Revised Onboarding |
Onboarding Procedure |
30/01/2025 |
|
DEWR Workforce Australia Initial STP Data Share |
SEO Employment Services Reform 5092 |
09/12/2024 |
|
AFCX, Sharing Barred Bank Accounts |
Australian Financial Crimes Exchange (AFCX) Project SPC 9108 |
18/11/2024 |
|
ABRS Bulk Data Disclosure – Phoenix Analytical Model Outputs |
ABRS – Director ID/ Straw Directors |
12/11/2024 |
|
Environmental Protection Authority Victoria Bulk Data Disclosure – Phoenix Taskforce |
Phoenix Taskforce Bulk Data Disclosure to Environmental Protection Authority Victoria |
18/10/2024 |
|
AFCX, Proof of Value (POV) PIA |
Australian Financial Crimes Exchange (AFCX) Project SPC–9108 |
26/08/2024 |
|
CASBP–3213 PORO Magic – Privacy Impact Assessment |
CASBP–3213 PORO Magic |
12/08/2024 |
|
Segmentation – Client Debt Population Segments v3.0 (update) |
Segmentation – Client Debt Population Segments |
25/07/2024 |
|
Dept of Education and Dept of Employment and Workplace Relations historic debt – contact details exchange |
Dept of Education and Dept of Employment and Workplace Relations historic debt – contact details exchange |
19/07/2024 |
|
Extending Tax Whistleblower Protections |
4931 Extending Tax Whistleblower Protections |
15/07/2024 |
|
Revenue NSW Bulk Data Disclosure – Phoenix Taskforce |
RNSW Bulk Data Disclosure |
10/07/2024 |
|
UDA – Privacy Impact Assessment Phase 2 |
Unstructured Data Analytics (UDA) |
03/07/2024 |
|
TCN Manager Check–In Tool |
TCN Manager Check–In Tool |
18/06/2024 |
|
ATO ASIC MOG Project Registry Transition PIA |
ASIC ATO MOG Project |
23/05/2024 |
|
ABS STOP P2 Weekly Job Holder |
ABS STP P2 Weekly Job Holder |
20/05/2024 |
|
4577 Data Acquisition and Optimisation Phase 2 Privacy Impact Assessment |
#4577 Data Acquisition and Optimisation Phase 2 |
12/04/2024 |
|
PIA Sharing Economy 4382 |
Sharing Economy |
10/04/2024 |
|
Segmentation – Client Debt Population Segments |
N/A |
14/03/2024 |
|
4561 IODL Replacement PIA |
4561 IODL Replacement Project |
01/03/2024 |
|
Client to agent linking – Privacy Impact Assessment |
4675 Client to agent linking |
28/02/2024 |
|
Sharing Economy Reporting Regime (SERR) v1.1 |
Project 4012 Sharing Economy Reporting Regime |
21/02/2024 |
|
4898 TT24 PIA |
4898 Tax Time Capacity and Processing |
14/02/2024 |
|
PIA Microsoft 365 |
Enable One Drive |
13/12/2023 |
|
Terminated High–Risk Practitioners Privacy Impact Assessment |
High–Risk Practitioners that have been terminated by the Board Conduct Committee |
06/12/2023 |
|
Disclosure to professional associations |
Disclosure to professional associations |
04/12/2023 |
|
SDSD–65004 |
High–Risk practitioners that have been terminated by the Board Conduct Committee |
04/12/2023 |
|
Health Delivery Modernisation Program – Phase Three PIA |
Health Delivery Modernisation Phase 3 |
27/11/2023 |
|
Privacy Impact Assessment Sharing Economy |
4109 Sharing Economy |
21/11/2023 |
|
Health Delivery Modernisation Phase 3 |
Health Delivery Modernisation Phase 3 |
01/11/2023 |
|
Director ID Linking Solution Privacy Impact Assessment |
4755 Director ID Interim Linkage Solution |
09/10/2023 |
|
3352 new ato.gov.au PI threshold and assessment |
3352 new ato.gov.au |
21/08/2023 |
|
Foreign ownership of Australian Asset Register Privacy Impact Assessment |
Foreign ownership of Australian Asset Register |
21/08/2023 |
|
Operation Andes |
Operation Andes |
07/07/2023 |
|
ABRS Director ID Privacy Impact Assessment Threshold Assessment |
4755 Director ID Interim Linkage Solution |
30/06/2023 |
|
Benestar Employee Assistance Program |
Employee Assistance Program SPC – 2458 |
08/05/2023 |
|
PIA for the Standing Taskforce Within Shadow Economy Compliance Program |
The Standing Taskforce Within 467 Shadow Economy Compliance Program |
02/05/2023 |
|
TPB ECP Pipeline |
TPB ECP Pipeline |
04/04/2023 |
|
Accounts Payable and Receivable Dashboard |
Accounts Payable and Receivable Dashboard |
29/03/2023 |
|
ATO In–House Mental Health Specialist Service Privacy Impact Assessment |
ATO In–House Mental Health Specialist Service |
27/01/2023 |
|
Private Health Insurance data exchange with ABS |
Private Health Insurance data exchange with ABS |
01/12/2022 |
|
Corporate Project Privacy Impact Assessment |
Superannuation Guarantee Assurance Project |
28/11/2022 |
|
ATO UI Framework Phase 1 PIA |
ATO UI Framework Upgrade Phase 1 |
07/11/2022 |
|
3352 New ato.gov.au PI threshold and assessment |
3352 new ato.gov.au |
3/10/2022 |
|
Operation Protego |
Operation Protego |
19/08/2022 |
|
Privacy Impact Assessment IC/SFCT |
Operation Bowmore bulk data disclosure |
14/07/2022 |
|
PIA 4478 Military Super – Part 2 |
4478 – Superannuation – Protecting Veterans Interests (Military Super) |
13/07/2022 |
|
Disclosure of Business Tax debt |
Disclosure of Business Tax Debt |
4/07/2022 |
|
Teradata Back–up Replacement Project |
Teradata Back–up Replacement |
30/06/2022 |
|
New Data Pattern (NDP) |
New Data Pattern (NDP) Privacy Impact Assessment |
24/06/2022 |
|
EDH Migration Privacy Impact Assessment |
EDH Migration |
24/06/2022 |
|
Final Privacy Impact Assessment of inclusion of a Family Links File as an ALife dataset |
ALife – Family Links File |
15/06/2022 |
|
Registry Transition Privacy Impact Assessment |
Modernising Business Registers (MBR) Program |
19/05/2022 |
|
DIS Fraud analytics PIA |
Digital Identity 4061 – Fraud analytics |
19/05/2022 |
|
CRS – ability to use ATO data to inform financial capacity assessment |
CRS Review |
7/04/2022 |
|
Director ID PIA. Version 2 – Public beta |
MBR Program |
17/03/2022 |
|
FWB Data Importation from ATO Holdings |
FWB Data Importation from ATO Holdings |
28/02/2022 |
|
SE TDP PIA |
Senior Executive Talent Development Program |
25/02/2022 |
|
People Connect |
People Connect |
17/12/2021 |
|
Benestar Employee Assistance Program |
Employee Assistance Program SPC–2458 |
8/12/2021 |
|
Privacy Impact Assessment TAT DA Client Grouping ANGIE |
TAT D&A Project 4072: Client Grouping Optimisation – Automated Network & Grouping Identification Engine (ANGIE) |
6/12/2021 |
|
4053 Unstructured Data Capability Privacy Impact Threshold Assessment |
4053 Unstructured Data Capability |
4/11/2021 |
|
3838 PIA Visibility of Super to parties in a family law proceeding |
Visibility of Super to parties in a family law proceeding |
14/10/2021 |
|
Privacy Impact Assessment – 2816 |
Single Touch Payroll Phase 2 |
2/09/2021 |
|
4164 ADMS Privacy Impact Assessment |
Apprenticeships Data Management System (ADMS) |
27/08/2021 |
|
myGovID IP3 PIA |
Digital Identity 4061 |
27/08/2021 |
|
FOAAR Privacy Impact Assessment |
Foreign Ownership of Australian Assets Register (FOAAR) |
23/08/2021 |
|
Nuix Elasticsearch cloud migration – PIA Threshold Assessment |
Nuix Elasticsearch cloud migration |
22/06/2021 |
|
Preliminary Privacy Impact Assessment of inclusion of a Family Links File as an ALife dataset |
ALife – Family Links File |
15/06/2021 |
|
Privacy Impact Assessment_4262 |
Evolution of the Client Register |
11/06/2021 |
|
Data Backbone (DB) Privacy Impact Assessment |
Data Backbone (DB) |
10/05/2021 |
|
ELP Review – 2021 PIA |
ELP – Indigenous programs review |
7/05/2021 |
|
Privacy Impact Assessment (PIA) YFYS |
Your Future, Your Super – 4158 |
2/05/2021 |
|
3555 Black Economy Standing Taskforce PITA |
3555 Black Economy Standing Taskforce |
27/04/2021 |
|
2078 Serraview Spatial Management |
2078 Serraview Spatial Management |
9/04/2021 |
|
4079 Country by Country Interact PITA |
Unstructured Data Pipelines – Country by Country Interact |
26/03/2021 |
|
Privacy Impact Assessment – Director Identification Number |
Modernising Business Registers Program |
19/03/2021 |
|
Data Catalogue and Lineage (IT Component) |
Data Catalogue and Lineage |
4/03/2021 |
|
JobMaker Hiring Credit Privacy Impact Assessment |
JobMaker Hiring Credit |
18/01/2021 |
|
DAO Privacy Impact Assessment |
Data Acquisition and Optimisation (3929) |
8/12/2020 |
|
ATO Protecting Client Accounts Privacy Impact Assessment |
ATO and Services Australia compromised entity data disclosure |
4/11/2020 |
|
New policy – Child care sector changes to JobKeeper eligibility |
New policy – Child care sector changes to JobKeeper eligibility and introduction of Department of Education, Skills and Employment (DESE) Child care Transition Payment |
16/09/2020 |
|
Payment Thinking Project 3812 |
ATO Online Scheduling and Payment Plan Services |
21/08/2020 |
|
PIA for credit card storage |
3812 Payment Thinking – ATO Online Scheduling and Payment Plan Services |
21/08/2020 |
|
OTE Privacy Impact Assessment |
Offshore Tax Evasion Pilot Project |
7/07/2020 |
|
ATO ASIC Data Fusion Program |
MYEFO Combatting Illegal Phoenix Behaviour (ASIC Data Fusion) |
26/06/2020 |
|
Disclosure of Business Tax Debt PIA |
Disclosure of Business Tax Debt |
25/06/2020 |
|
Privacy Impact Assessment for Bulk Data Disclosure Project |
SFCT COVID–19 Bulk Data Disclosure project |
22/06/2020 |
|
Privacy Impact Assessment – ATO/AIC research |
Research Proposal with the Australian Institute of Criminology (AIC) concerning safety for frontline staff. |
05/06/2020 |
|
PIA for Analytics Execution Platform (AIP) and associated model development lifecycle platforms |
3884 – Advanced Analytics Governance Review (AAGR) project and the system it implements (Advanced Analytics, AA) |
25/05/2020 |
|
JobKeeper Payment Program PIA |
JobKeeper Payment Program |
13/05/2020 |
|
Corporate Project Privacy Impact Assessment |
SuperStream rollovers version 3 (including SMSFs) |
13/03/2020 |
|
eInvoicing Privacy Impact Assessment |
eInvoicing onboarding the ATO |
13/02/2020 |
|
Privacy Impact Assessment – Data Window |
3851 Data Window |
19/12/2019 |
|
Smartphone–based duress application – SafeZone |
Smartphone–based duress application – SafeZone |
17/12/2019 |
|
Tax Integrity Centre (TIC) |
PID 3362 Tax Evasion Referral Centre Rebuild |
3/12/2019 |
|
Activity Statement Financial Processing (ASFP) Privacy Impact Assessment |
Activity Statement Financial Processing (ASFP) |
3/07/2019 |
|
Privacy Impact Assessment Automation and Artificial Intelligence |
Automation and Artificial Intelligence |
21/05/2019 |
|
Enterprise Insights Portfolio (EIP) Privacy Impact Assessment |
Enterprise Insights Portfolio (EIP) |
29/05/2019 |
|
Privacy Impact Assessment – 3241 |
Superannuation Guarantee Integrity Measures |
14/02/2019 |
|
IAL External Collection Agency Lodgment Work |
External Collection Agency Lodgment Work |
7/02/2019 |
|
Privacy Impact Assessment – 2929 |
SuperStream rollovers version 3 (including SMSFs) |
18/01/2019 |
|
Privacy Impact Assessment for PGI Capability Appraisal 2018 |
PG&I Capability Appraisal 2018 |
15/01/2019 |
|
IODL Upgrade Project Privacy Impact Assessment |
IODL Upgrade |
11/01/2019 |
|
Independent PIA myGovID 2018 |
myGovID Corporate Project 3234 |
3/09/2018 |
|
Privacy Impact Assessment on the ATO longitudinal Information File for the Australian Taxation Office |
ATO Longitudinal Information Files (ALife) |
22/08/2017 |
|
DCL Privacy Impact Assessment |
Digital Capability Locator |
20/07/2017 |
|
Independent PIA RAM 2017 |
Project 1743 – Relationship and Authorisation Manager (RAM) |
31/03/2017 |
|
Relationship and Authorisation Manager – Release One |
Relationship Authorisation Manager (RAM) |
1/03/2017 |
|
Introduction of Streamlined Individual Income Tax Returns |
Streamlined Individual Income Tax Returns |
16/06/2014 |