PRIVACY ACT 1988
(a) must give a copy of the determination to each agency:
(i) to which services are or were to be provided under the contract; and
(ii) to which the Commissioner considers it appropriate to give a copy; and
(b) may give such an agency a written recommendation of any measures that the Commissioner considers appropriate.
The Commissioner may give an agency a recommendation only after consulting the agency.53A(3) [Agency advise proposed actions in writing]
An agency that receives a recommendation from the Commissioner must tell the Commissioner in writing of any action the agency proposes to take in relation to the recommendation. The agency must do so within 60 days of receiving the recommendation.