APRA’s Privacy Policy sets out APRA’s collection and use of personal and sensitive information.

Personal and sensitive information that APRA collects is used:

• for prudential regulation and enforcement activities in respect of the Australian financial services industry;
• to respond to requests under the Freedom of Information Act 1982 or Privacy Act 1988;
• to provide information to those requesting to be on an APRA mailing list;
• to employ staff, engage contractors and maintain the operations of APRA in compliance with legislation, rules and guidelines;
• to answer inquiries and process complaints made to APRA or respond to inquiries from the Commonwealth Ombudsman; and
• in correspondence with overseas regulators.

APRA is committed to:

• having access to the appropriate information, including personal and sensitive information, to enable APRA to fulfil its prudential regulatory remit and its obligations as an employer, contractor and government agency;
• ensuring that personal and sensitive information held is accurate and securely maintained; and
• ensuring individuals have a means to access and, if necessary, request the correction of personal and sensitive information held by APRA.

Visiting APRA’s website - analytics tools and cookies

APRA’s web analytics tool, provided by a third-party provider, uses cookies to collect or view website traffic information on APRA’s website and APRA Connect. The information collected may include:

• the device type, operating system and browser information;
• the records of your activity;
• the geographic location and device IP address; and
• the websites visited before and after visiting APRA’s website or APRA Connect.

APRA uses the information to maintain, secure and improve its website. Visitors to APRA’s website may opt out of the collection of this information by disabling cookies in their browser.

Privacy Impact Assessment Register

From 1 July 2018, APRA is required under paragraph 15 of the Privacy (Australian Government Agencies – Governance) APP Code 2017 to maintain and publish a register of the Privacy Impact Assessments (PIA) it conducts on its website. A PIA is a systematic assessment of a project that identifies the impact that the project might have on the privacy of individuals, and sets out recommendations for managing, minimising or eliminating that impact.

2026

2019 - 2025