Australia: Published IPOLA guidelines for Queensland government agencies on ensuring their use of mobile apps and social media complies with the Information Privacy Act 2009 (IP Act)

On 9 October 2024, the Queensland Office of the Information Commissioner published the Information Privacy and Other Legislation Amendment Act (IPOLA) guidelines for Queensland government agencies on ensuring their use of mobile apps and social media complies with the Information Privacy Act 2009 (IP Act). In particular, the guidelines emphasise the importance of adhering to privacy principles when collecting, using, and disclosing personal information, especially when utilising mobile apps and social media platforms, which may store personal data on overseas servers. Furthermore, the guidelines highlight privacy challenges, particularly for mobile apps, which can collect various personal information such as contacts, call logs, and location data. It recommends integrating privacy considerations early in the app development process and throughout its lifecycle, including performing privacy impact assessments and ensuring secure data storage. In addition, for social media use, agencies should define the purpose of their accounts, provide clear privacy policies, and ensure that personal information is shared only with consent. Social media activities must align with privacy principles, particularly when personal data is disclosed or shared, and care must be taken not to expose unnecessary personal information.