{"text_format":"1","workbook":"xlsx","n_sheets":10,"sheets":["Introduction","Background","Step 1","Step 2A","Step 2B","Step 2C","Step 3","Printable PMP","Help","Configuration"],"not_rendered":{"charts":0,"images":2,"macros":1,"external_links":0,"defined_names":69,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Introduction","index":0,"n_rows":40,"n_cols":4,"rows_kept":40,"cut":false,"hidden":false,"merged":[[39,1,42,2],[10,1,10,15],[12,1,12,15],[13,1,13,15],[23,1,23,15],[24,1,24,15],[39,3,42,15],[32,1,32,2],[33,1,33,2],[27,1,27,2],[27,3,27,15],[32,3,32,15],[33,3,33,15],[28,1,28,2],[29,1,29,2],[37,1,37,15],[1,1,1,15],[3,1,3,15],[4,1,4,15],[6,1,6,15],[8,1,8,15],[35,1,35,15],[30,1,30,2],[31,1,31,2],[28,3,28,15],[29,3,29,15],[30,3,30,15],[31,3,31,15],[26,1,26,2],[15,1,18,2],[17,3,18,15],[15,3,16,15],[21,1,21,15],[19,1,19,15],[20,1,20,15],[26,3,26,15]]}
[]
[null,"Interactive Privacy Management Plan"]
[]
[]
[null,"Evaluating Privacy to Enhance Trust"]
[]
[null,"Introduction"]
[]
[null,"The Interactive Privacy Management Plan (PMP) has been developed by the Office of the Australian Information Commissioner (OAIC) to assist public sector agencies to comply with the requirements of the Australian Government Agencies Privacy Code 2018 (Code) and Australian Privacy Principle 1.2, and to focus on the improvements which will deliver the most value to them.\n\nA PMP identifies specific, measurable privacy goals and targets and sets out how an agency will meet its compliance obligations. By completing the steps in this interactive template, your agency is meeting its obligations to have a PMP and annually measure and document your performance against it."]
[]
[null,"How to use"]
[]
[null,"Before you begin"]
[null,"The OAIC has developed a guide called Interactive PMP Explained, which is designed to  guide to help agencies navigate the Interactive PMP. It is assumed that you have read Interactive PMP Explained and completed any preliminary steps that it recommends prior to starting with the Interactive PMP."]
[]
[null,"i",null,"Interactive PMP Explained can be downloaded from the OAIC website."]
[]
[null,null,null,{"$f":"HYPERLINK(\"https://www.oaic.gov.au\",\"https://www.oaic.gov.au/\")","v":"https://www.oaic.gov.au/"}]
[]
[]
[null,"If your agency has an existing PMP"]
[null,"Before you start the Interactive PMP, you should revisit your agency's previous PMP and assess its progress against the actions that were set in that PMP. At a minimum, you should determine whether each action was met. You may also wish to document how the agency went about meeting each action, and whether the agency simply met or managed to exceed each action.\n\nThe outcomes of your agency's previous PMP will be relevant to Step 1 of the Interactive PMP, because in that step you will complete a privacy maturity assessment for your agency. By understanding your agency's progress against its past privacy actions, you will be in a better position to assess its current maturity levels and to determine realistic target maturity levels.\n\nYou will need to ensure that any actions from your agency's previous PMP that weren't achieved are carried forward to the Interactive PMP, if they are still relevant to your agency's target maturity levels."]
[]
[null,"Process overview"]
[null,"In addition to this introduction, there are 8 key sections in this interactive PMP:"]
[]
[null,"Background",null,"In this section, you will set the context for this PMP by providing information about your agency's name and contact details, the commencement and review dates for this PMP, and information about your agency's privacy risk profile."]
[null,"Step 1",null,"In Step 1, you will assess and record your agency's privacy maturity and carry out a gap analysis of your agency's privacy policy and privacy notices."]
[null,"Step 2A",null,"In Step 2A, you will review the mandatory compliance actions that your agency must take in order to meet the requirements of the Privacy Act and the Code. These actions are automatically generated for you based on your agency's privacy maturity assessment, as recorded in Step 1."]
[null,"Step 2B",null,"In Step 2B, you will record the actions your agency needs to take to address the gaps identified in its privacy policy and privacy notices, as recorded in Step 1."]
[null,"Step 2C",null,"In Step 2C, you will record your agency's improvement actions for this PMP. You will determine these actions by considering the target maturity levels from your agency's privacy maturity assessment, as recorded in Step 1."]
[null,"Step 3",null,"In Step 3, you will review all of your agency's privacy actions. Over time, you can return to this tool and update it to record your agency's progress in achieving each action."]
[null,"Printable PMP",null,"This section gives you a summarised view of the information provided in Steps 1-3, suitable for distribution as your agency's PMP. The contents of this report will automatically update as you document your agency's progress in meeting its actions (see Step 3)."]
[null,"Help",null,"This section provides some background information on the privacy maturity assessment. You may find it useful to refer to this section when you set your agency's improvement actions (see Step 2C)."]
[]
[null,"What's next?"]
[]
[null,"The Interactive PMP is designed to fit with your agency’s annual planning and reporting cycles, allowing you to reflect on your agency’s maturity and development, set goals for improvement, and run your PMP. \n\nThe PMP you produce will allow you to identify your agency's goals for the year and ensure that they are progressed and achieved. The Interactive PMP also lets you capture outcomes and helps to ensure that any goals your agency has not managed to achieve can be transferred into the agency's next PMP."]
[]
[null,"i",null,"Once you have reviewed the instructions above, you can proceed to Background."]

{"sheet":"Background","index":1,"n_rows":29,"n_cols":6,"rows_kept":29,"cut":false,"hidden":false,"merged":[[18,5,18,15],[1,1,1,15],[3,1,3,15],[4,1,4,15],[6,1,6,15],[8,1,11,2],[8,3,11,15],[13,1,13,15],[15,1,15,4],[15,5,15,15],[17,1,17,4],[17,5,17,15],[25,1,25,4],[25,5,25,15],[28,1,31,2],[28,3,31,15],[20,1,20,4],[20,5,20,15],[22,1,22,15],[23,1,23,15]]}
[]
[null,"Interactive Privacy Management Plan"]
[]
[null,{"$f":"IF(OR(ISBLANK(Background_AgencyName)),\"\",Background_AgencyName)","v":""}]
[null,{"$f":"IFERROR(IF(ISBLANK(Background_CommencementDate),\"\",CONCATENATE(TEXT(Background_CommencementDate,\"d mmmm yyyy\"),\" to \",TEXT(DATE(YEAR(Background_CommencementDate) + 1,MONTH(Background_CommencementDate),DAY(Background_CommencementDate)-1),\"d mmmm yyyy\"))),\"\")","v":""}]
[]
[null,"Background"]
[]
[null,"i",null,"In this step, you will set the context for this PMP by providing information about your agency, the commencement and review dates for this PMP, and your agency's privacy risk profile."]
[]
[]
[]
[]
[null,"About this PMP"]
[]
[null,"Agency name"]
[]
[null,"PMP commencement date"]
[null,null,null,null,null,"It is recommended that Agencies commence a new PMP on 1 July every year."]
[]
[null,"PMP end date",null,null,null,{"$f":"IFERROR(IF(ISBLANK(Background_CommencementDate),\"The end date for this PMP will be displayed once a commencement date has been provided.\",CONCATENATE(\"Following commencement, this PMP will operate until \",TEXT(DATE(YEAR(Background_CommencementDate) + 1,MONTH(Background_CommencementDate),DAY(Background_CommencementDate)-1),\"dddd, d mmmm yyyy\"),\".\")),\"Please check the format of the commencement date you have provided.\")","v":"The end date for this PMP will be displayed once a commencement date has been provided."}]
[]
[null,"Your agency's privacy risk profile"]
[null,"It is assumed that you have already identified your agency's privacy risk profile using the process described in Interactive PMP Explained. If you haven't completed this exercise, it is recommended that you do so before proceeding with the Interactive PMP. Suggestions for relevant considerations are provided in Interactive PMP Explained.\n\nYou can record your agency’s rationale for its privacy risk profile in the space below."]
[]
[null,"Privacy risk profile rationale"]
[]
[]
[null,"i",null,"When you have finished entering information about your agency and its privacy risk profile, you can proceed to Step 1."]

{"sheet":"Step 1","index":2,"n_rows":71,"n_cols":21,"rows_kept":71,"cut":false,"hidden":false,"merged":[[18,2,18,16],[23,10,23,16],[19,10,19,16],[28,10,28,16],[47,10,47,16],[20,10,20,16],[21,10,21,16],[22,10,22,16],[29,10,29,16],[30,10,30,16],[31,10,31,16],[32,10,32,16],[33,10,33,16],[37,10,37,16],[38,10,38,16],[43,6,43,7],[43,8,43,9],[44,2,44,9],[43,2,43,5],[36,6,36,7],[36,8,36,9],[37,6,37,7],[37,8,37,9],[36,2,36,5],[69,2,72,3],[67,11,67,16],[67,5,67,10],[63,2,63,16],[39,10,39,16],[40,10,40,16],[41,10,41,16],[42,10,42,16],[43,10,43,16],[44,10,44,16],[48,10,48,16],[49,10,49,16],[50,10,50,16],[66,2,66,4],[67,2,67,4],[62,2,62,15],[65,2,65,4],[54,2,54,5],[56,2,56,5],[54,6,54,7],[54,8,54,9],[55,6,55,7],[55,8,55,9],[70,5,71,15],[1,2,1,16],[3,2,3,16],[4,2,4,16],[6,2,6,16],[15,2,15,16],[16,2,16,16],[8,2,13,3],[8,4,11,16],[12,4,13,16],[65,5,65,10],[65,11,65,16],[66,5,66,10],[66,11,66,16],[59,2,59,9],[57,2,57,9],[56,6,56,7],[56,8,56,9],[24,10,24,16],[25,10,25,16],[56,10,56,16],[57,10,57,16],[27,2,27,16],[35,2,35,16],[46,2,46,16],[53,2,53,16],[36,10,36,16],[41,6,41,7],[41,8,41,9],[42,6,42,7],[42,8,42,9],[41,2,41,5],[42,2,42,5],[54,10,54,16],[60,2,60,9],[59,10,59,16],[60,10,60,16],[51,10,51,16],[55,10,55,16],[47,6,47,7],[47,8,47,9],[48,6,48,7],[48,8,48,9],[48,2,48,5],[47,2,47,5],[55,2,55,5],[51,2,51,9],[49,6,49,7],[49,8,49,9],[50,6,50,7],[50,8,50,9],[49,2,49,5],[50,2,50,5],[40,2,40,5],[40,6,40,7],[40,8,40,9],[38,2,38,5],[38,6,38,7],[38,8,38,9],[39,2,39,5],[39,6,39,7],[39,8,39,9],[37,2,37,5],[33,2,33,9],[31,6,31,7],[31,8,31,9],[32,6,32,7],[32,8,32,9],[30,6,30,7],[30,8,30,9],[29,2,29,5],[29,6,29,7],[29,8,29,9],[30,2,30,5],[31,2,31,5],[32,2,32,5],[28,6,28,7],[28,8,28,9],[19,2,19,5],[20,2,20,5],[21,2,21,5],[22,2,22,5],[23,2,23,5],[24,2,24,5],[24,6,24,7],[22,8,22,9],[23,8,23,9],[24,8,24,9],[25,2,25,9],[19,6,19,7],[28,2,28,5],[21,8,21,9],[19,8,19,9],[20,6,20,7],[20,8,20,9],[21,6,21,7],[22,6,22,7],[23,6,23,7]]}
[]
[null,null,"Interactive Privacy Management Plan"]
[]
[null,null,{"$f":"IF(OR(ISBLANK(Background_AgencyName)),\"\",Background_AgencyName)","v":""}]
[null,null,{"$f":"IFERROR(IF(ISBLANK(Background_CommencementDate),\"\",CONCATENATE(TEXT(Background_CommencementDate,\"d mmmm yyyy\"),\" to \",TEXT(DATE(YEAR(Background_CommencementDate) + 1,MONTH(Background_CommencementDate),DAY(Background_CommencementDate)-1),\"d mmmm yyyy\"))),\"\")","v":""}]
[]
[null,null,"Step 1: Measure maturity"]
[]
[null,null,"i",null,"In this step, you will complete a risk-based assessment of your agency's privacy maturity, and record the results of your agency's privacy policy/notices gap analysis. Refer to the Privacy Program Maturity Assessment Framework in the Help tab of this Interactive PMP, or see the Interactive PMP Explained guide (available on the OAIC's website), for help with completing the privacy maturity assessment."]
[]
[]
[]
[null,null,null,null,{"$f":"HYPERLINK(\"https://oaic.gov.au/privacy-officer-toolkit/\",\"Go to the OAIC Privacy Officer Toolkit\")","v":"Go to the OAIC Privacy Officer Toolkit"}]
[]
[]
[null,null,"Privacy maturity assessment"]
[null,null,"Assess and record your agency's privacy maturity levels in the table below. You can use this table, or parts of it, to share your assessment outcomes with your senior leadership team, other agencies or the OAIC.  Guidance on how to use the element scores to identify your maturity level is set out in Interactive PMP Explained.\n\nAn asterisk (*) next to an attribute name means that it is a 'compliance attribute' and that your agency must have a minimum maturity level of 'Developing' to comply with the Privacy Act or the Code. Where you identify that your agency is at the 'Initial' level in relation to a compliance attribute, additional compliance actions must be included in your agency's PMP. These mandatory compliance actions will be considered in Step 2B."]
[]
[null,null,"Governance & Culture"]
[null,"Ref.","Attribute",null,null,null,"Current Level",null,"Target Level",null,"Rationale/Commentary",null,null,null,null,null,null,"Score","Min. Score","Target","Compliance Gap"]
[null,1,{"$f":"CONCATENATE(VLOOKUP(B21,C_Attributes,2,FALSE),IF(VLOOKUP(B21,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Privacy Champion*"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G21,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B21,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I21,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"AND(R21>0,R21<S21)","v":false}]
[null,2,{"$f":"CONCATENATE(VLOOKUP(B22,C_Attributes,2,FALSE),IF(VLOOKUP(B22,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Privacy Values"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G22,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B22,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I22,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"AND(R22>0,R22<S22)","v":false}]
[null,3,{"$f":"CONCATENATE(VLOOKUP(B23,C_Attributes,2,FALSE),IF(VLOOKUP(B23,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Privacy Officer*"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G23,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B23,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I23,C_MaturityLevels,3,FALSE),0)","v":0},false]
[null,4,{"$f":"CONCATENATE(VLOOKUP(B24,C_Attributes,2,FALSE),IF(VLOOKUP(B24,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Management & Accountability"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G24,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B24,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I24,C_MaturityLevels,3,FALSE),0)","v":0},false]
[null,5,{"$f":"CONCATENATE(VLOOKUP(B25,C_Attributes,2,FALSE),IF(VLOOKUP(B25,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Awareness"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G25,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B25,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I25,C_MaturityLevels,3,FALSE),0)","v":0},false]
[null,null,"Element score (average of attribute scores)",null,null,null,null,null,null,null,{"$f":"IF(COUNTIF(R21:R25,0)=0,CONCATENATE(S26,\" / 4 (\",T26,\")\",IF(U26,\" - Compliance Gap\",\"\")),\"\")","v":""},null,null,null,null,null,null,{"$f":"AVERAGE(R21:R25)","v":0},{"$f":"IF(U26,1,ROUND(R26,1))","v":0},{"$f":"IFERROR(INDEX(C_MaturityLevels,ROUNDDOWN(S26,0),1),\"\")","v":""},{"$f":"COUNTIF(U21:U25,TRUE)>0","v":false}]
[]
[null,null,"Privacy Strategy"]
[null,"Ref.","Attribute",null,null,null,"Current Level",null,"Target Level",null,"Rationale/Commentary",null,null,null,null,null,null,"Score","Min. Score","Target","Compliance Gap"]
[null,6,{"$f":"CONCATENATE(VLOOKUP(B30,C_Attributes,2,FALSE),IF(VLOOKUP(B30,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Privacy Management Plan*"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G30,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B30,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I30,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"AND(R30>0,R30<S30)","v":false}]
[null,7,{"$f":"CONCATENATE(VLOOKUP(B31,C_Attributes,2,FALSE),IF(VLOOKUP(B31,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Inventory of Personal Information*"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G31,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B31,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I31,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"AND(R31>0,R31<S31)","v":false}]
[null,8,{"$f":"CONCATENATE(VLOOKUP(B32,C_Attributes,2,FALSE),IF(VLOOKUP(B32,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Data Quality Processes*"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G32,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B32,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I32,C_MaturityLevels,3,FALSE),0)","v":0},false]
[null,9,{"$f":"CONCATENATE(VLOOKUP(B33,C_Attributes,2,FALSE),IF(VLOOKUP(B33,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Information Security Processes"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G33,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B33,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I33,C_MaturityLevels,3,FALSE),0)","v":0},false]
[null,null,"Element score (average of attribute scores)",null,null,null,null,null,null,null,{"$f":"IF(COUNTIF(R30:R33,0)=0,CONCATENATE(S34,\" / 4 (\",T34,\")\",IF(U34,\" - Compliance Gap\",\"\")),\"\")","v":""},null,null,null,null,null,null,{"$f":"AVERAGE(R30:R33)","v":0},{"$f":"IF(U34,1,ROUND(R34,1))","v":0},{"$f":"IFERROR(INDEX(C_MaturityLevels,ROUNDDOWN(S34,0),1),\"\")","v":""},{"$f":"COUNTIF(U30:U33,TRUE)>0","v":false}]
[]
[null,null,"Privacy Processes"]
[null,"Ref.","Attribute",null,null,null,"Current Level",null,"Target Level",null,"Rationale/Commentary",null,null,null,null,null,null,"Score","Min. Score","Target","Compliance Gap"]
[null,10,{"$f":"CONCATENATE(VLOOKUP(B38,C_Attributes,2,FALSE),IF(VLOOKUP(B38,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"External Privacy Policy & Notices*"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G38,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B38,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I38,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"AND(R38>0,R38<S38)","v":false}]
[null,11,"Internal Policies & Procedures",null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,1,0,{"$f":"AND(R39>0,R39<S39)","v":false}]
[null,12,"Privacy Training*",null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,2,0,false]
[null,13,"Privacy Impact Assessments*",null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,2,0,false]
[null,14,"Dealing with Suppliers",null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,1,0,false]
[null,15,"Access & Correction*",null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,2,0,{"$f":"AND(R43>0,R43<S43)","v":false}]
[null,16,"Complaints & Enquiries",null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,1,0,false]
[null,null,"Element score (average of attribute scores)",null,null,null,null,null,null,null,{"$f":"IF(COUNTIF(R38:R44,0)=0,CONCATENATE(S45,\" / 4 (\",T45,\")\",IF(U45,\" - Compliance Gap\",\"\")),\"\")","v":""},null,null,null,null,null,null,{"$f":"AVERAGE(R38:R44)","v":0},{"$f":"IF(U45,1,ROUND(R45,1))","v":0},{"$f":"IFERROR(INDEX(C_MaturityLevels,ROUNDDOWN(S45,0),1),\"\")","v":""},{"$f":"COUNTIF(U38:U44,TRUE)>0","v":false}]
[]
[null,null,"Risk & Assurance"]
[null,"Ref.","Attribute",null,null,null,"Current Level",null,"Target Level",null,"Rationale/Commentary",null,null,null,null,null,null,"Score","Min. Score","Target","Compliance Gap"]
[null,17,{"$f":"CONCATENATE(VLOOKUP(B49,C_Attributes,2,FALSE),IF(VLOOKUP(B49,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Risk Identification & Assessment"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G49,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B49,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I49,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"AND(R49>0,R49<S49)","v":false}]
[null,18,{"$f":"CONCATENATE(VLOOKUP(B50,C_Attributes,2,FALSE),IF(VLOOKUP(B50,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Reporting & Escalation "},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G50,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B50,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I50,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"AND(R50>0,R50<S50)","v":false}]
[null,19,{"$f":"CONCATENATE(VLOOKUP(B51,C_Attributes,2,FALSE),IF(VLOOKUP(B51,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Assurance Model"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G51,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B51,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I51,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"AND(R51>0,R51<S51)","v":false}]
[null,null,"Element score (average of attribute scores)",null,null,null,null,null,null,null,{"$f":"IF(COUNTIF(R49:R51,0)=0,CONCATENATE(S52,\" / 4 (\",T52,\")\",IF(U52,\" - Compliance Gap\",\"\")),\"\")","v":""},null,null,null,null,null,null,{"$f":"AVERAGE(R49:R51)","v":0},{"$f":"IF(U52,1,ROUND(R52,1))","v":0},{"$f":"IFERROR(INDEX(C_MaturityLevels,S52,1),\"\")","v":""},{"$f":"COUNTIF(U49:U51,TRUE)>0","v":false}]
[]
[null,null,"Data Breach Response"]
[null,"Ref.","Attribute",null,null,null,"Current Level",null,"Target Level",null,"Rationale/Commentary",null,null,null,null,null,null,"Score","Min. Score","Target","Compliance Gap"]
[null,20,{"$f":"CONCATENATE(VLOOKUP(B56,C_Attributes,2,FALSE),IF(VLOOKUP(B56,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Data Breach Response Plan"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G56,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B56,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I56,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"AND(R56>0,R56<S56)","v":false}]
[null,21,{"$f":"CONCATENATE(VLOOKUP(B57,C_Attributes,2,FALSE),IF(VLOOKUP(B57,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Data Breach Notification*"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G57,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B57,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I57,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"AND(R57>0,R57<S57)","v":false}]
[null,null,"Element score (average of attribute scores)",null,null,null,null,null,null,null,{"$f":"IF(COUNTIF(R56:R57,0)=0,CONCATENATE(S58,\" / 4 (\",T58,\")\",IF(U58,\" - Compliance Gap\",\"\")),\"\")","v":""},null,null,null,null,null,null,{"$f":"AVERAGE(R56:R57)","v":0},{"$f":"IF(U58,1,ROUND(R58,1))","v":0},{"$f":"IFERROR(INDEX(C_MaturityLevels,S58,1),\"\")","v":""},{"$f":"COUNTIF(U56:U57,TRUE)>0","v":false}]
[]
[null,null,"Average of element scores",null,null,null,null,null,null,null,{"$f":"IF(AND(COUNTIF(R21:R25,0)=0,COUNTIF(R30:R33,0)=0,COUNTIF(R38:R44,0)=0,COUNTIF(R49:R51,0)=0,COUNTIF(R56:R57,0)=0),CONCATENATE(R61,\" / 4\"),\"\")","v":""},null,null,null,null,null,null,"Average","Rounded","Level","Compliance Gaps"]
[null,null,"Overall privacy maturity level",null,null,null,null,null,null,null,{"$f":"IF(AND(COUNTIF(R21:R25,0)=0,COUNTIF(R30:R33,0)=0,COUNTIF(R38:R44,0)=0,COUNTIF(R49:R51,0)=0,COUNTIF(R56:R57,0)=0),CONCATENATE(S61,\" / 4 (\",T61,\")\",IF(OR(U26,U34,U45,U52,U58),\" - Compliance Gap\",\"\")),\"\")","v":""},null,null,null,null,null,null,{"$f":"ROUND(AVERAGE(S26,S34,S45,S52,S58),1)","v":0},{"$f":"ROUND(R61,0)","v":0},{"$f":"IFERROR(INDEX(C_MaturityLevels,S61,1),\"\")","v":""},{"$f":"OR(U26,U34,U45,U52,U58)","v":false}]
[]
[null,null,"Adequacy of privacy policy and notices"]
[null,null,"Section 17 of the Code requires an agency to regularly assess the adequacy of its privacy practices, procedures and systems (including its privacy policy and collection notices) to ensure their adequacy for the purpose of compliance with the APPs and currency. Generally, completion of the Interactive PMP facilitates compliance with this requirement. Record the outcomes of your review of your agency’s privacy policy and collection notices here. You will add any resulting goals to your agency's PMP in Step 2B."]
[]
[null,null,null,null,null,"Compliance Gaps (if any)",null,null,null,null,null,"Currency Gaps (if any)"]
[null,null,"Privacy Policy (APP 1)"]
[null,null,"Privacy Notices (APP 5)"]
[]
[null,null,"i"]
[null,null,null,null,null,"When you have finished entering the results of your agency's privacy maturity assessment and gap review, you can proceed to Step 2A."]

{"sheet":"Step 2A","index":3,"n_rows":30,"n_cols":18,"rows_kept":30,"cut":false,"hidden":false,"merged":[[27,2,27,16],[20,9,20,11],[21,9,21,11],[22,9,22,11],[23,9,23,11],[24,9,24,11],[22,5,22,8],[23,5,23,8],[24,5,24,8],[21,2,21,4],[22,2,22,4],[23,2,23,4],[24,2,24,4],[21,5,21,8],[25,2,25,4],[26,2,26,4],[17,5,17,8],[18,5,18,8],[19,5,19,8],[20,5,20,8],[16,2,16,4],[17,2,17,4],[18,2,18,4],[19,2,19,4],[20,2,20,4],[29,4,32,16],[29,2,32,3],[1,2,1,16],[3,2,3,16],[4,2,4,16],[6,2,6,16],[8,2,11,3],[13,2,13,16],[15,2,15,4],[15,5,15,8],[8,4,11,16],[25,9,25,11],[25,14,25,16],[26,9,26,11],[26,14,26,16],[16,5,16,8],[25,5,25,8],[26,5,26,8],[25,12,25,13],[26,12,26,13],[19,9,19,11],[20,12,20,13],[21,12,21,13],[22,12,22,13],[23,12,23,13],[24,12,24,13],[19,12,19,13],[19,14,19,16],[18,9,18,11],[18,14,18,16],[15,9,15,11],[15,12,15,13],[15,14,15,16],[17,9,17,11],[17,14,17,16],[16,9,16,11],[16,14,16,16],[16,12,16,13],[17,12,17,13],[18,12,18,13],[20,14,20,16],[21,14,21,16],[22,14,22,16],[23,14,23,16],[24,14,24,16]]}
[]
[null,null,"Interactive Privacy Management Plan"]
[]
[null,null,{"$f":"IF(OR(ISBLANK(Background_AgencyName)),\"\",Background_AgencyName)","v":""}]
[null,null,{"$f":"IFERROR(IF(ISBLANK(Background_CommencementDate),\"\",CONCATENATE(TEXT(Background_CommencementDate,\"d mmmm yyyy\"),\" to \",TEXT(DATE(YEAR(Background_CommencementDate) + 1,MONTH(Background_CommencementDate),DAY(Background_CommencementDate)-1),\"d mmmm yyyy\"))),\"\")","v":""}]
[]
[null,null,"Step 2A: Set compliance actions"]
[]
[null,null,"i",null,"In this step, you will identify your agency’s privacy goals and targets, including setting out how your agency will meet its compliance obligations under APP 1.2 (Code, s 9(2)(b))."]
[]
[]
[]
[]
[null,null,"Where you identified in Step 1 that your agency is at the \"Initial\" level in relation to a compliance attribute, this indicates that there is a compliance gap because that attribute is required under the Privacy Act or the Code. The minimum maturity level for compliance requirements is \"Developing\". All compliance gaps must form part of your PMP and may require prompt remediation.\n\nThe remediation actions below are mandatory and are based on the compliance gaps identified in Step 1. For each action, provide details on the responsible person(s), the due date and any required resources, dependencies or related documents."]
[]
[null,"Ref.","Attribute / Suggested action",null,null,"Remediation action",null,null,null,"Responsible person, position or team",null,null,"Due",null,"Required resources, dependencies and/or related documents (specify or link)",null,null,"Applicable"]
[null,"A1","Privacy Champion\n\nSuggested action: Designate an officer of the agency as a Privacy Champion.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"'Step 1'!G21=\"Initial\"","v":false}]
[null,"A2","Privacy Officer\n\nSuggested action: Designate an officer of the agency as a Privacy Officer.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"'Step 1'!G23=\"Initial\"","v":false}]
[null,"A3","Privacy Management Plan\n\nSuggested action: Create a privacy management plan.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"'Step 1'!G30=\"Initial\"","v":false}]
[null,"A4","Inventory of Personal Information\n\nSuggested action: Document categories of personal information collected, used and disclosed, including any offshore recipients.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"'Step 1'!G31=\"Initial\"","v":false}]
[null,"A5","Data Quality Processes\n\nSuggested action: Define processes to monitor and improve the quality of personal information and ensure these are regularly undertaken.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"'Step 1'!G32=\"Initial\"","v":false}]
[null,"A6","APP 1 Privacy Policy\n\nSuggested action: Create and publish a public privacy policy that meets the requirements of APP 1.4.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"'Step 1'!G38=\"Initial\"","v":false}]
[null,"A7","APP 5 Privacy Notice\n\nSuggested action: Create and publish privacy notices that meet the requirements of APP 5.2.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"'Step 1'!G38=\"Initial\"","v":false}]
[null,"A8","Privacy Training\n\nSuggested action: Amend the induction programme to include a privacy training component and ensure this is delivered to staff on induction and annually.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"'Step 1'!G40=\"Initial\"","v":false}]
[null,"A9","Privacy Impact Assessments\n\nSuggested action: Create a PIA process and ensure that PIAs are completed on all high-risk projects.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"'Step 1'!G41=\"Initial\"","v":false}]
[null,"A10","Access and Correction\n\nSuggested action: Develop access and correction request process that ensures Privacy Act timeframes are regularly met.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"'Step 1'!G43=\"Initial\"","v":false}]
[null,"A11","Data Breach Notification\n\nSuggested action: Create a process to ensure that data breach notification occurs where required by legislation.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"'Step 1'!G57=\"Initial\"","v":false}]
[null,null,"There are no compliance actions defined in this PMP.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"COUNTIF(R17:R27,TRUE)=0","v":true}]
[]
[null,null,"i",null,"When you have finished entering the details of your agency's compliance actions, you can proceed to Step 2B."]

{"sheet":"Step 2B","index":4,"n_rows":48,"n_cols":15,"rows_kept":48,"cut":false,"hidden":false,"merged":[[46,2,49,3],[43,2,43,4],[43,5,43,8],[43,9,43,11],[43,12,43,13],[43,14,43,16],[44,2,44,4],[44,5,44,8],[44,9,44,11],[44,12,44,13],[44,14,44,16],[47,5,48,15],[41,2,41,4],[41,5,41,8],[41,9,41,11],[41,12,41,13],[41,14,41,16],[42,2,42,4],[42,5,42,8],[42,9,42,11],[42,12,42,13],[42,14,42,16],[39,2,39,4],[39,5,39,8],[39,9,39,11],[39,12,39,13],[39,14,39,16],[40,2,40,4],[40,5,40,8],[40,9,40,11],[40,12,40,13],[40,14,40,16],[37,2,37,4],[37,5,37,8],[37,9,37,11],[37,12,37,13],[37,14,37,16],[38,2,38,4],[38,5,38,8],[38,9,38,11],[38,12,38,13],[38,14,38,16],[35,9,35,11],[35,12,35,13],[35,14,35,16],[36,2,36,4],[36,5,36,8],[36,9,36,11],[36,12,36,13],[36,14,36,16],[33,9,33,11],[33,12,33,13],[33,14,33,16],[34,2,34,4],[34,5,34,8],[34,9,34,11],[34,12,34,13],[34,14,34,16],[35,2,35,4],[35,5,35,8],[33,2,33,4],[33,5,33,8],[31,9,31,11],[31,12,31,13],[31,14,31,16],[32,2,32,4],[32,5,32,8],[32,9,32,11],[32,12,32,13],[32,14,32,16],[29,9,29,11],[29,12,29,13],[29,14,29,16],[30,2,30,4],[30,5,30,8],[30,9,30,11],[30,12,30,13],[30,14,30,16],[29,2,29,4],[29,5,29,8],[31,2,31,4],[31,5,31,8],[27,2,27,4],[27,5,27,8],[27,12,27,13],[27,14,27,16],[28,2,28,4],[28,5,28,8],[28,12,28,13],[28,14,28,16],[25,12,25,13],[26,12,26,13],[25,14,25,16],[26,14,26,16],[27,9,27,11],[28,9,28,11],[24,14,24,16],[24,12,24,13],[25,2,25,4],[26,2,26,4],[24,5,24,8],[25,5,25,8],[26,5,26,8],[24,9,24,11],[17,2,17,4],[19,5,19,16],[21,2,21,16],[22,2,22,16],[24,2,24,4],[19,2,19,4],[17,5,17,16],[18,5,18,16],[18,2,18,4],[25,9,25,11],[26,9,26,11],[1,2,1,16],[3,2,3,16],[4,2,4,16],[6,2,6,16],[8,2,11,3],[13,2,13,16],[14,2,14,16],[16,2,16,4],[16,5,16,16],[8,4,11,16]]}
[]
[null,null,"Interactive Privacy Management Plan"]
[]
[null,null,{"$f":"IF(OR(ISBLANK(Background_AgencyName)),\"\",Background_AgencyName)","v":""}]
[null,null,{"$f":"IFERROR(IF(ISBLANK(Background_CommencementDate),\"\",CONCATENATE(TEXT(Background_CommencementDate,\"d mmmm yyyy\"),\" to \",TEXT(DATE(YEAR(Background_CommencementDate) + 1,MONTH(Background_CommencementDate),DAY(Background_CommencementDate)-1),\"d mmmm yyyy\"))),\"\")","v":""}]
[]
[null,null,"Step 2B: Set privacy policy and notices actions"]
[]
[null,null,"i",null,"In this section, you will consider the gap analysis of your agency's privacy policy and privacy notices (which you provided in Step 1), and document the actions that your agency will take in order to address any gaps. The results of your agency's gap analysis are reproduced below for reference."]
[]
[]
[]
[]
[null,null,"Adequacy of privacy policy and notices"]
[null,null,"The results of your agency's privacy policy and notices gap analysis are reproduced below for reference. You should consider these results when determining the actions further below."]
[]
[null,null,"Privacy Policy (APP 1) Compliance Gaps",null,null,{"$f":"IF(ISBLANK('Step 1'!F67),\"No gaps provided in Step 1\",'Step 1'!F67)","v":"No gaps provided in Step 1"}]
[null,null,"Privacy Policy (APP 1) Currency Gaps",null,null,{"$f":"IF(ISBLANK('Step 1'!L67),\"No gaps provided in Step 1\",'Step 1'!L67)","v":"No gaps provided in Step 1"}]
[null,null,"Privacy Notices (APP 5) Compliance Gaps",null,null,{"$f":"IF(ISBLANK('Step 1'!F68),\"No gaps provided in Step 1\",'Step 1'!F68)","v":"No gaps provided in Step 1"}]
[null,null,"Privacy Notices (APP 5) Currency Gaps",null,null,{"$f":"IF(ISBLANK('Step 1'!L68),\"No gaps provided in Step 1\",'Step 1'!L68)","v":"No gaps provided in Step 1"}]
[]
[null,null,"Privacy policy and notices actions"]
[null,null,"If you identified any gaps in the adequacy of your Privacy Policy (APP 1) or Privacy Notices (APP 5), you should capture relevant remediation actions here. You don't have to fill every row in the table below - empty rows will not be displayed in your agency's Printable PMP."]
[]
[null,"Ref.","Gap type",null,null,"Remediation action",null,null,null,"Responsible person, position or team",null,null,"Due",null,"Required resources, dependencies and/or related documents (specify or link)"]
[null,"A12"]
[null,"A13"]
[null,"A14"]
[null,"A15"]
[null,"A16"]
[null,"A17"]
[null,"A18"]
[null,"A19"]
[null,"A20"]
[null,"A21"]
[null,"A22"]
[null,"A23"]
[null,"A24"]
[null,"A25"]
[null,"A26"]
[null,"A27"]
[null,"A28"]
[null,"A29"]
[null,"A30"]
[null,"A31"]
[]
[null,null,"i"]
[null,null,null,null,null,"When you have finished entering the details of your agency's privacy policy and notices actions, you can proceed to Step 2C."]

{"sheet":"Step 2C","index":5,"n_rows":96,"n_cols":18,"rows_kept":96,"cut":false,"hidden":false,"merged":[[8,4,11,16],[65,2,65,16],[55,9,55,11],[17,13,17,16],[38,2,38,16],[17,7,17,8],[17,9,17,12],[46,9,46,11],[48,2,48,4],[51,2,51,4],[54,2,54,4],[43,2,43,4],[44,2,44,4],[45,2,45,4],[41,2,41,16],[43,9,43,11],[43,12,43,13],[43,14,43,16],[44,5,44,8],[44,9,44,11],[44,12,44,13],[44,14,44,16],[45,5,45,8],[45,9,45,11],[45,12,45,13],[95,2,98,3],[95,4,98,16],[92,2,92,16],[71,2,71,4],[71,5,71,8],[71,9,71,11],[71,12,71,13],[71,14,71,16],[93,2,93,16],[73,2,73,4],[73,5,73,8],[73,9,73,11],[73,12,73,13],[73,14,73,16],[74,2,74,4],[74,5,74,8],[74,9,74,11],[74,12,74,13],[74,14,74,16],[72,2,72,4],[72,5,72,8],[72,9,72,11],[72,12,72,13],[72,14,72,16],[1,2,1,16],[3,2,3,16],[4,2,4,16],[6,2,6,16],[8,2,11,3],[67,2,67,16],[68,2,68,16],[70,2,70,4],[70,5,70,8],[70,9,70,11],[70,12,70,13],[70,14,70,16],[13,2,13,16],[14,2,14,16],[16,2,16,4],[16,5,16,6],[16,7,16,8],[16,9,16,12],[16,13,16,16],[17,5,17,6],[17,2,17,4],[40,2,40,16],[45,14,45,16],[43,5,43,8],[75,2,75,4],[75,5,75,8],[75,9,75,11],[75,12,75,13],[75,14,75,16],[76,2,76,4],[76,5,76,8],[76,9,76,11],[76,12,76,13],[76,14,76,16],[46,12,46,13],[46,14,46,16],[47,9,47,11],[47,12,47,13],[47,14,47,16],[48,5,48,8],[48,9,48,11],[48,12,48,13],[48,14,48,16],[49,9,49,11],[49,12,49,13],[49,14,49,16],[50,9,50,11],[77,2,77,4],[77,5,77,8],[77,9,77,11],[77,12,77,13],[77,14,77,16],[50,12,50,13],[50,14,50,16],[51,5,51,8],[51,9,51,11],[51,12,51,13],[51,14,51,16],[52,9,52,11],[52,12,52,13],[52,14,52,16],[60,9,60,11],[60,12,60,13],[60,14,60,16],[53,9,53,11],[53,12,53,13],[53,14,53,16],[54,5,54,8],[54,9,54,11],[54,12,54,13],[54,14,54,16],[78,2,78,4],[78,5,78,8],[78,9,78,11],[78,12,78,13],[78,14,78,16],[79,2,79,4],[79,5,79,8],[79,9,79,11],[79,12,79,13],[79,14,79,16],[80,2,80,4],[80,5,80,8],[80,9,80,11],[80,12,80,13],[80,14,80,16],[81,2,81,4],[81,5,81,8],[81,9,81,11],[81,12,81,13],[81,14,81,16],[82,2,82,4],[82,5,82,8],[82,9,82,11],[82,12,82,13],[82,14,82,16],[83,2,83,4],[83,5,83,8],[83,9,83,11],[83,12,83,13],[83,14,83,16],[84,2,84,4],[84,5,84,8],[84,9,84,11],[84,12,84,13],[84,14,84,16],[85,2,85,4],[85,5,85,8],[85,9,85,11],[85,12,85,13],[85,14,85,16],[86,2,86,4],[86,5,86,8],[86,9,86,11],[86,12,86,13],[86,14,86,16],[89,2,89,4],[89,5,89,8],[89,9,89,11],[89,12,89,13],[89,14,89,16],[87,2,87,4],[87,5,87,8],[87,9,87,11],[87,12,87,13],[87,14,87,16],[88,2,88,4],[88,5,88,8],[88,9,88,11],[88,12,88,13],[88,14,88,16],[22,13,22,16],[21,2,21,4],[21,5,21,6],[21,7,21,8],[21,9,21,12],[21,13,21,16],[24,2,24,4],[24,5,24,6],[24,7,24,8],[24,9,24,12],[24,13,24,16],[23,2,23,4],[23,5,23,6],[23,7,23,8],[23,9,23,12],[23,13,23,16],[18,2,18,4],[18,5,18,6],[18,7,18,8],[18,9,18,12],[18,13,18,16],[25,2,25,4],[25,5,25,6],[25,7,25,8],[25,9,25,12],[25,13,25,16],[20,2,20,4],[20,5,20,6],[20,7,20,8],[20,9,20,12],[20,13,20,16],[19,2,19,4],[19,5,19,6],[19,7,19,8],[19,9,19,12],[19,13,19,16],[22,2,22,4],[22,5,22,6],[22,7,22,8],[22,9,22,12],[30,13,30,16],[29,2,29,4],[29,5,29,6],[29,7,29,8],[29,9,29,12],[29,13,29,16],[32,2,32,4],[32,5,32,6],[32,7,32,8],[32,9,32,12],[32,13,32,16],[31,2,31,4],[31,5,31,6],[31,7,31,8],[31,9,31,12],[31,13,31,16],[26,2,26,4],[26,5,26,6],[26,7,26,8],[26,9,26,12],[26,13,26,16],[33,2,33,4],[33,5,33,6],[33,7,33,8],[33,9,33,12],[33,13,33,16],[28,2,28,4],[28,5,28,6],[28,7,28,8],[28,9,28,12],[28,13,28,16],[27,2,27,4],[27,5,27,6],[27,7,27,8],[27,9,27,12],[27,13,27,16],[30,2,30,4],[30,5,30,6],[30,7,30,8],[30,9,30,12],[34,2,34,4],[34,5,34,6],[34,7,34,8],[34,9,34,12],[34,13,34,16],[35,2,35,4],[35,5,35,6],[35,7,35,8],[35,9,35,12],[35,13,35,16],[36,2,36,4],[36,5,36,6],[36,7,36,8],[36,9,36,12],[36,13,36,16],[37,2,37,4],[37,5,37,6],[37,7,37,8],[37,9,37,12],[37,13,37,16],[61,9,61,11],[61,12,61,13],[61,14,61,16],[55,12,55,13],[55,14,55,16],[61,2,61,4],[61,5,61,8],[62,2,62,4],[59,14,59,16],[56,9,56,11],[56,12,56,13],[56,14,56,16],[58,9,58,11],[58,12,58,13],[58,14,58,16],[59,9,59,11],[59,12,59,13],[57,9,57,11],[57,12,57,13],[57,14,57,16],[58,2,58,4],[58,5,58,8],[59,2,59,4],[59,5,59,8],[64,2,64,4],[64,5,64,8],[64,9,64,11],[64,12,64,13],[64,14,64,16],[62,9,62,11],[62,12,62,13],[62,14,62,16],[63,2,63,4],[63,5,63,8],[63,9,63,11],[63,12,63,13],[63,14,63,16],[62,5,62,8],[56,2,56,4],[56,5,56,8],[60,2,60,4],[60,5,60,8],[57,2,57,4],[57,5,57,8],[52,2,52,4],[52,5,52,8],[53,2,53,4],[53,5,53,8],[49,2,49,4],[49,5,49,8],[50,2,50,4],[50,5,50,8],[46,2,46,4],[46,5,46,8],[47,2,47,4],[47,5,47,8],[55,2,55,4],[55,5,55,8]]}
[]
[null,null,"Interactive Privacy Management Plan"]
[]
[null,null,{"$f":"IF(OR(ISBLANK(Background_AgencyName)),\"\",Background_AgencyName)","v":""}]
[null,null,{"$f":"IFERROR(IF(ISBLANK(Background_CommencementDate),\"\",CONCATENATE(TEXT(Background_CommencementDate,\"d mmmm yyyy\"),\" to \",TEXT(DATE(YEAR(Background_CommencementDate) + 1,MONTH(Background_CommencementDate),DAY(Background_CommencementDate)-1),\"d mmmm yyyy\"))),\"\")","v":""}]
[]
[null,null,"Step 2C: Set actions for improving maturity"]
[]
[null,null,"i",null,"In this section, you should reflect on the outcomes of your agency's privacy maturity assessment, and specifically those attributes where your agency has a target maturity level which is higher than its current maturity level. For example, if your agency’s maturity level in relation to PIAs is 'Developing', and your agency wishes to raise it to 'Defined' in the coming year, you should identify the specific, measurable actions that your agency can take to reach that goal."]
[]
[]
[]
[]
[null,null,"Suggested outcomes and actions"]
[null,null,"The table below shows your agency's current and target maturity levels, which you selected in Step 1. Also shown are the suggested outcomes that will help to ensure that your agency reaches its target maturity levels. You can document the actions that your agency will take in order to achieve the suggested outcomes.\n\nThis table only contains attributes for which you have indicated that your agency plans to improve its maturity level. You can include additional actions further below."]
[]
[null,"Ref.","Element / Attribute",null,null,"Current Level",null,"Target Level",null,"Suggested Outcomes",null,null,null,"Action",null,null,null,"Applicable"]
[null,1,{"$f":"CONCATENATE(VLOOKUP(B18,C_Attributes,6),\" / \",VLOOKUP(B18,C_Attributes,2,FALSE))","v":"Governance & Culture / Privacy Champion"},null,null,{"$f":"IF(ISBLANK(VLOOKUP(B18,Step1_GovernanceAndCultureAssessment,6,FALSE)),\"\",VLOOKUP(B18,Step1_GovernanceAndCultureAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B18,Step1_GovernanceAndCultureAssessment,8,FALSE)),\"\",VLOOKUP(B18,Step1_GovernanceAndCultureAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_PrivacyChampionOutcomes,1,MATCH(H18,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_PrivacyChampionOutcomes,1,MATCH(H18,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B18,Step1_GovernanceAndCultureAssessment,19) = 0),NOT( VLOOKUP(B18,Step1_GovernanceAndCultureAssessment,17) = 0),(VLOOKUP(B18,Step1_GovernanceAndCultureAssessment,19) - VLOOKUP(B18,Step1_GovernanceAndCultureAssessment,17)) > 0)","v":false}]
[null,2,"Governance & Culture / Privacy Values",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B19,Step1_GovernanceAndCultureAssessment,6,FALSE)),\"\",VLOOKUP(B19,Step1_GovernanceAndCultureAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B19,Step1_GovernanceAndCultureAssessment,8,FALSE)),\"\",VLOOKUP(B19,Step1_GovernanceAndCultureAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_PrivacyValuesOutcomes,1,MATCH(H19,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_PrivacyValuesOutcomes,1,MATCH(H19,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B19,Step1_GovernanceAndCultureAssessment,19) = 0),NOT( VLOOKUP(B19,Step1_GovernanceAndCultureAssessment,17) = 0),(VLOOKUP(B19,Step1_GovernanceAndCultureAssessment,19) - VLOOKUP(B19,Step1_GovernanceAndCultureAssessment,17)) > 0)","v":false}]
[null,3,"Governance & Culture / Privacy Officer",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B20,Step1_GovernanceAndCultureAssessment,6,FALSE)),\"\",VLOOKUP(B20,Step1_GovernanceAndCultureAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B20,Step1_GovernanceAndCultureAssessment,8,FALSE)),\"\",VLOOKUP(B20,Step1_GovernanceAndCultureAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_PrivacyOfficerOutcomes,1,MATCH(H20,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_PrivacyOfficerOutcomes,1,MATCH(H20,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B20,Step1_GovernanceAndCultureAssessment,19) = 0),NOT( VLOOKUP(B20,Step1_GovernanceAndCultureAssessment,17) = 0),(VLOOKUP(B20,Step1_GovernanceAndCultureAssessment,19) - VLOOKUP(B20,Step1_GovernanceAndCultureAssessment,17)) > 0)","v":false}]
[null,4,"Governance & Culture / Management & Accountability",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B21,Step1_GovernanceAndCultureAssessment,6,FALSE)),\"\",VLOOKUP(B21,Step1_GovernanceAndCultureAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B21,Step1_GovernanceAndCultureAssessment,8,FALSE)),\"\",VLOOKUP(B21,Step1_GovernanceAndCultureAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_ManagementAndAccountabilityOutcomes,1,MATCH(H21,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_ManagementAndAccountabilityOutcomes,1,MATCH(H21,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B21,Step1_GovernanceAndCultureAssessment,19) = 0),NOT( VLOOKUP(B21,Step1_GovernanceAndCultureAssessment,17) = 0),(VLOOKUP(B21,Step1_GovernanceAndCultureAssessment,19) - VLOOKUP(B21,Step1_GovernanceAndCultureAssessment,17)) > 0)","v":false}]
[null,5,"Governance & Culture / Awareness",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B22,Step1_GovernanceAndCultureAssessment,6,FALSE)),\"\",VLOOKUP(B22,Step1_GovernanceAndCultureAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B22,Step1_GovernanceAndCultureAssessment,8,FALSE)),\"\",VLOOKUP(B22,Step1_GovernanceAndCultureAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_AwarenessOutcomes,1,MATCH(H22,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_AwarenessOutcomes,1,MATCH(H22,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B22,Step1_GovernanceAndCultureAssessment,19) = 0),NOT( VLOOKUP(B22,Step1_GovernanceAndCultureAssessment,17) = 0),(VLOOKUP(B22,Step1_GovernanceAndCultureAssessment,19) - VLOOKUP(B22,Step1_GovernanceAndCultureAssessment,17)) > 0)","v":false}]
[null,6,"Privacy Strategy / Privacy Management Plan",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B23,Step1_PrivacyStrategyAssessment,6,FALSE)),\"\",VLOOKUP(B23,Step1_PrivacyStrategyAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B23,Step1_PrivacyStrategyAssessment,8,FALSE)),\"\",VLOOKUP(B23,Step1_PrivacyStrategyAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_PrivacyManagementPlanOutcomes,1,MATCH(H23,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_PrivacyManagementPlanOutcomes,1,MATCH(H23,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B23,Step1_PrivacyStrategyAssessment,19) = 0),NOT( VLOOKUP(B23,Step1_PrivacyStrategyAssessment,17) = 0),(VLOOKUP(B23,Step1_PrivacyStrategyAssessment,19) - VLOOKUP(B23,Step1_PrivacyStrategyAssessment,17)) > 0)","v":false}]
[null,7,"Privacy Strategy / Inventory of Personal Information",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B24,Step1_PrivacyStrategyAssessment,6,FALSE)),\"\",VLOOKUP(B24,Step1_PrivacyStrategyAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B24,Step1_PrivacyStrategyAssessment,8,FALSE)),\"\",VLOOKUP(B24,Step1_PrivacyStrategyAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_InventoryOfPiOutcomes,1,MATCH(H24,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_InventoryOfPiOutcomes,1,MATCH(H24,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B24,Step1_PrivacyStrategyAssessment,19) = 0),NOT( VLOOKUP(B24,Step1_PrivacyStrategyAssessment,17) = 0),(VLOOKUP(B24,Step1_PrivacyStrategyAssessment,19) - VLOOKUP(B24,Step1_PrivacyStrategyAssessment,17)) > 0)","v":false}]
[null,8,"Privacy Strategy / Data Quality Processes",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B25,Step1_PrivacyStrategyAssessment,6,FALSE)),\"\",VLOOKUP(B25,Step1_PrivacyStrategyAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B25,Step1_PrivacyStrategyAssessment,8,FALSE)),\"\",VLOOKUP(B25,Step1_PrivacyStrategyAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_DataQualityProcessesOutcomes,1,MATCH(H25,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_DataQualityProcessesOutcomes,1,MATCH(H25,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B25,Step1_PrivacyStrategyAssessment,19) = 0),NOT( VLOOKUP(B25,Step1_PrivacyStrategyAssessment,17) = 0),(VLOOKUP(B25,Step1_PrivacyStrategyAssessment,19) - VLOOKUP(B25,Step1_PrivacyStrategyAssessment,17)) > 0)","v":false}]
[null,9,"Privacy Strategy / Information Security Processes",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B26,Step1_PrivacyStrategyAssessment,6,FALSE)),\"\",VLOOKUP(B26,Step1_PrivacyStrategyAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B26,Step1_PrivacyStrategyAssessment,8,FALSE)),\"\",VLOOKUP(B26,Step1_PrivacyStrategyAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_InfoSecOutcomes,1,MATCH(H26,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_InfoSecOutcomes,1,MATCH(H26,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B26,Step1_PrivacyStrategyAssessment,19) = 0),NOT( VLOOKUP(B26,Step1_PrivacyStrategyAssessment,17) = 0),(VLOOKUP(B26,Step1_PrivacyStrategyAssessment,19) - VLOOKUP(B26,Step1_PrivacyStrategyAssessment,17)) > 0)","v":false}]
[null,10,"Privacy Processes / External Privacy Policy & Notices",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B27,Step1_PrivacyProcessesAssessment,6,FALSE)),\"\",VLOOKUP(B27,Step1_PrivacyProcessesAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B27,Step1_PrivacyProcessesAssessment,8,FALSE)),\"\",VLOOKUP(B27,Step1_PrivacyProcessesAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_PrivacyPolicyAndNoticesOutcomes,1,MATCH(H27,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_PrivacyPolicyAndNoticesOutcomes,1,MATCH(H27,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B27,Step1_PrivacyProcessesAssessment,19) = 0),NOT( VLOOKUP(B27,Step1_PrivacyProcessesAssessment,17) = 0),(VLOOKUP(B27,Step1_PrivacyProcessesAssessment,19) - VLOOKUP(B27,Step1_PrivacyProcessesAssessment,17)) > 0)","v":false}]
[null,11,"Privacy Processes / Internal Policies & Procedures",null,null,"",null,"",null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_InternalPoliciesOutcomes,1,MATCH(H28,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_InternalPoliciesOutcomes,1,MATCH(H28,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,false]
[null,12,"Privacy Processes / Privacy Training",null,null,"",null,"",null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_PrivacyTrainingOutcomes,1,MATCH(H29,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_PrivacyTrainingOutcomes,1,MATCH(H29,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,false]
[null,13,"Privacy Processes / Privacy Impact Assessments",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B30,Step1_PrivacyProcessesAssessment,6,FALSE)),\"\",VLOOKUP(B30,Step1_PrivacyProcessesAssessment,6,FALSE))","v":""},null,"",null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_PiaOutcomes,1,MATCH(H30,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_PiaOutcomes,1,MATCH(H30,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,false]
[null,14,"Privacy Processes / Dealing with Suppliers",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B31,Step1_PrivacyProcessesAssessment,6,FALSE)),\"\",VLOOKUP(B31,Step1_PrivacyProcessesAssessment,6,FALSE))","v":""},null,"",null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_DealingWithContractorsOutcomes,1,MATCH(H31,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_DealingWithContractorsOutcomes,1,MATCH(H31,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,false]
[null,15,"Privacy Processes / Access & Correction",null,null,"",null,"",null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_AccessAndCorrectionOutcomes,1,MATCH(H32,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_AccessAndCorrectionOutcomes,1,MATCH(H32,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,false]
[null,16,"Privacy Processes / Complaints & Enquiries",null,null,"",null,"",null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_ComplaintsAndEnquiriesOutcomes,1,MATCH(H33,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_ComplaintsAndEnquiriesOutcomes,1,MATCH(H33,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,false]
[null,17,"Risk & Assurance / Risk Identification & Assessment",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B34,Step1_RiskAndAssuranceAssessment,6,FALSE)),\"\",VLOOKUP(B34,Step1_RiskAndAssuranceAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B34,Step1_RiskAndAssuranceAssessment,8,FALSE)),\"\",VLOOKUP(B34,Step1_RiskAndAssuranceAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_RiskIdentificationOutcomes,1,MATCH(H34,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_RiskIdentificationOutcomes,1,MATCH(H34,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B34,Step1_RiskAndAssuranceAssessment,19) = 0),NOT( VLOOKUP(B34,Step1_RiskAndAssuranceAssessment,17) = 0),(VLOOKUP(B34,Step1_RiskAndAssuranceAssessment,19) - VLOOKUP(B34,Step1_RiskAndAssuranceAssessment,17)) > 0)","v":false}]
[null,18,"Risk & Assurance / Reporting & Escalation ",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B35,Step1_RiskAndAssuranceAssessment,6,FALSE)),\"\",VLOOKUP(B35,Step1_RiskAndAssuranceAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B35,Step1_RiskAndAssuranceAssessment,8,FALSE)),\"\",VLOOKUP(B35,Step1_RiskAndAssuranceAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_ReportingAndEscalationOutcomes,1,MATCH(H35,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_ReportingAndEscalationOutcomes,1,MATCH(H35,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B35,Step1_RiskAndAssuranceAssessment,19) = 0),NOT( VLOOKUP(B35,Step1_RiskAndAssuranceAssessment,17) = 0),(VLOOKUP(B35,Step1_RiskAndAssuranceAssessment,19) - VLOOKUP(B35,Step1_RiskAndAssuranceAssessment,17)) > 0)","v":false}]
[null,19,"Risk & Assurance / Assurance Model",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B36,Step1_RiskAndAssuranceAssessment,6,FALSE)),\"\",VLOOKUP(B36,Step1_RiskAndAssuranceAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B36,Step1_RiskAndAssuranceAssessment,8,FALSE)),\"\",VLOOKUP(B36,Step1_RiskAndAssuranceAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_AssuranceModelOutcomes,1,MATCH(H36,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_AssuranceModelOutcomes,1,MATCH(H36,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B36,Step1_RiskAndAssuranceAssessment,19) = 0),NOT( VLOOKUP(B36,Step1_RiskAndAssuranceAssessment,17) = 0),(VLOOKUP(B36,Step1_RiskAndAssuranceAssessment,19) - VLOOKUP(B36,Step1_RiskAndAssuranceAssessment,17)) > 0)","v":false}]
[null,20,"Data Breach Response / Data Breach Response Plan",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B37,Step1_DataBreachResponseAssessment,6,FALSE)),\"\",VLOOKUP(B37,Step1_DataBreachResponseAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B37,Step1_DataBreachResponseAssessment,8,FALSE)),\"\",VLOOKUP(B37,Step1_DataBreachResponseAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_DataBreachResponsePlanOutcomes,1,MATCH(H37,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_DataBreachResponsePlanOutcomes,1,MATCH(H37,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B37,Step1_DataBreachResponseAssessment,19) = 0),NOT( VLOOKUP(B37,Step1_DataBreachResponseAssessment,17) = 0),(VLOOKUP(B37,Step1_DataBreachResponseAssessment,19) - VLOOKUP(B37,Step1_DataBreachResponseAssessment,17)) > 0)","v":false}]
[null,21,"Data Breach Response / Data Breach Notification",null,null,{"$f":"IF(ISBLANK(VLOOKUP(B38,Step1_DataBreachResponseAssessment,6,FALSE)),\"\",VLOOKUP(B38,Step1_DataBreachResponseAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B38,Step1_DataBreachResponseAssessment,8,FALSE)),\"\",VLOOKUP(B38,Step1_DataBreachResponseAssessment,8,FALSE))","v":""},null,{"$f":"IFERROR(IF(ISBLANK(INDEX(H_DataBreachNotificationOutcomes,1,MATCH(H38,H_OutcomeMaturityLevels,0))),\"\",INDEX(H_DataBreachNotificationOutcomes,1,MATCH(H38,H_OutcomeMaturityLevels,0))),\"\")","v":""},null,null,null,null,null,null,null,{"$f":"AND(NOT(VLOOKUP(B38,Step1_DataBreachResponseAssessment,19) = 0),NOT( VLOOKUP(B38,Step1_DataBreachResponseAssessment,17) = 0),(VLOOKUP(B38,Step1_DataBreachResponseAssessment,19) - VLOOKUP(B38,Step1_DataBreachResponseAssessment,17)) > 0)","v":false}]
[null,null,"There are no privacy maturity improvement goals defined in this PMP.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"COUNTIF(R18:R38,TRUE)=0","v":true}]
[]
[null,null,"Detailed improvement actions"]
[null,null,"This table shows the actions that you described above which your agency will take in order to achieve its target maturity levels. You can enter additional details for each action, including roles and responsibilities, due dates, required resources and dependencies as well as other related documents."]
[]
[null,"Ref.","Element / Attribute",null,null,"Action",null,null,null,"Responsible person, position or team",null,null,"Due",null,"Required resources, dependencies and/or related documents (specify or link)",null,null,"Applicable"]
[null,"A32",{"$f":"C18","v":"Governance & Culture / Privacy Champion"},null,null,{"$f":"IF(N18=\"\",\"Type an action in the table above.\",N18)","v":"Type an action in the table above."},null,null,null,null,null,null,null,null,null,null,null,{"$f":"R18","v":false}]
[null,"A33",{"$f":"C19","v":"Governance & Culture / Privacy Values"},null,null,{"$f":"IF(N19=\"\",\"Type an action in the table above.\",N19)","v":"Type an action in the table above."},null,null,null,null,null,null,null,null,null,null,null,{"$f":"R19","v":false}]
[null,"A34",{"$f":"C20","v":"Governance & Culture / Privacy Officer"},null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A35",{"$f":"C21","v":"Governance & Culture / Management & Accountability"},null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A36","Governance & Culture / Awareness",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A37","Privacy Strategy / Privacy Management Plan",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A38","Privacy Strategy / Inventory of Personal Information",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A39","Privacy Strategy / Data Quality Processes",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A40","Privacy Strategy / Information Security Processes",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A41","Privacy Processes / External Privacy Policy & Notices",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A42","Privacy Processes / Internal Policies & Procedures",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A43",{"$f":"C29","v":"Privacy Processes / Privacy Training"},null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A44","Privacy Processes / Privacy Impact Assessments",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A45","Privacy Processes / Dealing with Suppliers",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A46","Privacy Processes / Access & Correction",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A47","Privacy Processes / Complaints & Enquiries",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A48","Risk & Assurance / Risk Identification & Assessment",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A49","Risk & Assurance / Reporting & Escalation ",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A50","Risk & Assurance / Assurance Model",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A51","Data Breach Response / Data Breach Response Plan",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A52","Data Breach Response / Data Breach Notification",null,null,"Type an action in the table above.",null,null,null,null,null,null,null,null,null,null,null,false]
[null,null,"There are no privacy maturity improvement goals defined in this PMP.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,true]
[]
[null,null,"Other improvement actions"]
[null,null,"You can document additional actions in this table, for example if your agency wans to achieve some but not all outcomes for the next maturity level in preparation for future improvements. Any actions in your current PMP which will not be completed by their due date and are still relevant should be documented in this step to ensure that they form part of your next PMP.\n\nYou don't have to fill every row in the table below - empty rows will not be displayed in your agency's Printable PMP."]
[]
[null,"Ref.","Element / Attribute",null,null,"Action",null,null,null,"Responsible person, position or team",null,null,"Due",null,"Required resources, dependencies and/or related documents (specify or link)"]
[null,"A53"]
[null,"A54"]
[null,"A55"]
[null,"A56"]
[null,"A57"]
[null,"A58"]
[null,"A59"]
[null,"A60"]
[null,"A61"]
[null,"A62"]
[null,"A63"]
[null,"A64"]
[null,"A65"]
[null,"A66"]
[null,"A67"]
[null,"A68"]
[null,"A69"]
[null,"A70"]
[null,"A71"]
[]
[]
[null,null,"Bringing your PMP together and prioritising actions"]
[null,null,"You will have now completed all components of your agency's PMP, including compliance actions and maturity improvement actions. You will have identified who is responsible for delivery of each action, interdependencies and due dates. From here, prioritisation is a key part of establishing an achievable PMP. Agencies should take a risk-based approach to prioritising and timing their improvement activities. When building a PMP, agencies should consider which areas carry the most risk and prioritise them accordingly. For example, the obligation under APP 1.2 to take such steps as are reasonable in the circumstances to implement practices, procedures and systems that ensure compliance with the APPs would require high risk areas to be prioritised."]
[]
[null,null,"i",null,"When you have finished entering the details of your agency's improvement actions, you can proceed to Step 3."]

{"sheet":"Step 3","index":6,"n_rows":97,"n_cols":18,"rows_kept":97,"cut":false,"hidden":false,"merged":[[96,4,99,16],[11,4,12,16],[8,4,10,16],[89,8,89,9],[90,8,90,9],[91,8,91,9],[92,8,92,9],[76,8,76,9],[77,8,77,9],[78,8,78,9],[79,8,79,9],[80,8,80,9],[81,8,81,9],[82,8,82,9],[83,8,83,9],[84,8,84,9],[69,8,69,9],[70,8,70,9],[71,8,71,9],[72,8,72,9],[73,8,73,9],[74,8,74,9],[75,8,75,9],[85,8,85,9],[60,8,60,9],[61,8,61,9],[62,8,62,9],[63,8,63,9],[64,8,64,9],[65,8,65,9],[66,8,66,9],[67,8,67,9],[68,8,68,9],[51,8,51,9],[52,8,52,9],[53,8,53,9],[54,8,54,9],[55,8,55,9],[56,8,56,9],[57,8,57,9],[58,8,58,9],[59,8,59,9],[42,8,42,9],[43,8,43,9],[44,8,44,9],[45,8,45,9],[46,8,46,9],[47,8,47,9],[48,8,48,9],[49,8,49,9],[50,8,50,9],[1,2,1,16],[3,2,3,16],[4,2,4,16],[6,2,6,16],[8,2,12,3],[14,2,14,16],[20,2,20,5],[20,6,20,16],[18,6,18,16],[18,2,18,5],[16,2,16,5],[16,6,16,16],[38,10,38,16],[39,2,39,7],[45,2,45,7],[46,2,46,7],[47,2,47,7],[48,2,48,7],[49,2,49,7],[50,2,50,7],[32,8,32,9],[33,8,33,9],[34,8,34,9],[35,8,35,9],[36,8,36,9],[37,8,37,9],[39,10,39,16],[39,8,39,9],[32,10,32,16],[33,10,33,16],[34,10,34,16],[35,10,35,16],[36,10,36,16],[37,10,37,16],[40,8,40,9],[41,8,41,9],[38,2,38,7],[40,2,40,7],[41,2,41,7],[42,2,42,7],[43,2,43,7],[24,8,24,9],[25,8,25,9],[26,8,26,9],[55,2,55,7],[38,8,38,9],[24,2,24,7],[25,2,25,7],[26,2,26,7],[27,2,27,7],[28,2,28,7],[29,2,29,7],[30,2,30,7],[31,2,31,7],[32,2,32,7],[33,2,33,7],[34,2,34,7],[44,2,44,7],[27,8,27,9],[28,8,28,9],[22,10,22,16],[22,8,22,9],[22,2,22,7],[23,2,23,7],[23,8,23,9],[23,10,23,16],[35,2,35,7],[36,2,36,7],[37,2,37,7],[24,10,24,16],[25,10,25,16],[26,10,26,16],[27,10,27,16],[28,10,28,16],[29,10,29,16],[30,10,30,16],[31,10,31,16],[29,8,29,9],[30,8,30,9],[31,8,31,9],[70,2,70,7],[71,2,71,7],[72,2,72,7],[73,2,73,7],[74,2,74,7],[51,2,51,7],[52,2,52,7],[53,2,53,7],[54,2,54,7],[65,2,65,7],[66,2,66,7],[67,2,67,7],[68,2,68,7],[69,2,69,7],[60,2,60,7],[61,2,61,7],[62,2,62,7],[63,2,63,7],[64,2,64,7],[56,2,56,7],[57,2,57,7],[58,2,58,7],[59,2,59,7],[80,2,80,7],[81,2,81,7],[82,2,82,7],[83,2,83,7],[84,2,84,7],[75,2,75,7],[76,2,76,7],[77,2,77,7],[78,2,78,7],[79,2,79,7],[40,10,40,16],[41,10,41,16],[42,10,42,16],[43,10,43,16],[44,10,44,16],[45,10,45,16],[46,10,46,16],[47,10,47,16],[48,10,48,16],[49,10,49,16],[50,10,50,16],[51,10,51,16],[52,10,52,16],[53,10,53,16],[54,10,54,16],[55,10,55,16],[56,10,56,16],[57,10,57,16],[58,10,58,16],[59,10,59,16],[60,10,60,16],[61,10,61,16],[62,10,62,16],[63,10,63,16],[64,10,64,16],[65,10,65,16],[66,10,66,16],[67,10,67,16],[68,10,68,16],[69,10,69,16],[70,10,70,16],[71,10,71,16],[72,10,72,16],[73,10,73,16],[74,10,74,16],[75,10,75,16],[76,10,76,16],[77,10,77,16],[78,10,78,16],[79,10,79,16],[80,10,80,16],[81,10,81,16],[82,10,82,16],[83,10,83,16],[84,10,84,16],[96,2,99,3],[93,2,93,7],[93,8,93,9],[93,10,93,16],[94,2,94,16],[87,8,87,9],[88,8,88,9],[85,10,85,16],[86,10,86,16],[87,10,87,16],[88,10,88,16],[89,10,89,16],[90,10,90,16],[91,10,91,16],[92,10,92,16],[90,2,90,7],[91,2,91,7],[92,2,92,7],[85,2,85,7],[86,2,86,7],[87,2,87,7],[88,2,88,7],[89,2,89,7],[86,8,86,9]]}
[]
[null,null,"Interactive Privacy Management Plan"]
[]
[null,null,{"$f":"IF(OR(ISBLANK(Background_AgencyName)),\"\",Background_AgencyName)","v":""}]
[null,null,{"$f":"IFERROR(IF(ISBLANK(Background_CommencementDate),\"\",CONCATENATE(TEXT(Background_CommencementDate,\"d mmmm yyyy\"),\" to \",TEXT(DATE(YEAR(Background_CommencementDate) + 1,MONTH(Background_CommencementDate),DAY(Background_CommencementDate)-1),\"d mmmm yyyy\"))),\"\")","v":""}]
[]
[null,null,"Step 3: Measure and document your agency's performance"]
[]
[null,null,"i",null,"In Step 3, you should record how your agency has tracked against its current PMP.  You should identify any outstanding actions that remain a priority and carry them across to next year’s PMP."]
[]
[]
[null,null,null,null,{"$f":"IF(ISBLANK(Background_CommencementDate),\"It is recommended that your agency complete this step three months prior to the end of this PMP.\",CONCATENATE(\"It is recommended that your agency complete this step between \",TEXT(DATE(YEAR(Background_CommencementDate),MONTH(Background_CommencementDate)+9,DAY(Background_CommencementDate)-1)+1,\"dddd, d mmmm yyyy\"),\" and \",TEXT(DATE(YEAR(Background_CommencementDate)+1,MONTH(Background_CommencementDate),DAY(Background_CommencementDate))-1,\"dddd, d mmmm yyyy\"),\".\"))","v":"It is recommended that your agency complete this step three months prior to the end of this PMP."}]
[]
[]
[null,null,"It is not expected that you will complete this step when you first create your agency's PMP, because the actions above will be implemented over the coming year. However, we recommend returning to this step when your agency reviews its progress against this PMP, so that you can record which actions have been achieved."]
[]
[null,null,"PMP end date",null,null,null,{"$f":"IFERROR(IF(ISBLANK(Background_CommencementDate),\"The end date for this PMP will be displayed once a commencement date has been provided.\",CONCATENATE(\"Following commencement, this PMP will operate until \",TEXT(DATE(YEAR(Background_CommencementDate) + 1,MONTH(Background_CommencementDate),DAY(Background_CommencementDate)-1),\"dddd, d mmmm yyyy\"),\".\")),\"Please check the format of the commencement date you have provided.\")","v":"The end date for this PMP will be displayed once a commencement date has been provided."}]
[]
[null,null,"Recommended review period",null,null,null,{"$f":"IFERROR(IF(ISBLANK(Background_CommencementDate),\"The recommended review period for this PMP will be displayed once a commencement date has been provided.\",CONCATENATE(TEXT(DATE(YEAR(Background_CommencementDate),MONTH(Background_CommencementDate)+9,DAY(Background_CommencementDate)),\"dddd, d mmmm yyyy\"),\" to \",TEXT(DATE(YEAR(Background_CommencementDate) + 1,MONTH(Background_CommencementDate),DAY(Background_CommencementDate)-1),\"dddd, d mmmm yyyy\"))),\"Please check the format of the commencement date you have provided.\")","v":"The recommended review period for this PMP will be displayed once a commencement date has been provided."}]
[]
[null,null,"PMP review date"]
[]
[null,"Ref.","Action",null,null,null,null,null,"Achieved",null,"Future actions / commentary",null,null,null,null,null,null,"Applicable"]
[null,"A1",{"$f":"IF(VLOOKUP(B24,Step2A_ComplianceActions,17,FALSE),IF(ISBLANK(VLOOKUP(B24,Step2A_ComplianceActions,5,FALSE)),\"\",VLOOKUP(B24,Step2A_ComplianceActions,5,FALSE)),\"\")","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"NOT(C24=\"\")","v":false}]
[null,"A2","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"NOT(C25=\"\")","v":false}]
[null,"A3","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A4","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A5","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A6","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A7","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A8","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A9","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A10","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A11","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A12",{"$f":"IF(ISBLANK(VLOOKUP(B35,Step2B_PrivacyPolicyAndNoticesActions,5,FALSE)),\"\",VLOOKUP(B35,Step2B_PrivacyPolicyAndNoticesActions,5,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A13","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A14","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A15","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A16","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A17","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A18","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A19","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A20","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A21","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A22","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A23","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A24","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A25","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A26","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A27","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A28","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A29","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A30","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A31","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A32",{"$f":"IF(ISBLANK(VLOOKUP(1,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(1,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C55<>\"\",VLOOKUP(1,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A33",{"$f":"IF(ISBLANK(VLOOKUP(2,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(2,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C56<>\"\",VLOOKUP(2,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A34",{"$f":"IF(ISBLANK(VLOOKUP(3,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(3,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C57<>\"\",VLOOKUP(3,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A35",{"$f":"IF(ISBLANK(VLOOKUP(4,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(4,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C58<>\"\",VLOOKUP(4,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A36",{"$f":"IF(ISBLANK(VLOOKUP(5,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(5,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C59<>\"\",VLOOKUP(5,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A37",{"$f":"IF(ISBLANK(VLOOKUP(6,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(6,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C60<>\"\",VLOOKUP(6,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A38",{"$f":"IF(ISBLANK(VLOOKUP(7,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(7,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C61<>\"\",VLOOKUP(7,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A39",{"$f":"IF(ISBLANK(VLOOKUP(8,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(8,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C62<>\"\",VLOOKUP(8,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A40",{"$f":"IF(ISBLANK(VLOOKUP(9,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(9,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C63<>\"\",VLOOKUP(9,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A41",{"$f":"IF(ISBLANK(VLOOKUP(10,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(10,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C64<>\"\",VLOOKUP(10,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A42",{"$f":"IF(ISBLANK(VLOOKUP(11,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(11,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C65<>\"\",VLOOKUP(11,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A43",{"$f":"IF(ISBLANK(VLOOKUP(12,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(12,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C66<>\"\",VLOOKUP(12,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A44",{"$f":"IF(ISBLANK(VLOOKUP(13,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(13,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C67<>\"\",VLOOKUP(13,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A45",{"$f":"IF(ISBLANK(VLOOKUP(14,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(14,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C68<>\"\",VLOOKUP(14,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A46",{"$f":"IF(ISBLANK(VLOOKUP(15,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(15,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C69<>\"\",VLOOKUP(15,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A47",{"$f":"IF(ISBLANK(VLOOKUP(16,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(16,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C70<>\"\",VLOOKUP(16,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A48",{"$f":"IF(ISBLANK(VLOOKUP(17,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(17,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C71<>\"\",VLOOKUP(17,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A49",{"$f":"IF(ISBLANK(VLOOKUP(18,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(18,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C72<>\"\",VLOOKUP(18,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A50",{"$f":"IF(ISBLANK(VLOOKUP(19,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(19,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C73<>\"\",VLOOKUP(19,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A51",{"$f":"IF(ISBLANK(VLOOKUP(20,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(20,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C74<>\"\",VLOOKUP(20,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A52",{"$f":"IF(ISBLANK(VLOOKUP(21,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(21,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"IF(AND(C75<>\"\",VLOOKUP(21,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A53",{"$f":"IF(ISBLANK(VLOOKUP(B76,Step2C_OtherImprovementActions,5,FALSE)),\"\",VLOOKUP(B76,Step2C_OtherImprovementActions,5,FALSE))","v":""},null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A54","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A55","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A56","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A57","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A58","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A59","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A60","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A61","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A62","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A63","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A64","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A65","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A66","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"NOT(C89=\"\")","v":false}]
[null,"A67","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A68","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A69","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A70","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,"A71","",null,null,null,null,null,null,null,null,null,null,null,null,null,null,false]
[null,null,"There are no actions defined in this PMP.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"COUNTIF(R24:R94,TRUE)=0","v":true}]
[]
[null,null,"i",null,"You have reached the end of the interactive components of this PMP. In the following section, you will be provided with a printable summary of the information you have provided. This printable document will serve as your agency's PMP."]

{"sheet":"Printable PMP","index":7,"n_rows":259,"n_cols":20,"rows_kept":259,"cut":false,"hidden":false,"merged":[[134,2,134,16],[172,2,172,4],[172,5,172,8],[172,9,172,11],[172,12,172,13],[172,14,172,16],[169,2,169,4],[169,5,169,8],[169,9,169,11],[169,12,169,13],[169,14,169,16],[167,2,167,4],[167,5,167,8],[167,9,167,11],[167,12,167,13],[167,14,167,16],[168,2,168,4],[168,5,168,8],[168,9,168,11],[168,12,168,13],[168,14,168,16],[165,2,165,4],[165,5,165,8],[165,9,165,11],[179,2,179,16],[180,2,180,16],[184,2,184,16],[174,2,174,4],[174,5,174,8],[174,9,174,11],[174,12,174,13],[174,14,174,16],[175,2,175,4],[175,5,175,8],[175,9,175,11],[175,12,175,13],[175,14,175,16],[176,2,176,4],[176,5,176,8],[176,9,176,11],[176,12,176,13],[176,14,176,16],[173,5,173,8],[173,9,173,11],[173,12,173,13],[173,14,173,16],[170,2,170,4],[170,5,170,8],[170,9,170,11],[170,12,170,13],[170,14,170,16],[171,2,171,4],[171,5,171,8],[171,9,171,11],[171,12,171,13],[171,14,171,16],[173,2,173,4],[165,12,165,13],[165,14,165,16],[166,2,166,4],[166,5,166,8],[166,9,166,11],[166,12,166,13],[166,14,166,16],[163,2,163,4],[163,5,163,8],[163,9,163,11],[163,12,163,13],[163,14,163,16],[164,2,164,4],[164,5,164,8],[164,9,164,11],[164,12,164,13],[164,14,164,16],[161,2,161,4],[161,5,161,8],[161,9,161,11],[161,12,161,13],[161,14,161,16],[162,2,162,4],[162,5,162,8],[162,9,162,11],[162,12,162,13],[162,14,162,16],[159,2,159,4],[159,5,159,8],[159,9,159,11],[159,12,159,13],[159,14,159,16],[160,2,160,4],[160,5,160,8],[160,9,160,11],[160,12,160,13],[160,14,160,16],[157,2,157,4],[157,5,157,8],[157,9,157,11],[157,12,157,13],[157,14,157,16],[158,2,158,4],[158,5,158,8],[158,9,158,11],[158,12,158,13],[158,14,158,16],[155,2,155,4],[155,5,155,8],[155,9,155,11],[155,12,155,13],[155,14,155,16],[156,2,156,4],[156,5,156,8],[156,9,156,11],[156,12,156,13],[156,14,156,16],[153,2,153,4],[153,5,153,8],[153,9,153,11],[153,12,153,13],[153,14,153,16],[154,2,154,4],[154,5,154,8],[154,9,154,11],[154,12,154,13],[154,14,154,16],[151,2,151,4],[151,5,151,8],[151,9,151,11],[151,12,151,13],[151,14,151,16],[152,2,152,4],[152,5,152,8],[152,9,152,11],[152,12,152,13],[152,14,152,16],[149,2,149,4],[149,5,149,8],[149,9,149,11],[149,12,149,13],[149,14,149,16],[150,2,150,4],[150,5,150,8],[150,9,150,11],[150,12,150,13],[150,14,150,16],[147,2,147,4],[147,5,147,8],[147,9,147,11],[147,12,147,13],[147,14,147,16],[148,2,148,4],[148,5,148,8],[148,9,148,11],[148,12,148,13],[148,14,148,16],[145,2,145,4],[145,5,145,8],[145,9,145,11],[145,12,145,13],[145,14,145,16],[146,2,146,4],[146,5,146,8],[146,9,146,11],[146,12,146,13],[146,14,146,16],[143,2,143,4],[143,5,143,8],[143,9,143,11],[143,12,143,13],[143,14,143,16],[144,2,144,4],[144,5,144,8],[144,9,144,11],[144,12,144,13],[144,14,144,16],[141,2,141,4],[141,5,141,8],[141,9,141,11],[141,12,141,13],[141,14,141,16],[142,2,142,4],[142,5,142,8],[142,9,142,11],[142,12,142,13],[142,14,142,16],[139,2,139,4],[139,5,139,8],[139,9,139,11],[139,12,139,13],[139,14,139,16],[140,2,140,4],[140,5,140,8],[140,9,140,11],[140,12,140,13],[140,14,140,16],[137,2,137,4],[137,5,137,8],[137,9,137,11],[137,12,137,13],[137,14,137,16],[138,2,138,4],[138,5,138,8],[138,9,138,11],[138,12,138,13],[138,14,138,16],[186,2,186,7],[186,8,186,9],[186,10,186,16],[187,2,187,7],[187,8,187,9],[187,10,187,16],[1,2,1,16],[3,2,3,16],[4,2,4,16],[6,2,6,16],[8,2,8,16],[14,2,14,16],[9,2,9,16],[16,2,16,5],[18,2,18,5],[20,2,20,5],[22,2,22,5],[94,2,94,16],[136,2,136,4],[31,2,31,16],[136,5,136,8],[136,9,136,11],[136,12,136,13],[136,14,136,16],[190,2,190,7],[190,8,190,9],[190,10,190,16],[191,2,191,7],[191,8,191,9],[191,10,191,16],[188,2,188,7],[188,8,188,9],[188,10,188,16],[189,2,189,7],[189,8,189,9],[189,10,189,16],[194,2,194,7],[194,8,194,9],[194,10,194,16],[195,2,195,7],[195,8,195,9],[195,10,195,16],[192,2,192,7],[192,8,192,9],[192,10,192,16],[193,2,193,7],[193,8,193,9],[193,10,193,16],[198,2,198,7],[198,8,198,9],[198,10,198,16],[199,2,199,7],[199,8,199,9],[199,10,199,16],[196,2,196,7],[196,8,196,9],[196,10,196,16],[197,2,197,7],[197,8,197,9],[197,10,197,16],[202,2,202,7],[202,8,202,9],[202,10,202,16],[203,2,203,7],[203,8,203,9],[203,10,203,16],[200,2,200,7],[200,8,200,9],[200,10,200,16],[201,2,201,7],[201,8,201,9],[201,10,201,16],[210,2,210,7],[211,2,211,7],[212,2,212,7],[213,2,213,7],[214,2,214,7],[215,2,215,7],[204,2,204,7],[205,2,205,7],[206,2,206,7],[207,2,207,7],[208,2,208,7],[209,2,209,7],[222,2,222,7],[223,2,223,7],[224,2,224,7],[225,2,225,7],[226,2,226,7],[227,2,227,7],[216,2,216,7],[217,2,217,7],[218,2,218,7],[219,2,219,7],[220,2,220,7],[221,2,221,7],[234,2,234,7],[235,2,235,7],[236,2,236,7],[237,2,237,7],[238,2,238,7],[239,2,239,7],[228,2,228,7],[229,2,229,7],[230,2,230,7],[231,2,231,7],[232,2,232,7],[233,2,233,7],[257,8,257,9],[257,10,257,16],[93,2,93,16],[107,2,107,16],[133,2,133,16],[182,2,182,16],[252,2,252,7],[253,2,253,7],[254,2,254,7],[255,2,255,7],[256,2,256,7],[257,2,257,7],[246,2,246,7],[247,2,247,7],[248,2,248,7],[249,2,249,7],[250,2,250,7],[251,2,251,7],[240,2,240,7],[241,2,241,7],[242,2,242,7],[243,2,243,7],[244,2,244,7],[245,2,245,7],[33,2,33,16],[39,2,39,5],[39,6,39,7],[39,8,39,9],[39,10,39,16],[40,2,40,5],[40,6,40,7],[40,8,40,9],[40,10,40,16],[36,2,36,16],[37,2,37,5],[37,6,37,7],[37,8,37,9],[37,10,37,16],[38,2,38,5],[38,6,38,7],[38,8,38,9],[38,10,38,16],[41,2,41,5],[41,6,41,7],[41,8,41,9],[41,10,41,16],[42,2,42,5],[42,6,42,7],[42,8,42,9],[42,10,42,16],[43,2,43,9],[43,10,43,16],[45,2,45,16],[46,2,46,5],[46,6,46,7],[46,8,46,9],[46,10,46,16],[47,2,47,5],[47,6,47,7],[47,8,47,9],[47,10,47,16],[48,2,48,5],[48,6,48,7],[48,8,48,9],[48,10,48,16],[49,2,49,5],[49,6,49,7],[49,8,49,9],[49,10,49,16],[50,2,50,5],[50,6,50,7],[50,8,50,9],[50,10,50,16],[51,2,51,9],[51,10,51,16],[53,2,53,16],[54,2,54,5],[54,6,54,7],[54,8,54,9],[54,10,54,16],[55,2,55,5],[55,6,55,7],[55,8,55,9],[55,10,55,16],[56,2,56,5],[56,6,56,7],[56,8,56,9],[56,10,56,16],[57,2,57,5],[57,6,57,7],[57,8,57,9],[57,10,57,16],[58,2,58,5],[58,6,58,7],[58,8,58,9],[58,10,58,16],[59,2,59,5],[59,6,59,7],[59,8,59,9],[59,10,59,16],[60,2,60,5],[60,6,60,7],[60,8,60,9],[60,10,60,16],[61,2,61,5],[61,6,61,7],[61,8,61,9],[61,10,61,16],[64,2,64,16],[65,2,65,5],[65,6,65,7],[65,8,65,9],[65,10,65,16],[72,8,72,9],[72,10,72,16],[66,2,66,5],[66,6,66,7],[66,8,66,9],[66,10,66,16],[67,2,67,5],[67,6,67,7],[67,8,67,9],[67,10,67,16],[68,2,68,5],[68,6,68,7],[68,8,68,9],[68,10,68,16],[83,2,83,4],[102,9,102,11],[102,12,102,13],[98,2,98,4],[98,5,98,8],[98,9,98,11],[98,12,98,13],[98,14,98,16],[99,2,99,4],[99,5,99,8],[99,9,99,11],[99,12,99,13],[83,5,83,16],[84,2,84,4],[85,2,85,4],[86,2,86,4],[84,5,84,16],[85,5,85,16],[86,5,86,16],[101,5,101,8],[101,9,101,11],[101,12,101,13],[96,2,96,4],[96,5,96,8],[96,9,96,11],[96,12,96,13],[96,14,96,16],[97,2,97,4],[97,5,97,8],[97,9,97,11],[97,12,97,13],[97,14,97,16],[89,2,89,16],[91,2,91,16],[99,14,99,16],[100,14,100,16],[101,14,101,16],[102,14,102,16],[108,2,108,16],[103,2,103,4],[103,5,103,8],[103,9,103,11],[103,12,103,13],[103,14,103,16],[104,2,104,4],[104,5,104,8],[104,9,104,11],[104,12,104,13],[104,14,104,16],[100,2,100,4],[100,5,100,8],[100,9,100,11],[100,12,100,13],[101,2,101,4],[102,2,102,4],[102,5,102,8],[105,2,105,16],[110,2,110,4],[110,5,110,8],[110,9,110,11],[110,12,110,13],[110,14,110,16],[111,2,111,4],[111,5,111,8],[111,9,111,11],[111,12,111,13],[111,14,111,16],[112,2,112,4],[112,5,112,8],[112,9,112,11],[112,12,112,13],[112,14,112,16],[113,2,113,4],[113,5,113,8],[113,9,113,11],[113,12,113,13],[113,14,113,16],[114,2,114,4],[114,5,114,8],[114,9,114,11],[114,12,114,13],[114,14,114,16],[115,2,115,4],[115,5,115,8],[115,9,115,11],[115,12,115,13],[115,14,115,16],[116,2,116,4],[116,5,116,8],[116,9,116,11],[116,12,116,13],[116,14,116,16],[117,2,117,4],[117,5,117,8],[117,9,117,11],[117,12,117,13],[117,14,117,16],[118,2,118,4],[118,5,118,8],[118,9,118,11],[118,12,118,13],[118,14,118,16],[119,2,119,4],[119,5,119,8],[119,9,119,11],[119,12,119,13],[119,14,119,16],[120,2,120,4],[120,5,120,8],[120,9,120,11],[120,12,120,13],[120,14,120,16],[121,2,121,4],[121,5,121,8],[121,9,121,11],[121,12,121,13],[121,14,121,16],[122,2,122,4],[122,5,122,8],[122,9,122,11],[122,12,122,13],[122,14,122,16],[123,2,123,4],[123,5,123,8],[123,9,123,11],[123,12,123,13],[123,14,123,16],[124,2,124,4],[124,5,124,8],[124,9,124,11],[124,12,124,13],[124,14,124,16],[125,2,125,4],[125,5,125,8],[125,9,125,11],[125,12,125,13],[125,14,125,16],[126,2,126,4],[126,5,126,8],[126,9,126,11],[126,12,126,13],[126,14,126,16],[127,2,127,4],[127,5,127,8],[127,9,127,11],[127,12,127,13],[127,14,127,16],[130,2,130,4],[130,5,130,8],[130,9,130,11],[130,12,130,13],[130,14,130,16],[128,2,128,4],[128,5,128,8],[128,9,128,11],[128,12,128,13],[128,14,128,16],[129,2,129,4],[129,5,129,8],[129,9,129,11],[129,12,129,13],[129,14,129,16],[80,2,80,16],[81,2,81,16],[34,2,34,16],[74,2,74,5],[74,6,74,7],[74,8,74,9],[74,10,74,16],[75,2,75,9],[75,10,75,16],[77,2,77,9],[77,10,77,16],[78,2,78,9],[78,10,78,16],[69,2,69,9],[69,10,69,16],[71,2,71,16],[72,2,72,5],[72,6,72,7],[73,2,73,5],[73,6,73,7],[73,8,73,9],[73,10,73,16],[62,2,62,9],[62,10,62,16],[204,8,204,9],[205,8,205,9],[206,8,206,9],[207,8,207,9],[208,8,208,9],[209,8,209,9],[210,8,210,9],[211,8,211,9],[212,8,212,9],[213,8,213,9],[214,8,214,9],[215,8,215,9],[216,8,216,9],[217,8,217,9],[218,8,218,9],[219,8,219,9],[220,8,220,9],[221,8,221,9],[222,8,222,9],[223,8,223,9],[224,8,224,9],[225,8,225,9],[226,8,226,9],[227,8,227,9],[228,8,228,9],[229,8,229,9],[230,8,230,9],[231,8,231,9],[232,8,232,9],[233,8,233,9],[234,8,234,9],[235,8,235,9],[236,8,236,9],[237,8,237,9],[238,8,238,9],[239,8,239,9],[240,8,240,9],[241,8,241,9],[242,8,242,9],[243,8,243,9],[244,8,244,9],[245,8,245,9],[246,8,246,9],[247,8,247,9],[248,8,248,9],[249,8,249,9],[250,8,250,9],[251,8,251,9],[252,8,252,9],[253,8,253,9],[254,8,254,9],[255,8,255,9],[256,8,256,9],[204,10,204,16],[205,10,205,16],[206,10,206,16],[207,10,207,16],[208,10,208,16],[209,10,209,16],[210,10,210,16],[211,10,211,16],[212,10,212,16],[213,10,213,16],[214,10,214,16],[215,10,215,16],[216,10,216,16],[217,10,217,16],[218,10,218,16],[219,10,219,16],[231,10,231,16],[232,10,232,16],[233,10,233,16],[234,10,234,16],[235,10,235,16],[236,10,236,16],[237,10,237,16],[220,10,220,16],[221,10,221,16],[222,10,222,16],[223,10,223,16],[224,10,224,16],[225,10,225,16],[226,10,226,16],[227,10,227,16],[228,10,228,16],[26,2,26,16],[11,2,11,16],[12,2,12,16],[27,2,27,16],[29,2,29,5],[29,6,29,16],[24,2,24,5],[24,6,24,16],[16,6,16,16],[18,6,18,16],[20,6,20,16],[22,6,22,16],[131,2,131,16],[177,2,177,16],[258,2,258,16],[256,10,256,16],[247,10,247,16],[248,10,248,16],[249,10,249,16],[250,10,250,16],[251,10,251,16],[252,10,252,16],[253,10,253,16],[254,10,254,16],[255,10,255,16],[238,10,238,16],[239,10,239,16],[240,10,240,16],[241,10,241,16],[242,10,242,16],[243,10,243,16],[244,10,244,16],[245,10,245,16],[246,10,246,16],[229,10,229,16],[230,10,230,16]]}
[]
[null,null,"Privacy Management Plan"]
[]
[null,null,{"$f":"IF(OR(ISBLANK(Background_AgencyName)),\"\",Background_AgencyName)","v":""}]
[null,null,{"$f":"IFERROR(IF(ISBLANK(Background_CommencementDate),\"\",CONCATENATE(TEXT(Background_CommencementDate,\"d mmmm yyyy\"),\" to \",TEXT(DATE(YEAR(Background_CommencementDate) + 1,MONTH(Background_CommencementDate),DAY(Background_CommencementDate)-1),\"d mmmm yyyy\"))),\"\")","v":""}]
[]
[null,null,"Background"]
[]
[null,null,"What is a Privacy Management Plan?"]
[null,null,"A Privacy Management Plan (PMP) is a document that identifies specific, measurable privacy goals and targets and sets out how an agency will meet its compliance obligations under APP 1.2.  An agency must measure and document its performance against its privacy management plan at least annually.\n\nBefore developing a PMP, every agency will need to understand the current state of their privacy practices. Agencies should refer to the OAIC’s Interactive PMP Explained resource for guidance on how to identify compliance gaps and opportunities to improve maturity."]
[]
[null,null,"What are the next steps?"]
[null,null,"This PMP describes the actions that the agency must take in order to meet its privacy compliance obligations and and maturity targets for the year following the PMP's commencement date (specified below). The agency must take steps to achieve these actions and to record how it has done so.\n\nThis PMP should be kept up to date over the course of the year. In the recommended review period (specified below), the agency should return to this PMP and use it to assess how well it  agency has met and delivered its privacy targets. \n\nThe agency should start the review process early enough to develop a strong PMP that can be endorsed by management and put into place by the start of the next year (for example, on 1 July). By completing this process in a timely way, the agency will be best placed to highlight priority activities for the coming year to senior management and seek the resources it will need to undertake them."]
[]
[null,null,"About this PMP"]
[]
[null,null,"Agency name",null,null,null,{"$f":"IF(OR(ISBLANK(Background_AgencyName)),\"\",Background_AgencyName)","v":""}]
[]
[null,null,"PMP commencement date",null,null,null,{"$f":"IF(ISBLANK(Background_CommencementDate),\"A commencement date has not been provided.\",Background_CommencementDate)","v":"A commencement date has not been provided."}]
[]
[null,null,"PMP end date",null,null,null,{"$f":"IFERROR(IF(ISBLANK(Background_CommencementDate),\"The end date for this PMP will be displayed once a commencement date has been provided.\",CONCATENATE(\"Following commencement, this PMP will operate until \",TEXT(DATE(YEAR(Background_CommencementDate) + 1,MONTH(Background_CommencementDate),DAY(Background_CommencementDate)-1),\"dddd, d mmmm yyyy\"),\".\")),\"Please check the format of the commencement date you have provided.\")","v":"The end date for this PMP will be displayed once a commencement date has been provided."}]
[]
[null,null,"Recommended review period",null,null,null,{"$f":"IFERROR(IF(ISBLANK(Background_CommencementDate),\"The recommended review period for this PMP will be displayed once a commencement date has been provided.\",CONCATENATE(TEXT(DATE(YEAR(Background_CommencementDate),MONTH(Background_CommencementDate)+9,DAY(Background_CommencementDate)),\"dddd, d mmmm yyyy\"),\" to \",TEXT(DATE(YEAR(Background_CommencementDate) + 1,MONTH(Background_CommencementDate),DAY(Background_CommencementDate)-1),\"dddd, d mmmm yyyy\"))),\"Please check the format of the commencement date you have provided.\")","v":"The recommended review period for this PMP will be displayed once a commencement date has been provided."}]
[]
[null,null,"PMP review date",null,null,null,{"$f":"IF(ISBLANK(Step3_ReviewDate),\"A review date has not been provided.\",Step3_ReviewDate)","v":"A review date has not been provided."}]
[]
[null,null,"Privacy risk profile"]
[null,null,"In the course of preparing this PMP, the agency has considered various matters relevant to its privacy risk profile. The details of these considerations are provided below for reference."]
[]
[null,null,"Privacy risk profile rationale",null,null,null,{"$f":"IF(ISBLANK(Background_RiskProfileRationale),\"Details on the agency's privacy risk profile have not been provided.\",Background_RiskProfileRationale)","v":"Details on the agency's privacy risk profile have not been provided."}]
[]
[null,null,"Current state"]
[]
[null,null,"Privacy maturity assessment outcomes"]
[null,null,"This PMP has been prepared using an assessment of the agency's privacy maturity, the results of which are recorded in the table below. An asterisk (*) next to an attribute name means that it it a 'compliance attribute' and that your agency must have a minimum maturity level of 'Developing' to comply with the Privacy Act or the Code."]
[]
[null,null,"Governance & Culture"]
[null,"Ref.","Attribute",null,null,null,"Current Level",null,"Target Level",null,"Rationale/Commentary",null,null,null,null,null,null,"Score","Min. Score","Target"]
[null,1,{"$f":"CONCATENATE(VLOOKUP(B39,C_Attributes,2,FALSE),IF(VLOOKUP(B39,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Privacy Champion*"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B39,Step1_GovernanceAndCultureAssessment,6,FALSE)),\"\",VLOOKUP(B39,Step1_GovernanceAndCultureAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B39,Step1_GovernanceAndCultureAssessment,8,FALSE)),\"\",VLOOKUP(B39,Step1_GovernanceAndCultureAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B39,Step1_GovernanceAndCultureAssessment,10,FALSE)),\"\",VLOOKUP(B39,Step1_GovernanceAndCultureAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G39,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B39,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I39,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,2,{"$f":"CONCATENATE(VLOOKUP(B40,C_Attributes,2,FALSE),IF(VLOOKUP(B40,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Privacy Values"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B40,Step1_GovernanceAndCultureAssessment,6,FALSE)),\"\",VLOOKUP(B40,Step1_GovernanceAndCultureAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B40,Step1_GovernanceAndCultureAssessment,8,FALSE)),\"\",VLOOKUP(B40,Step1_GovernanceAndCultureAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B40,Step1_GovernanceAndCultureAssessment,10,FALSE)),\"\",VLOOKUP(B40,Step1_GovernanceAndCultureAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G40,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B40,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I40,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,3,{"$f":"CONCATENATE(VLOOKUP(B41,C_Attributes,2,FALSE),IF(VLOOKUP(B41,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Privacy Officer*"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B41,Step1_GovernanceAndCultureAssessment,6,FALSE)),\"\",VLOOKUP(B41,Step1_GovernanceAndCultureAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B41,Step1_GovernanceAndCultureAssessment,8,FALSE)),\"\",VLOOKUP(B41,Step1_GovernanceAndCultureAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B41,Step1_GovernanceAndCultureAssessment,10,FALSE)),\"\",VLOOKUP(B41,Step1_GovernanceAndCultureAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G41,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B41,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I41,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,4,{"$f":"CONCATENATE(VLOOKUP(B42,C_Attributes,2,FALSE),IF(VLOOKUP(B42,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Management & Accountability"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B42,Step1_GovernanceAndCultureAssessment,6,FALSE)),\"\",VLOOKUP(B42,Step1_GovernanceAndCultureAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B42,Step1_GovernanceAndCultureAssessment,8,FALSE)),\"\",VLOOKUP(B42,Step1_GovernanceAndCultureAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B42,Step1_GovernanceAndCultureAssessment,10,FALSE)),\"\",VLOOKUP(B42,Step1_GovernanceAndCultureAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G42,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B42,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I42,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,5,{"$f":"CONCATENATE(VLOOKUP(B43,C_Attributes,2,FALSE),IF(VLOOKUP(B43,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Awareness"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B43,Step1_GovernanceAndCultureAssessment,6,FALSE)),\"\",VLOOKUP(B43,Step1_GovernanceAndCultureAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B43,Step1_GovernanceAndCultureAssessment,8,FALSE)),\"\",VLOOKUP(B43,Step1_GovernanceAndCultureAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B43,Step1_GovernanceAndCultureAssessment,10,FALSE)),\"\",VLOOKUP(B43,Step1_GovernanceAndCultureAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G43,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B43,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I43,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,null,"Element score (average of attribute scores)",null,null,null,null,null,null,null,{"$f":"'Step 1'!K26:Q26","v":""},null,null,null,null,null,null,{"$f":"ROUNDDOWN(AVERAGE(R39:R43),1)","v":0},{"$f":"ROUNDDOWN(R44,0)","v":0},{"$f":"IFERROR(INDEX(C_MaturityLevels,S44,1),\"\")","v":""}]
[]
[null,null,"Privacy Strategy"]
[null,"Ref.","Attribute",null,null,null,"Current Level",null,"Target Level",null,"Rationale/Commentary",null,null,null,null,null,null,"Score","Min. Score","Target"]
[null,6,{"$f":"CONCATENATE(VLOOKUP(B48,C_Attributes,2,FALSE),IF(VLOOKUP(B48,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Privacy Management Plan*"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B48,Step1_PrivacyStrategyAssessment,6,FALSE)),\"\",VLOOKUP(B48,Step1_PrivacyStrategyAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B48,Step1_PrivacyStrategyAssessment,8,FALSE)),\"\",VLOOKUP(B48,Step1_PrivacyStrategyAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B48,Step1_PrivacyStrategyAssessment,10,FALSE)),\"\",VLOOKUP(B48,Step1_PrivacyStrategyAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G48,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B48,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I48,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,7,{"$f":"CONCATENATE(VLOOKUP(B49,C_Attributes,2,FALSE),IF(VLOOKUP(B49,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Inventory of Personal Information*"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B49,Step1_PrivacyStrategyAssessment,6,FALSE)),\"\",VLOOKUP(B49,Step1_PrivacyStrategyAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B49,Step1_PrivacyStrategyAssessment,8,FALSE)),\"\",VLOOKUP(B49,Step1_PrivacyStrategyAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B49,Step1_PrivacyStrategyAssessment,10,FALSE)),\"\",VLOOKUP(B49,Step1_PrivacyStrategyAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G49,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B49,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I49,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,8,{"$f":"CONCATENATE(VLOOKUP(B50,C_Attributes,2,FALSE),IF(VLOOKUP(B50,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Data Quality Processes*"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B50,Step1_PrivacyStrategyAssessment,6,FALSE)),\"\",VLOOKUP(B50,Step1_PrivacyStrategyAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B50,Step1_PrivacyStrategyAssessment,8,FALSE)),\"\",VLOOKUP(B50,Step1_PrivacyStrategyAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B50,Step1_PrivacyStrategyAssessment,10,FALSE)),\"\",VLOOKUP(B50,Step1_PrivacyStrategyAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G50,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B50,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I50,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,9,{"$f":"CONCATENATE(VLOOKUP(B51,C_Attributes,2,FALSE),IF(VLOOKUP(B51,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Information Security Processes"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B51,Step1_PrivacyStrategyAssessment,6,FALSE)),\"\",VLOOKUP(B51,Step1_PrivacyStrategyAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B51,Step1_PrivacyStrategyAssessment,8,FALSE)),\"\",VLOOKUP(B51,Step1_PrivacyStrategyAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B51,Step1_PrivacyStrategyAssessment,10,FALSE)),\"\",VLOOKUP(B51,Step1_PrivacyStrategyAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G51,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B51,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I51,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,null,"Element score (average of attribute scores)",null,null,null,null,null,null,null,{"$f":"'Step 1'!K34:Q34","v":""},null,null,null,null,null,null,{"$f":"ROUNDDOWN(AVERAGE(R49:R51),1)","v":0},{"$f":"ROUNDDOWN(R52,0)","v":0},{"$f":"IFERROR(INDEX(C_MaturityLevels,S52,1),\"\")","v":""}]
[]
[null,null,"Privacy Processes"]
[null,"Ref.","Attribute",null,null,null,"Current Level",null,"Target Level",null,"Rationale/Commentary",null,null,null,null,null,null,"Score","Min. Score","Target"]
[null,10,{"$f":"CONCATENATE(VLOOKUP(B56,C_Attributes,2,FALSE),IF(VLOOKUP(B56,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"External Privacy Policy & Notices*"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B56,Step1_PrivacyProcessesAssessment,6,FALSE)),\"\",VLOOKUP(B56,Step1_PrivacyProcessesAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B56,Step1_PrivacyProcessesAssessment,8,FALSE)),\"\",VLOOKUP(B56,Step1_PrivacyProcessesAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B56,Step1_PrivacyProcessesAssessment,10,FALSE)),\"\",VLOOKUP(B56,Step1_PrivacyProcessesAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G56,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B56,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I56,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,11,"Internal Policies & Procedures",null,null,null,"",null,"",null,"",null,null,null,null,null,null,0,1,0]
[null,12,"Privacy Training*",null,null,null,"",null,"",null,"",null,null,null,null,null,null,0,2,0]
[null,13,"Privacy Impact Assessments*",null,null,null,"",null,"",null,"",null,null,null,null,null,null,0,2,0]
[null,14,"Dealing with Suppliers",null,null,null,"",null,"",null,"",null,null,null,null,null,null,0,1,0]
[null,15,"Access & Correction*",null,null,null,"",null,"",null,"",null,null,null,null,null,null,0,2,0]
[null,16,"Complaints & Enquiries",null,null,null,"",null,"",null,"",null,null,null,null,null,null,0,1,0]
[null,null,"Element score (average of attribute scores)",null,null,null,null,null,null,null,{"$f":"'Step 1'!K45:Q45","v":""},null,null,null,null,null,null,{"$f":"ROUNDDOWN(AVERAGE(R56:R62),1)","v":0},{"$f":"ROUNDDOWN(R63,0)","v":0},{"$f":"IFERROR(INDEX(C_MaturityLevels,S63,1),\"\")","v":""}]
[]
[null,null,"Risk & Assurance"]
[null,"Ref.","Attribute",null,null,null,"Current Level",null,"Target Level",null,"Rationale/Commentary",null,null,null,null,null,null,"Score","Min. Score","Target"]
[null,17,{"$f":"CONCATENATE(VLOOKUP(B67,C_Attributes,2,FALSE),IF(VLOOKUP(B67,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Risk Identification & Assessment"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B67,Step1_RiskAndAssuranceAssessment,6,FALSE)),\"\",VLOOKUP(B67,Step1_RiskAndAssuranceAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B67,Step1_RiskAndAssuranceAssessment,8,FALSE)),\"\",VLOOKUP(B67,Step1_RiskAndAssuranceAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B67,Step1_RiskAndAssuranceAssessment,10,FALSE)),\"\",VLOOKUP(B67,Step1_RiskAndAssuranceAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G67,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B67,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I67,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,18,{"$f":"CONCATENATE(VLOOKUP(B68,C_Attributes,2,FALSE),IF(VLOOKUP(B68,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Reporting & Escalation "},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B68,Step1_RiskAndAssuranceAssessment,6,FALSE)),\"\",VLOOKUP(B68,Step1_RiskAndAssuranceAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B68,Step1_RiskAndAssuranceAssessment,8,FALSE)),\"\",VLOOKUP(B68,Step1_RiskAndAssuranceAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B68,Step1_RiskAndAssuranceAssessment,10,FALSE)),\"\",VLOOKUP(B68,Step1_RiskAndAssuranceAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G68,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B68,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I68,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,19,{"$f":"CONCATENATE(VLOOKUP(B69,C_Attributes,2,FALSE),IF(VLOOKUP(B69,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Assurance Model"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B69,Step1_RiskAndAssuranceAssessment,6,FALSE)),\"\",VLOOKUP(B69,Step1_RiskAndAssuranceAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B69,Step1_RiskAndAssuranceAssessment,8,FALSE)),\"\",VLOOKUP(B69,Step1_RiskAndAssuranceAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B69,Step1_RiskAndAssuranceAssessment,10,FALSE)),\"\",VLOOKUP(B69,Step1_RiskAndAssuranceAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G69,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B69,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I69,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,null,"Element score (average of attribute scores)",null,null,null,null,null,null,null,{"$f":"'Step 1'!K52:Q52","v":""},null,null,null,null,null,null,{"$f":"ROUNDDOWN(AVERAGE(R67:R69),1)","v":0},{"$f":"ROUNDDOWN(R70,0)","v":0},{"$f":"IFERROR(INDEX(C_MaturityLevels,S70,1),\"\")","v":""}]
[]
[null,null,"Data Breach Response"]
[null,"Ref.","Attribute",null,null,null,"Current Level",null,"Target Level",null,"Rationale/Commentary",null,null,null,null,null,null,"Score","Min. Score","Target"]
[null,20,{"$f":"CONCATENATE(VLOOKUP(B74,C_Attributes,2,FALSE),IF(VLOOKUP(B74,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Data Breach Response Plan"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B74,Step1_DataBreachResponseAssessment,6,FALSE)),\"\",VLOOKUP(B74,Step1_DataBreachResponseAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B74,Step1_DataBreachResponseAssessment,8,FALSE)),\"\",VLOOKUP(B74,Step1_DataBreachResponseAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B74,Step1_DataBreachResponseAssessment,10,FALSE)),\"\",VLOOKUP(B74,Step1_DataBreachResponseAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G74,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B74,C_Attributes,9,FALSE)","v":1},{"$f":"IFERROR(VLOOKUP(I74,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,21,{"$f":"CONCATENATE(VLOOKUP(B75,C_Attributes,2,FALSE),IF(VLOOKUP(B75,C_Attributes,9,FALSE) > 1,\"*\",\"\"))","v":"Data Breach Notification*"},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B75,Step1_DataBreachResponseAssessment,6,FALSE)),\"\",VLOOKUP(B75,Step1_DataBreachResponseAssessment,6,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B75,Step1_DataBreachResponseAssessment,8,FALSE)),\"\",VLOOKUP(B75,Step1_DataBreachResponseAssessment,8,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B75,Step1_DataBreachResponseAssessment,10,FALSE)),\"\",VLOOKUP(B75,Step1_DataBreachResponseAssessment,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"IFERROR(VLOOKUP(G75,C_MaturityLevels,3,FALSE),0)","v":0},{"$f":"VLOOKUP(B75,C_Attributes,9,FALSE)","v":2},{"$f":"IFERROR(VLOOKUP(I75,C_MaturityLevels,3,FALSE),0)","v":0}]
[null,null,"Element score (average of attribute scores)",null,null,null,null,null,null,null,{"$f":"'Step 1'!K58:Q58","v":""},null,null,null,null,null,null,{"$f":"ROUNDDOWN(AVERAGE(R74:R75),1)","v":0},{"$f":"ROUNDDOWN(R76,0)","v":0},{"$f":"IFERROR(INDEX(C_MaturityLevels,S76,1),\"\")","v":""}]
[]
[null,null,"Average of element scores",null,null,null,null,null,null,null,{"$f":"'Step 1'!K60:Q60","v":""}]
[null,null,"Overall privacy maturity level",null,null,null,null,null,null,null,{"$f":"'Step 1'!K61:Q61","v":""}]
[]
[null,null,"Adequacy of privacy policy and notices"]
[null,null,"Section 17 of the Code requires an agency to regularly assess the adequacy of its privacy practices, procedures and systems (including its privacy policy and collection notices) to ensure their adequacy for the purpose of compliance with the APPs and currency. Generally, completion of a PMP facilitates compliance with this requirement.\n\nThe outcomes of the agency's review of its privacy policy and collection notices are recorded below."]
[]
[null,null,"Privacy Policy (APP 1) Compliance Gaps",null,null,{"$f":"IF(ISBLANK('Step 1'!F67),\"No gaps provided in Step 1\",'Step 1'!F67)","v":"No gaps provided in Step 1"}]
[null,null,"Privacy Policy (APP 1) Currency Gaps",null,null,{"$f":"IF(ISBLANK('Step 1'!L67),\"No gaps provided in Step 1\",'Step 1'!L67)","v":"No gaps provided in Step 1"}]
[null,null,"Privacy Notices (APP 5) Compliance Gaps",null,null,{"$f":"IF(ISBLANK('Step 1'!F68),\"No gaps provided in Step 1\",'Step 1'!F68)","v":"No gaps provided in Step 1"}]
[null,null,"Privacy Notices (APP 5) Currency Gaps",null,null,{"$f":"IF(ISBLANK('Step 1'!L68),\"No gaps provided in Step 1\",'Step 1'!L68)","v":"No gaps provided in Step 1"}]
[]
[]
[null,null,"Goals for improvement"]
[]
[null,null,"The privacy goals and targets in this section are based on the agency's privacy maturity assessment outcomes. This section includes mandatory actions which the agency must take in order to meet its compliance obligations under APP 1.2 (Code, s 9(2)(b)).  "]
[]
[null,null,"Compliance Actions"]
[null,null,"Where the agency has identified in its privacy maturity assessment that it is at the 'Initial' level in relation to a compliance attribute, this indicates that there is a compliance gap because the agency must have a minimum maturity level of 'Developing' for that attribute in order to comply with the Privacy Act or the Code. All compliance gaps must form part of this PMP and may require prompt remediation. Remediation actions are set out below. "]
[]
[null,"Ref.","Attribute",null,null,"Remediation action",null,null,null,"Responsible person, position or team",null,null,"Due",null,"Required resources, dependencies and/or related documents (specify or link)",null,null,"Applicable"]
[null,"A1","Privacy Champion",null,null,{"$f":"IF(VLOOKUP(B98,Step2A_ComplianceActions,17,FALSE),IF(ISBLANK(VLOOKUP(B98,Step2A_ComplianceActions,5,FALSE)),\"\",VLOOKUP(B98,Step2A_ComplianceActions,5,FALSE)),\"\")","v":""},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP($B98,Step2A_ComplianceActions,9,FALSE)),\"\",VLOOKUP($B98,Step2A_ComplianceActions,9,FALSE))","v":""},null,null,{"$f":"IF(ISBLANK(VLOOKUP($B98,Step2A_ComplianceActions,12,FALSE)),\"\",VLOOKUP($B98,Step2A_ComplianceActions,12,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP($B98,Step2A_ComplianceActions,14,FALSE)),\"\",VLOOKUP($B98,Step2A_ComplianceActions,14,FALSE))","v":""},null,null,{"$f":"NOT(F98=\"\")","v":false}]
[null,"A2","Privacy Officer",null,null,"",null,null,null,"",null,null,"",null,"",null,null,{"$f":"NOT(F99=\"\")","v":false}]
[null,"A6","APP 1 Privacy Policy",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A7","APP 5 Privacy Notice",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A8","Privacy Training",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A9","Privacy Impact Assessments",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A10","Access and Correction",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A11","Data Breach Notification",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,null,"There are no compliance actions defined in this PMP.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"COUNTIF(R98:R105,TRUE)=0","v":true}]
[]
[null,null,"Privacy Policy & Notices Actions"]
[null,null,"Remediation actions related to any gaps in the adequacy of the agency's Privacy Policy (APP 1) or Privacy Notices (APP 5) are captured below."]
[]
[null,"Ref.","Attribute",null,null,"Remediation actions",null,null,null,"Responsible person, position or team",null,null,"Due",null,"Required resources, dependencies and/or related documents (specify or link)",null,null,"Applicable"]
[null,"A12",{"$f":"IF(ISBLANK(VLOOKUP(B112,Step2B_PrivacyPolicyAndNoticesActions,2,FALSE)),\"\",VLOOKUP(B112,Step2B_PrivacyPolicyAndNoticesActions,2,FALSE))","v":""},null,null,{"$f":"IF(ISBLANK(VLOOKUP(B112,Step2B_PrivacyPolicyAndNoticesActions,5,FALSE)),\"\",VLOOKUP(B112,Step2B_PrivacyPolicyAndNoticesActions,5,FALSE))","v":""},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B112,Step2B_PrivacyPolicyAndNoticesActions,9,FALSE)),\"\",VLOOKUP(B112,Step2B_PrivacyPolicyAndNoticesActions,9,FALSE))","v":""},null,null,{"$f":"IF(ISBLANK(VLOOKUP(B112,Step2B_PrivacyPolicyAndNoticesActions,12,FALSE)),\"\",VLOOKUP(B112,Step2B_PrivacyPolicyAndNoticesActions,12,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B112,Step2B_PrivacyPolicyAndNoticesActions,14,FALSE)),\"\",VLOOKUP(B112,Step2B_PrivacyPolicyAndNoticesActions,14,FALSE))","v":""},null,null,{"$f":"NOT(F112=\"\")","v":false}]
[null,"A13","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,{"$f":"NOT(F113=\"\")","v":false}]
[null,"A14","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A15","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A16","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A17","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A18","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A19","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A20","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A21","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A22","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A23","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A24","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A25","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A26","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A27","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A28","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A29","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A30","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A31","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,null,"There are no privacy policy & notices actions defined in this PMP.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"COUNTIF(R112:R131,TRUE)=0","v":true}]
[]
[null,null,"Maturity Improvement Actions"]
[null,null,"The table below sets out actions which the agency plants to achieve in order to improve its privacy maturity. Any uncompleted actions from previous PMPs which are still relevant should also be documented in this section to ensure that they form part of the agency's next PMP."]
[]
[null,"Ref.","Element / Attribute",null,null,"Action",null,null,null,"Responsible person, position or team",null,null,"Due",null,"Required resources, dependencies and/or related documents (specify or link)",null,null,"Applicable"]
[null,"A32",{"$f":"IF(ISBLANK(VLOOKUP(B138,Step2C_DetailedImprovementActions,2,FALSE)),\"\",VLOOKUP(B138,Step2C_DetailedImprovementActions,2,FALSE))","v":"Governance & Culture / Privacy Champion"},null,null,{"$f":"IF(ISBLANK(VLOOKUP(1,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(1,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B138,Step2C_DetailedImprovementActions,9,FALSE)),\"\",VLOOKUP(B138,Step2C_DetailedImprovementActions,9,FALSE))","v":""},null,null,{"$f":"IF(ISBLANK(VLOOKUP(B138,Step2C_DetailedImprovementActions,12,FALSE)),\"\",VLOOKUP(B138,Step2C_DetailedImprovementActions,12,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B138,Step2C_DetailedImprovementActions,14,FALSE)),\"\",VLOOKUP(B138,Step2C_DetailedImprovementActions,14,FALSE))","v":""},null,null,{"$f":"IF(AND(F138<>\"\",VLOOKUP(1,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A33","Governance & Culture / Privacy Values",null,null,{"$f":"IF(ISBLANK(VLOOKUP(2,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(2,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F139<>\"\",VLOOKUP(2,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A34","Governance & Culture / Privacy Officer",null,null,{"$f":"IF(ISBLANK(VLOOKUP(3,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(3,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F140<>\"\",VLOOKUP(3,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A35","Governance & Culture / Management & Accountability",null,null,{"$f":"IF(ISBLANK(VLOOKUP(4,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(4,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F141<>\"\",VLOOKUP(4,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A36","Governance & Culture / Awareness",null,null,{"$f":"IF(ISBLANK(VLOOKUP(5,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(5,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F142<>\"\",VLOOKUP(5,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A37","Privacy Strategy / Privacy Management Plan",null,null,{"$f":"IF(ISBLANK(VLOOKUP(6,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(6,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F143<>\"\",VLOOKUP(6,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A38","Privacy Strategy / Inventory of Personal Information",null,null,{"$f":"IF(ISBLANK(VLOOKUP(7,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(7,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F144<>\"\",VLOOKUP(7,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A39","Privacy Strategy / Data Quality Processes",null,null,{"$f":"IF(ISBLANK(VLOOKUP(8,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(8,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F145<>\"\",VLOOKUP(8,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A40","Privacy Strategy / Information Security Processes",null,null,{"$f":"IF(ISBLANK(VLOOKUP(9,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(9,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F146<>\"\",VLOOKUP(9,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A41","Privacy Processes / External Privacy Policy & Notices",null,null,{"$f":"IF(ISBLANK(VLOOKUP(10,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(10,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F147<>\"\",VLOOKUP(10,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A42","Privacy Processes / Internal Policies & Procedures",null,null,{"$f":"IF(ISBLANK(VLOOKUP(11,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(11,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F148<>\"\",VLOOKUP(11,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A43","Privacy Processes / Privacy Training",null,null,{"$f":"IF(ISBLANK(VLOOKUP(12,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(12,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F149<>\"\",VLOOKUP(12,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A44","Privacy Processes / Privacy Impact Assessments",null,null,{"$f":"IF(ISBLANK(VLOOKUP(13,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(13,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F150<>\"\",VLOOKUP(13,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A45","Privacy Processes / Dealing with Suppliers",null,null,{"$f":"IF(ISBLANK(VLOOKUP(14,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(14,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F151<>\"\",VLOOKUP(14,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A46","Privacy Processes / Access & Correction",null,null,{"$f":"IF(ISBLANK(VLOOKUP(15,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(15,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F152<>\"\",VLOOKUP(15,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A47","Privacy Processes / Complaints & Enquiries",null,null,{"$f":"IF(ISBLANK(VLOOKUP(16,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(16,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F153<>\"\",VLOOKUP(16,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A48","Risk & Assurance / Risk Identification & Assessment",null,null,{"$f":"IF(ISBLANK(VLOOKUP(17,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(17,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F154<>\"\",VLOOKUP(17,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A49","Risk & Assurance / Reporting & Escalation ",null,null,{"$f":"IF(ISBLANK(VLOOKUP(18,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(18,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F155<>\"\",VLOOKUP(18,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A50","Risk & Assurance / Assurance Model",null,null,{"$f":"IF(ISBLANK(VLOOKUP(19,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(19,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F156<>\"\",VLOOKUP(19,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A51","Data Breach Response / Data Breach Response Plan",null,null,{"$f":"IF(ISBLANK(VLOOKUP(20,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(20,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F157<>\"\",VLOOKUP(20,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A52","Data Breach Response / Data Breach Notification",null,null,{"$f":"IF(ISBLANK(VLOOKUP(21,Step2C_SuggestedOutcomes,13,FALSE)),\"\",VLOOKUP(21,Step2C_SuggestedOutcomes,13,FALSE))","v":""},null,null,null,"",null,null,"",null,"",null,null,{"$f":"IF(AND(F158<>\"\",VLOOKUP(21,Step2C_SuggestedOutcomes,17,FALSE)),TRUE,FALSE)","v":false}]
[null,"A53",{"$f":"IF(ISBLANK(VLOOKUP(B159,Step2C_OtherImprovementActions,2,FALSE)),\"\",VLOOKUP(B159,Step2C_OtherImprovementActions,2,FALSE))","v":""},null,null,{"$f":"IF(ISBLANK(VLOOKUP(B159,Step2C_OtherImprovementActions,5,FALSE)),\"\",VLOOKUP(B159,Step2C_OtherImprovementActions,5,FALSE))","v":""},null,null,null,{"$f":"IF(ISBLANK(VLOOKUP(B159,Step2C_OtherImprovementActions,9,FALSE)),\"\",VLOOKUP(B159,Step2C_OtherImprovementActions,9,FALSE))","v":""},null,null,{"$f":"IF(ISBLANK(VLOOKUP(B159,Step2C_OtherImprovementActions,12,FALSE)),\"\",VLOOKUP(B159,Step2C_OtherImprovementActions,12,FALSE))","v":""},null,{"$f":"IF(ISBLANK(VLOOKUP(B159,Step2C_OtherImprovementActions,14,FALSE)),\"\",VLOOKUP(B159,Step2C_OtherImprovementActions,14,FALSE))","v":""},null,null,{"$f":"NOT(F159=\"\")","v":false}]
[null,"A54",{"$f":"IF(ISBLANK(VLOOKUP(B160,Step2C_OtherImprovementActions,2,FALSE)),\"\",VLOOKUP(B160,Step2C_OtherImprovementActions,2,FALSE))","v":""},null,null,{"$f":"IF(ISBLANK(VLOOKUP(B160,Step2C_OtherImprovementActions,5,FALSE)),\"\",VLOOKUP(B160,Step2C_OtherImprovementActions,5,FALSE))","v":""},null,null,null,"",null,null,"",null,{"$f":"IF(ISBLANK(VLOOKUP(B160,Step2C_OtherImprovementActions,14,FALSE)),\"\",VLOOKUP(B160,Step2C_OtherImprovementActions,14,FALSE))","v":""},null,null,false]
[null,"A55","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A56","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A57","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A58","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A59","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A60","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A61","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A62","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A63","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A64","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A65","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A66","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A67","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A68","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A69","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A70","",null,null,"",null,null,null,"",null,null,"",null,"",null,null,false]
[null,"A71","",null,null,"",null,null,null,"",null,null,null,null,"",null,null,false]
[null,null,"There are no privacy maturity improvement actions defined in this PMP.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"COUNTIF(R138:R177,TRUE)=0","v":true}]
[]
[null,null,"Bringing the PMP together and prioritising actions"]
[null,null,"This section of the PMP identified all compliance actions and actions for improvement, as well as who is responsible for delivery of each action, interdependencies and due dates. From here, prioritisation is a key part of establishing an achievable PMP. Agencies should take a risk-based approach to prioritising and timing their improvement activities."]
[]
[null,null,"Measure performance"]
[]
[null,null,"It is expected that the agency will review this PMP during the time in which it is active in order to document progress against the actions described above.\n\nThe table below provides a central location to track progress."]
[]
[null,"Ref.","Action",null,null,null,null,null,"Achieved",null,"Future actions / commentary",null,null,null,null,null,null,"Applicable"]
[null,"A1",{"$f":"IF(VLOOKUP(B188,Step3_AllActions,2,FALSE)=\"\",\"\",VLOOKUP(B188,Step3_AllActions,2,FALSE))","v":""},null,null,null,null,null,{"$f":"IF(VLOOKUP(B188,Step3_AllActions,8,FALSE)=\"\",\"\",VLOOKUP(B188,Step3_AllActions,8,FALSE))","v":""},null,{"$f":"IF(VLOOKUP(B188,Step3_AllActions,10,FALSE)=\"\",\"\",VLOOKUP(B188,Step3_AllActions,10,FALSE))","v":""},null,null,null,null,null,null,{"$f":"NOT(C188=\"\")","v":false}]
[null,"A2","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,{"$f":"NOT(C189=\"\")","v":false}]
[null,"A3","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A4","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A5","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A6","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A7","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A8","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A9","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A10","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A11","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A12","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A13","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A14","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A15","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A16","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A17","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A18","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A19","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A20","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A21","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A22","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A23","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A24","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A25","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A26","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A27","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A28","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A29","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A30","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A31","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A32","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A33",{"$f":"IF(VLOOKUP(B220,Step3_AllActions,2,FALSE)=\"\",\"\",VLOOKUP(B220,Step3_AllActions,2,FALSE))","v":""},null,null,null,null,null,{"$f":"IF(VLOOKUP(B220,Step3_AllActions,8,FALSE)=\"\",\"\",VLOOKUP(B220,Step3_AllActions,8,FALSE))","v":""},null,{"$f":"IF(VLOOKUP(B220,Step3_AllActions,10,FALSE)=\"\",\"\",VLOOKUP(B220,Step3_AllActions,10,FALSE))","v":""},null,null,null,null,null,null,false]
[null,"A34","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A35","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A36","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A37","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A38","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A39","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A40","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A41","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A42","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A43","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A44","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A45","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A46","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A47","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A48","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A49","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A50","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A51","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A52","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A53","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A54","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A55","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A56","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A57","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A58","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A59","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A60","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A61","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A62","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A63","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A64","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A65",{"$f":"IF(VLOOKUP(B252,Step3_AllActions,2,FALSE)=\"\",\"\",VLOOKUP(B252,Step3_AllActions,2,FALSE))","v":""},null,null,null,null,null,{"$f":"IF(VLOOKUP(B252,Step3_AllActions,8,FALSE)=\"\",\"\",VLOOKUP(B252,Step3_AllActions,8,FALSE))","v":""},null,{"$f":"IF(VLOOKUP(B252,Step3_AllActions,10,FALSE)=\"\",\"\",VLOOKUP(B252,Step3_AllActions,10,FALSE))","v":""},null,null,null,null,null,null,false]
[null,"A66","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,{"$f":"NOT(C253=\"\")","v":false}]
[null,"A67","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A68","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A69","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A70","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,"A71","",null,null,null,null,null,"",null,"",null,null,null,null,null,null,false]
[null,null,"There are no actions defined in this PMP.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,{"$f":"COUNTIF(R188:R258,TRUE)=0","v":true}]

{"sheet":"Help","index":8,"n_rows":72,"n_cols":15,"rows_kept":72,"cut":false,"hidden":false,"merged":[[54,2,54,4],[54,5,54,7],[54,8,54,10],[54,11,54,13],[54,14,54,16],[29,14,29,16],[30,14,30,16],[31,14,31,16],[53,2,53,4],[53,5,53,7],[53,8,53,10],[53,11,53,13],[53,14,53,16],[51,2,51,4],[51,5,51,7],[51,8,51,10],[51,11,51,13],[51,14,51,16],[49,8,49,10],[49,11,49,13],[49,14,49,16],[52,2,52,4],[52,5,52,7],[52,8,52,10],[71,2,71,4],[71,5,71,7],[71,8,71,10],[71,11,71,13],[71,14,71,16],[70,2,70,4],[70,5,70,7],[70,8,70,10],[70,11,70,13],[70,14,70,16],[65,2,65,10],[68,5,68,16],[69,2,69,4],[69,5,69,7],[69,8,69,10],[69,11,69,13],[69,14,69,16],[61,2,61,4],[61,5,61,7],[61,8,61,10],[61,11,61,13],[61,14,61,16],[66,2,66,16],[56,2,56,10],[59,5,59,16],[60,2,60,4],[60,5,60,7],[60,8,60,10],[60,11,60,13],[60,14,60,16],[63,2,63,4],[63,5,63,7],[63,8,63,10],[63,11,63,13],[63,14,63,16],[62,2,62,4],[62,5,62,7],[62,8,62,10],[62,11,62,13],[62,14,62,16],[57,2,57,16],[52,11,52,13],[52,14,52,16],[48,2,48,4],[48,5,48,7],[48,8,48,10],[48,11,48,13],[48,14,48,16],[50,2,50,4],[50,5,50,7],[50,8,50,10],[50,11,50,13],[50,14,50,16],[49,2,49,4],[49,5,49,7],[43,2,43,10],[46,5,46,16],[47,2,47,4],[47,5,47,7],[47,8,47,10],[47,11,47,13],[47,14,47,16],[41,2,41,4],[41,5,41,7],[41,8,41,10],[41,11,41,13],[41,14,41,16],[44,2,44,16],[40,2,40,4],[40,5,40,7],[40,8,40,10],[40,11,40,13],[40,14,40,16],[39,14,39,16],[38,2,38,4],[38,5,38,7],[38,8,38,10],[38,11,38,13],[38,14,38,16],[30,2,30,4],[39,2,39,4],[39,5,39,7],[39,8,39,10],[39,11,39,13],[31,2,31,4],[31,8,31,10],[30,5,30,7],[31,5,31,7],[30,11,30,13],[31,11,31,13],[30,8,30,10],[33,2,33,10],[36,5,36,16],[37,2,37,4],[37,5,37,7],[37,8,37,10],[37,11,37,13],[37,14,37,16],[34,2,34,16],[17,2,17,3],[18,2,18,3],[19,2,19,3],[20,2,20,3],[22,2,22,10],[16,2,16,3],[1,2,1,16],[3,2,3,16],[8,2,8,16],[5,2,5,16],[7,2,7,10],[10,2,10,10],[11,2,11,16],[13,2,13,10],[14,2,14,16],[23,2,23,16],[26,14,26,16],[27,14,27,16],[28,14,28,16],[25,5,25,16],[26,2,26,4],[27,2,27,4],[28,2,28,4],[29,2,29,4],[26,5,26,7],[27,5,27,7],[28,5,28,7],[29,5,29,7],[26,8,26,10],[26,11,26,13],[27,11,27,13],[28,11,28,13],[29,11,29,13],[27,8,27,10],[28,8,28,10],[29,8,29,10]]}
[]
[null,null,"Interactive Privacy Management Plan"]
[]
[null,null,"Help and other resources"]
[]
[null,null,"Privacy Program Maturity Assessment Framework"]
[]
[null,null,"Five elements of maturity"]
[null,null,"The Privacy Program Maturity Assessment Framework (privacy maturity assessment) consists of five elements, each of which are critical tenets of good privacy practice. \n\n1. Governance & Culture\nThis element measures how well your agency has established robust governance structures for privacy and embedded privacy into its culture.\n \n2. Privacy Strategy\nThis element measures how well your agency has integrated privacy into other key information management disciplines.\n\n3. Privacy Processes\nThis element measures how fit-for-purpose, comprehensive and effective your agency’s key privacy processes are.\n\n4. Risk & Assurance\nThis element measures wow well-developed your agency’s privacy risk and assurance processes are.\n\n5. Data Breach Response\nThis element measures how ready your agency is to handle a data breach and to learn from it."]
[]
[null,null,"Attributes"]
[null,null,"Within each element sits a set of attributes. Attributes are the criteria against which you can measure privacy maturity. For example, the attributes under the ‘Governance & Culture’ element are:\n\n 1)  Privacy champion\n 2)  Privacy values\n 3)  Privacy Officer\n 4)  Management and accountability\n 5)  Awareness\n\nThere is a total of 21 attributes under 5 elements. "]
[]
[null,null,"Four cumulative maturity levels"]
[null,null,"The Maturity Framework requires the user to assess their agency’s maturity across four maturity levels. The maturity levels are shown below: "]
[]
[null,null,"Maturity Level",null,"Score"]
[null,null,"Initial",null,1]
[null,null,"Developing",null,2]
[null,null,"Defined",null,3]
[null,null,"Leader",null,4]
[]
[null,null,"Governance & Culture"]
[null,null,"This element measures how well your agency has embedded privacy into its culture and established robust governance structures. An agency can effectively achieve a privacy aware culture by ensuring that staff understand how privacy correlates with the agency’s values and strategic direction and by reflecting these values at a practical level in the agency’s practices, procedures, and systems. The more effective the privacy culture, the more mature that agency will be. An agency that views privacy as a box-ticking exercise or treats it in isolation from broader organisational frameworks does not have a mature privacy culture, and this can expose the agency to greater legal or reputational risks."]
[]
[null,null,null,null,null,"Remember that the levels are cumulative - the criteria for each level must be met before moving to the next level."]
[null,"Ref.","Attribute",null,null,"Initial",null,null,"Developing",null,null,"Defined",null,null,"Leader"]
[null,1,"Privacy Champion*",null,null,"No Privacy Champion in place.  \n\nThere is no one in the agency at a senior level with responsibility for promoting a culture of privacy that values and protects personal information. ",null,null,"A Privacy Champion has been designated.  \n\nThe Privacy Champion undertakes some activities to promote a culture of privacy that values and protects personal information. \n\nPrivacy management is undertaken strategically with the Privacy Champion providing leadership on broader strategic privacy issues. \n",null,null,"The designated Privacy Champion consistently promotes a culture of privacy that values and protects personal information and supports the integration of privacy practices, procedures and systems into broader organisational frameworks.\n\nThe performance of the Privacy Champion is measured as a KPI.",null,null,"The designated Privacy Champion actively seeks opportunities to improve the privacy culture of the agency.\n\nThe performance of the agency in relation to privacy is a KPI for the Privacy Champion. \n\nThe Privacy Champion has a mandate to engage and speak publicly on relevant issues."]
[null,2,"Privacy Values",null,null,"There is no connection between the agency’s values and respecting the information and privacy of individuals with whom the agency engages.",null,null,"There is a connection between the agency’s values and respecting and protecting personal information. This connection is understood by staff. ",null,null,"The agency’s documented values clearly promote a culture of respecting and protecting personal information to build trust.  \n\nThe agency’s PIA and privacy evaluation processes incorporate an assessment of how the initiative aligns to the agency’s values. ",null,null,"The agency publicises its values which promote a culture of valuing and protecting personal information.  "]
[null,3,"Privacy Officer*",null,null,"No Privacy Officer in place  or the concept of Privacy Officer is notional only. For example, there is a ‘Privacy Officer’ email address but no systematised approach to who responds to emails directed to it.",null,null,"A Privacy Officer has been designated.  \n\nThe Privacy Officer is highly compliance-focused and has some practices, procedures and systems in place but these are generally siloed from broader organisational frameworks.  \n\nSome staff are aware of the Privacy Officer. ",null,null,"The designated Privacy Officer has established practices, procedures and systems to support their obligations and these are documented and integrated into broader organisational frameworks.\n\nThere is agency wide awareness of the Privacy Officer.\n\nThe Privacy Officer makes proactive privacy improvements which extend beyond compliance, and their performance is measured in this regard.",null,null,"The designated Privacy Officer has established practices, procedures and systems that correlate with the agency’s data governance, customer engagement and business transformation functions.  \n\nThe Privacy Officer is encouraged to innovate their practices, procedures and systems.  \n\nThe Privacy Officer willingly assists other agencies by sharing information and learnings about their role as Privacy Officer.  "]
[null,4,"Management & Accountability",null,null,"It is unclear who has overall senior management accountability for privacy within the agency.  \n\nThere is inadequate resourcing for managing privacy compliance activities (for example, handling internal and external privacy enquiries, complaints, and access and correction requests). \n\nPrivacy management is reactive. ",null,null,"The agency has assigned responsibility for privacy compliance including senior oversight and operations. \n\nThere is adequate resourcing for managing privacy compliance activities (for example, handling enquiries, complaints, and access and correction requests).\n\nSome staff are aware of privacy accountabilities and how to seek assistance. ",null,null,"Roles and accountabilities for privacy compliance and oversight are documented and well understood across the agency, and messaging regarding roles and accountabilities is tied to the agency’s broader strategic objectives. \n\nThe agency regularly measures its performance in relation to privacy management (for example, timeliness and quality) and seeks to implement learnings for continuous improvement. ",null,null,"Measurement of the agency’s performance and continuous improvement initiatives are undertaken and reported to senior management regularly.  \n\nThe agency is transparent with the public about who holds accountability for privacy within the agency and its management and accountability practices."]
[null,5,"Awareness",null,null,"Staff have little to no awareness of privacy. Some rights and obligations are viewed negatively. Privacy is generally viewed as a barrier.",null,null,"Staff view privacy neutrally as a compliance issue. There is a developing appreciation of the importance of privacy.",null,null,"Staff view privacy as a positive and valuable part of business as usual. \n\nThere is strong knowledge of agency policies and expectations.\nStaff are encouraged to take opportunities to provide feedback on the agency’s privacy processes (via established channels such as suggestion boxes and staff meetings). ",null,null,"Staff view privacy as an enabler.\n\nStaff know how to apply agency privacy policies and expectations to emerging issues. \n\nThe agency is willing to share its awareness resources with others or to work together to develop sectoral resources which meet the needs of the sector as well as the specific needs of each agency. "]
[]
[null,null,"Privacy Strategy"]
[null,null,"This element measures your agency’s strategic approach to privacy, which includes how well your agency is integrating privacy into other key information disciplines. The Maturity Framework recognises that personal information is a valuable business asset, and optimising its use and usefulness can be critical to the successful delivery of agency functions. Under this element, you will assess how well personal information assets are understood, respected, managed and protected across the agency, not just within the privacy function."]
[]
[null,null,null,null,null,"Remember that the levels are cumulative - the criteria for each level must be met before moving to the next level."]
[null,"Ref.","Attribute",null,null,"Initial",null,null,"Developing",null,null,"Defined",null,null,"Leader"]
[null,6,"Privacy Management Plan*",null,null,"No Privacy Management Plan in place.",null,null,"The agency has a Privacy Management Plan in place and some staff are aware of it. \n\nThe Privacy Management Plan includes measures for addressing any known privacy compliance gaps.",null,null,"Senior management and key staff are aware of the agency’s Privacy Management Plan and the agency’s primary objectives under it.  \n\nThe Privacy Management Plan is considered when setting resourcing budgets for the year ahead. \n\nThe Privacy Management Plan addresses the handling of personal information throughout the information lifecycle with specific consideration given to areas that the agency assesses as having greater risk. It also includes actions to improve privacy maturity outcomes. ",null,null,"The agency publishes its Privacy Management Plan and its progress against it.  \n\nThe agency’s focus on innovation is apparent in its Privacy Management Plan. "]
[null,7,"Inventory of Personal Information*",null,null,"The agency does not know what personal information it holds.",null,null,"The agency has documented the general categories of personal information that are collected, used and disclosed by the agency. It describes the purposes for which the information is collected and how it is stored (such as whether it is stored overseas, with a cloud service provider or other third party).",null,null,"The agency has documented its personal information holdings, and understands all data flows in and out of the agency (including where third parties hold that information). \n\nOwnership, accountability and access for specific IT systems and databases that hold personal information are clear and documented. The record also details how long the information will be retained and when it will be de-identified and destroyed.\n\nThe agency has implemented processes that routinely monitor changes to its personal information holdings.",null,null,"The agency considers the documentation of personal information holdings in the context of its broader organisational goals and priorities. It harnesses the record to identify opportunities to maximise uses of data and to manage relevant risks. \n\nAn innovative and sophisticated approach is taken to the development of the IT system which houses the record of personal information holdings. \n\nThe agency proactively publishes their record where appropriate, and shares its insights and advice with other agencies."]
[null,8,"Data Quality Processes*",null,null,"The agency has no processes in place to monitor or improve the quality of personal information. As a result, it holds a lot of personal information which is incomplete, inaccurate, out of date or irrelevant to the agency’s functions.",null,null,"The agency is starting to define processes to monitor and improve the quality of personal information and these are regularly undertaken.",null,null,"The need to maintain the quality of personal information is understood not only as a privacy concern but as a strategic objective for the agency in the context of its broader functions, which all staff play a part in delivering.  \n\nNew procedures and systems offered by the agency routinely empower individuals to keep the personal information that the agency holds about them complete, accurate and up to date.",null,null,"The agency regularly investigates and takes opportunities to innovate its processes for ensuring the quality of personal information.  \n\nThe agency willingly assists other agencies to improve their data quality processes by sharing its learnings."]
[null,9,"Information Security Processes",null,null,"There is limited awareness of the agency’s information security obligations amongst staff. \n\nThe information security function is largely siloed from privacy and other functions.\n\nThe agency has no documented data retention policy in place.",null,null,"The agency has a developing information security-aware culture.  \n\nInformation security policies and procedures, including retention policies, for all staff are emerging. \n\nThe agency’s information security function routinely collaborates with the Privacy Officer and other individuals with privacy accountabilities and there is a good level of understanding between them of how privacy and security fit together. ",null,null,"The agency has an established information-security aware culture. Staff understand the commonalities and differences between privacy and security and are aware of all relevant privacy and security policies and processes. \n\nPolicies and processes relating to mutual risks and issues (such as data breaches, access controls, appropriate use of technology, workplace surveillance, retention etc.) integrate privacy and security requirements with clear hand off processes to reduce delay and duplication of effort by stakeholders. Where archiving obligations prevent de-identification or destruction of personal information, it is agency policy to adopt other measures to limit privacy risks (such as archiving and limiting access to those personal information holdings).",null,null,"The agency willingly assists other agencies by sharing experiences and insights which encourage better collaboration between information security, privacy and other functions."]
[]
[null,null,"Privacy Processes"]
[null,null,"This element measures how fit-for-purpose, comprehensive and effective your agency’s key privacy processes are. The way these processes are viewed by your agency says a lot about its privacy maturity. For example, an agency that views individual access and correction rights negatively is likely to have issues with privacy culture more generally. The more embedded a process is across the agency (that is, the stronger the understanding of privacy rights and processes by all staff), the more mature that agency will be."]
[]
[null,null,null,null,null,"Remember that the levels are cumulative - the criteria for each level must be met before moving to the next level."]
[null,"Ref.","Attribute",null,null,"Initial",null,null,"Developing",null,null,"Defined",null,null,"Leader"]
[null,10,"External Privacy Policy and Notices*",null,null,"No privacy policy or other messaging is provided to the public.\n\nPrivacy messaging is viewed negatively, as a burden and an encroachment on agency secrecy. \n\nPrivacy notices are not always provided where personal information is collected.",null,null,"Privacy messaging is viewed neutrally as a compliance requirement but is not prioritised. \n\nA privacy policy is provided to the public. The policy is compliance-focused, and provides the information required by APP 1.4.\n\nPrivacy notices are provided where personal information is collected. Notices are compliance-focused, providing the information required by APP 5.2, and can be legalistic. \n\nPrivacy messaging is inconsistent and can be difficult to locate. ",null,null,"Privacy messaging is viewed positively as an important part of the agency’s privacy practice.\n\nA clear, comprehensive and plain English privacy policy is provided to the public and goes beyond compliance, focusing on customer experience, openness and transparency. \n\nThere is a clear link between privacy notices and the privacy policy and privacy messaging is consistent and easy to locate. ",null,null,"Privacy messaging is viewed as an opportunity to build trust and engage the public. \n\nInnovative approaches are taken to deliver privacy messaging to the public, such as the use of infographics, animation or video or other forms of technology to increase user experience. "]
[null,11,"Internal Policies and Procedures",null,null,"No identifiable internal privacy policies or procedures in place.\n\nThere are no documents that explain to staff the agency’s privacy obligations or how privacy might be relevant to the agency’s functions.\n\nPrivacy is not a consideration in broader risk management analyses or documents.",null,null,"Some internal privacy policies and procedures in place but they are not comprehensive and are highly compliance-focused and poorly operationalised. \n\nSome staff are aware of these policies and procedures and they are not consistently followed.\n\nInternal privacy policies and procedures are regularly reviewed to ensure compliance with current law or relevance to agency practices. ",null,null,"Clear, relevant and comprehensive internal privacy policies and procedures are in place.\n \nInternal privacy policies and procedures go beyond compliance and are well-operationalised. \n\nStaff are aware of these policies and procedures and they are followed consistently, resulting in a common approach to privacy across the agency. \n\nInternal privacy policies and procedures are proactively reviewed to ensure compliance with current law, community expectations and relevance to current agency practices and in response to privacy risks and opportunities. ",null,null,"Staff and management proactively contribute to improving internal privacy policies and procedures. \n\nInternal privacy policies and procedures are an integral part of the way that the agency functions. \n\nInnovative approaches taken to design, distribute and embed privacy policies and procedures within the agency. \n\nInternal privacy policies and procedures are proactively reviewed to ensure that they encourage privacy best-practice and effectively change culture and behaviour. "]
[null,12,"Privacy Training*",null,null,"Limited or no privacy training provided to staff.\n\nNo process in place to monitor privacy knowledge.",null,null,"Training is provided to all staff on induction and annually. \n\nTraining is compliance-focused and tends to target specific issues, such as information security and secrecy obligations without sufficient context or an explanation of broader privacy issues. \n\nStaff completion rates and understanding of privacy is not monitored unless there is a breach or complaint. ",null,null,"Training is operationalised to ensure relevance to all staff depending on their role and business unit.\n\nClear and integrated training program is in place with regular opportunities for refresher or more specialised training (for example, on running a PIA as part of a change-management process). \n\nTraining goes beyond compliance, is comprehensive, links to the agency’s internal and external policies and messaging and is periodically updated\n\nStaff completion rates and understanding of privacy are monitored. ",null,null,"Training program links good privacy practice with other agency goals and priorities, such as customer experience and trust.\n\nInnovative approaches taken to training delivery, including a combination of training methods (such as online modules, workshops, simulations or practical sessions). \n\nThe agency willingly assists other agencies to develop effective training programs including taking opportunities to run inter-agency training."]
[null,13,"Privacy Impact Assessments*",null,null,"No PIA process exists.",null,null,"PIA process exists but it is only used for high privacy risk projects. \n\nPrivacy issues which do not meet the high privacy risk threshold are rarely considered. \n\nWhere PIAs are completed, they are run by privacy or risk staff and not well-integrated into wider agency change-management processes.",null,null,"Clear PIA process exists which is well-integrated into other risk assessment and change-management processes and connected to the agency’s values.  \n\nPreliminary risk assessments are routinely undertaken to assess whether or not a PIA is required. \n\nPIAs are completed by relevant change manager or project manager in collaboration with privacy and risk staff. \n\nPIAs are independently reviewed when appropriate.",null,null,"PIA process is engaging and user-friendly. Tools and interactive templates are used to encourage involvement in development of the PIA by business owners. \n\nPrivacy by Design principles are well understood and applied consistently across the agency."]
[null,14,"Dealing with Suppliers",null,null,"Limited or no assessment of third party privacy policies, practices or systems is undertaken.",null,null,"Some assessment is undertaken but agency approach is inconsistent and may vary between business units.\n\nThird party contracts include a confidentiality clause and standard privacy terms. ",null,null," A documented and clear assessment process exists and is applied consistently where a third party may have access to personal information. \n\nThird parties are only engaged if their privacy practices are equivalent to the agency’s or any gaps are mitigated by contractual controls. \n\nContractual terms relating to privacy are supported by documented operational processes between the parties (for example on \nincident management and escalation processes). ",null,null,"The assessment process is well-developed and varies depending on the sensitivity of the personal information involved. \n\nThird party contracts include tailored privacy clauses to reflect the specific privacy risks involved. \n\nThird party assessment processes are continuously improved to ensure that emerging risks are mitigated in future contracts. \n\nPrivacy audits of third parties are regularly undertaken to ensure they are meeting their contractual requirements, for example, by way of site visits. "]
[null,15,"Access & Correction*",null,null,"No processes exist to ensure that an individual can request access to, or correction of, their personal information. \n\nNo clear understanding by staff of individual rights of access and correction and how to balance privacy rights and FOI obligations. \n\nRights often viewed negatively by the agency (“it’s our information, they can’t see it”). \n\nLimited understanding of information holdings means individual unlikely to receive complete response.\n\nPrivacy Act response timeframe frequently exceeded.",null,null,"Some documented processes exist but these are not fully known or consistently applied. \n\nAll requests tend to be escalated to the Privacy Officer rather than applying a risk based approach which empowers other staff to respond to requests. \n\nUnderstanding of information holdings means individual is likely to receive complete response. \n\nRequest handling and response is legalistic and compliance-focused. \n\nPrivacy Act response timeframe occasionally exceeded due to resource limitations of Privacy Officer. ",null,null,"Clearly documented processes exist that are consistently applied.\n\nStrong understanding by staff of rights and processes across the agency. Privacy Officer acts as a central contact on privacy matters within the agency, however responses can be decentralised where appropriate. \n\nRequest handling open, collaborative and customer-focused.\n\nPrivacy Act response timeframe rarely exceeded.",null,null,"Access and correction rights are viewed as an opportunity to engage with the public and show openness and transparency. \n\nInnovative approaches are taken to enabling access and correction, including the use of self-service portals."]
[null,16,"Complaints & Enquiries",null,null,"Staff are unaware of how to identify or manage a privacy complaint or enquiry. \n\nIt is not clear to the public where to make a complaint or ask a question about privacy.\n\nResponse to complaint or enquiry will depend entirely on the staff member who receives it. ",null,null,"Some staff are able to identify and manage a privacy complaint or enquiry. \n\nThere is a general channel for the public to engage with the agency and this can be used for privacy complaints and enquiries (e.g. “Contact us” web-form). \n\nEscalation process varies depending on business unit but there is an overreliance on the Privacy Officer to respond directly to complaints and enquiries. \n\nLimited use is made of complaints and enquiry data to improve privacy practice.",null,null,"All business units who have contact with the public are enabled and empowered to handle privacy complaints and enquiries and know when escalation to the Privacy Officer is appropriate. \n\nThe public has access to a specific privacy contact channel and staff with the knowledge and skills to respond meaningfully to a privacy complaint or enquiry. \n\nGood use is made of complaints and enquiry data to improve privacy practice.",null,null,"Innovative approaches are taken to ensuring that the public has a clear and easy path to make privacy complaints or enquiries. \n\nFAQs or other interactive online tools are used to ensure that the public can access answers to common privacy questions or concerns and the agency improves these resources regularly. \n\nComplaints data is recognised as a valuable source of insights about public perception and concern and privacy weaknesses or issues."]
[]
[null,null,"Risk & Assurance"]
[null,null,"This element measures how well-developed your risk and assurance processes are and how privacy fits into them. Your agency’s risk management framework is a core element that will contribute to your agency’s overall privacy maturity. This includes aspects of risk identification, assessment and treatment. A clear risk reporting process will enable senior leadership to make strategic decisions with adequate consideration given to the agency’s privacy risk profile. Risk and assurance processes also provide a means for the agency to monitor and review the effectiveness of its privacy program."]
[]
[null,null,null,null,null,"Remember that the levels are cumulative - the criteria for each level must be met before moving to the next level."]
[null,"Ref.","Attribute",null,null,"Initial",null,null,"Developing",null,null,"Defined",null,null,"Leader"]
[null,17,"Risk Identification & Assessment",null,null,"No formal, structured or consistent process exists for identifying and assessing privacy risks.",null,null,"Some documented privacy risk processes exist but they are reactive and compliance-focused.\n\nThere is limited integration with wider risk management frameworks. ",null,null,"Strong, clear and consistent processes exist for identifying and assessing privacy risks. \n\nPrivacy is integrated into agency's wider risk management framework.  \n\nProactive steps are taken to identify privacy risks using all available sources of information (such as complaints, breach data, enquiries etc.).",null,null,"Privacy risk identification is an accepted part of all business activity and management and staff perceive this as adding value. \n\nPrivacy is firmly integrated into agency’s wider risk management function and always considered. \n\nInnovative approaches are taken to identify and respond to privacy risks across the agency's functions."]
[null,18,"Reporting & Escalation",null,null,"Reporting is haphazard and largely limited to breaches and incidents.",null,null,"The agency’s reporting lines and processes are defined and generally followed. Mechanisms ensure that senior management is routinely informed about privacy risks or issues. \n\nThresholds for escalation of privacy risks, issues, incidents and complaints are becoming understood and adhered to by staff. ",null,null,"Privacy is monitored within the agency’s broader risk and assurance framework, providing an integrated way of reporting on privacy risks, issues, incidents and complaints to senior management.\n\nThe agency documents its compliance with privacy obligations, including keeping records on privacy process reviews, breaches and complaints and routinely reflects on ways to improve its processes. \n\nThe agency's PIAs, privacy management plans and reviews of internal processes are endorsed by the agency's Privacy Champion.  ",null,null,"Reporting to senior management extends beyond risks, issues and incidents and complaints to lessons learned, continuous improvement activities and innovation.  \n\nThe agency is open and transparent with the public about its reporting and escalation practices, procedures and systems, for example, by responding meaningfully when asked about them or including them in FAQs. "]
[null,19,"Assurance Model",null,null,"Ad hoc assurance activities occur in response to breaches or incidents.  There is no assurance in respect of the agency’s privacy management plan.",null,null,"Some assurance activities occur in respect of the privacy management plan, processes and controls and in response to breaches or incidents.  For example, the 'three lines of defence' model has been adopted for specific risks such as incident management. Under this model: \n\n - First line - privacy controls are implemented in response to breaches or incidents.\n\n - Second line - the Privacy Officer has oversight over breaches or incidents and controls that are adopted.\n\n - Third line - internal audit provides assurance activities to ensure that controls are being effected properly.",null,null,"Well-developed assurance activities occur in respect of the privacy management plan, processes and controls and other identified risks, or proactively because of other risk identification activities. A defined “three lines of defence” model is in place, with strong Privacy Officer involvement:\n\n - First line - operational privacy risks are identified and recorded in risk register and control activities are documented.\n\n - Second line - the Privacy Officer collaborates with information security, data governance and risk functions to provide oversight of privacy risk management.\n\n - Third line - internal audit (or independent assessors) conduct regular privacy-related assurance activities.",null,null,"Assurance activities routinely drive improvement and innovation in privacy management. The “three lines of defence” model means that: \n\n - First line - the agency’s business functions take ownership of ensuring that privacy controls are in place.\n\n - Second line - the Privacy Officer collaborates with information security, data governance and risk functions to identify opportunities for best practice and continuous improvement.\n\n - Third line - independent assurance is regularly sought to ensure not only that the agency is fully compliant but that best practice is achieved and demonstrated."]
[]
[null,null,"Data Breach Response"]
[null,null,"This element measures your agency’s readiness to identify and handle a data breach and to ensure that the requirements of the Notifiable Data Breach (NDB) scheme are understood and followed. An agency’s ability to properly manage a data breach is reliant on the existence of a strong privacy culture (staff need to know what a data breach looks like and feel safe to speak up about it) and risk and assurance processes that are capable of recognising breaches and ensuring that steps are taken to prevent recurrences. Effective data breach responses are ultimately about protecting individuals from harm and this element therefore also considers how capable your agency is to engage with individuals with sensitivity and compassion."]
[]
[null,null,null,null,null,"Remember that the levels are cumulative - the criteria for each level must be met before moving to the next level."]
[null,"Ref.","Attribute",null,null,"Initial",null,null,"Developing",null,null,"Defined",null,null,"Leader"]
[null,20,"Data Breach Response Plan",null,null,"No structured approach to data breach response exists. \n\nStaff are unlikely to recognise a data breach and are unlikely to speak up about breaches due to potential consequences for them.",null,null,"A basic data breach response plan in place that reflects the OAIC’s recommended steps (Contain, Assess, Notify, Prevent). Plan is not consistently followed but becoming better known.\n\nStaff are generally aware of how to recognise a data breach, and are likely to speak up about breaches.\n\nDecision making in breach response is largely reliant on the Privacy Officer. ",null,null,"There is a well-defined plan in place with clear and documented roles and escalation paths. \n\nStaff are aware of how to recognise a data breach and are likely to speak up. There is a strong culture of openness and trust that results in staff confidence and honesty.\n\nAccountabilities for data breach responses and decision making are spread across the agency. \n\nProcess is integrated with other critical business functions, including information security, communications and risk and assurance. ",null,null,"The agency’s response plan is regularly tested using breach simulations and other assurance activities to ensure it is continuously improved.  Innovative approaches are adopted. \n\nThe agency is open about its data breach experiences and engages with the public and stakeholders about them.  \n\nThe agency willingly assists other agencies to lift their practices by sharing its data breach experiences and plans. "]
[null,21,"Data Breach Notification*",null,null,"Data breach notification is viewed negatively and is unlikely to occur.\n\nThere is no process in place to evaluate the breach and assess whether notification is necessary or desirable. Little to no knowledge or understanding of breach notification requirements, such as notification thresholds.  \n\nBreach and notification risk is viewed only as a harm to the agency. Little to no consideration is given to how affected individuals may be harmed. ",null,null,"Data breach notification only occurs where required under legislation.\n\nProcesses are developing to evaluate a breach and assess whether notification is required.  \n\nDetermining whether to notify is driven by Privacy Officer with frequent opposition from other agency stakeholders.  \n\nThe agency is focused on preventing harm to individuals and takes proactive steps to assist affected individuals (for example, directing them to support and resources inside and outside the agency).",null,null,"Clear processes are in place to evaluate breaches and assess whether notification is necessary or desirable. Other stakeholders understand the obligations and benefits of notification.",null,null,"Data breach notification is viewed as an opportunity to demonstrate trust and transparency. \n\nCommunications are individualised and appropriate and the agency follows up with the affected individuals to ensure that mitigation steps have been successful. "]

{"sheet":"Configuration","index":9,"n_rows":47,"n_cols":12,"rows_kept":47,"cut":false,"hidden":true,"merged":[[37,11,37,15],[38,11,38,15],[39,11,39,15],[40,11,40,15],[41,11,41,15],[32,11,32,15],[33,11,33,15],[34,11,34,15],[35,11,35,15],[36,11,36,15],[1,1,1,15],[3,1,3,15],[5,1,5,15],[14,1,14,15],[23,1,23,15],[25,11,25,15],[26,11,26,15],[27,11,27,15],[28,11,28,15],[26,9,26,10],[27,9,27,10],[28,9,28,10],[26,2,26,5],[26,6,26,8],[27,2,27,5],[27,6,27,8],[28,2,28,5],[28,6,28,8],[25,2,25,5],[25,6,25,8],[16,5,16,8],[17,5,17,8],[18,5,18,8],[19,5,19,8],[29,11,29,15],[42,11,42,15],[43,11,43,15],[44,11,44,15],[45,11,45,15],[46,11,46,15],[44,9,44,10],[45,9,45,10],[46,9,46,10],[39,9,39,10],[40,9,40,10],[41,9,41,10],[42,9,42,10],[43,9,43,10],[34,9,34,10],[35,9,35,10],[36,9,36,10],[37,9,37,10],[38,9,38,10],[29,9,29,10],[30,9,30,10],[31,9,31,10],[32,9,32,10],[33,9,33,10],[30,11,30,15],[31,11,31,15],[44,2,44,5],[44,6,44,8],[45,2,45,5],[45,6,45,8],[46,2,46,5],[46,6,46,8],[41,2,41,5],[41,6,41,8],[42,2,42,5],[42,6,42,8],[43,2,43,5],[43,6,43,8],[38,2,38,5],[38,6,38,8],[39,2,39,5],[39,6,39,8],[40,2,40,5],[40,6,40,8],[35,2,35,5],[35,6,35,8],[36,2,36,5],[36,6,36,8],[37,2,37,5],[37,6,37,8],[32,2,32,5],[32,6,32,8],[33,2,33,5],[33,6,33,8],[34,2,34,5],[34,6,34,8],[29,2,29,5],[29,6,29,8],[30,2,30,5],[30,6,30,8],[31,2,31,5],[31,6,31,8],[20,5,20,8],[21,5,21,8],[25,9,25,10],[7,1,7,2],[8,1,8,2],[9,1,9,2],[10,1,10,2],[11,1,11,2],[18,1,18,4],[19,1,19,4],[20,1,20,4],[21,1,21,4],[16,1,16,4],[17,1,17,4]]}
[]
[null,"Interactive Privacy Management Plan"]
[]
[null,"Configuration"]
[]
[null,"Privacy maturity levels"]
[]
[null,"Maturity Level",null,"Score"]
[null,"Initial",null,1]
[null,"Developing",null,2]
[null,"Defined",null,3]
[null,"Leader",null,4]
[]
[]
[null,"Privacy maturity elements"]
[]
[null,"Element",null,null,null,"Element Code"]
[null,"Governance & Culture",null,null,null,"C_GovernanceAndCultureAttributes"]
[null,"Privacy Strategy",null,null,null,"C_PrivacyStrategyAttributes"]
[null,"Privacy Processes",null,null,null,"C_PrivacyProcessesAttributes"]
[null,"Risk & Assurance",null,null,null,"C_RiskAndAssuranceAttributes"]
[null,"Data Breach Response",null,null,null,"C_DataBreachResponseAttributes"]
[]
[null,"Privacy maturity attributes"]
[]
[null,"Ref.","Attribute",null,null,null,"Element",null,null,"Min. Score",null,"Element / Attribute"]
[null,1,"Privacy Champion",null,null,null,"Governance & Culture",null,null,2,null,{"$f":"_xlfn.CONCAT(G27, \" / \",C27)","v":"Governance & Culture / Privacy Champion"}]
[null,2,"Privacy Values",null,null,null,"Governance & Culture",null,null,1,null,{"$f":"_xlfn.CONCAT(G28, \" / \",C28)","v":"Governance & Culture / Privacy Values"}]
[null,3,"Privacy Officer",null,null,null,"Governance & Culture",null,null,2,null,"Governance & Culture / Privacy Officer"]
[null,4,"Management & Accountability",null,null,null,"Governance & Culture",null,null,1,null,"Governance & Culture / Management & Accountability"]
[null,5,"Awareness",null,null,null,"Governance & Culture",null,null,1,null,"Governance & Culture / Awareness"]
[null,6,"Privacy Management Plan",null,null,null,"Privacy Strategy",null,null,2,null,"Privacy Strategy / Privacy Management Plan"]
[null,7,"Inventory of Personal Information",null,null,null,"Privacy Strategy",null,null,2,null,"Privacy Strategy / Inventory of Personal Information"]
[null,8,"Data Quality Processes",null,null,null,"Privacy Strategy",null,null,2,null,"Privacy Strategy / Data Quality Processes"]
[null,9,"Information Security Processes",null,null,null,"Privacy Strategy",null,null,1,null,"Privacy Strategy / Information Security Processes"]
[null,10,"External Privacy Policy & Notices",null,null,null,"Privacy Processes",null,null,2,null,"Privacy Processes / External Privacy Policy & Notices"]
[null,11,"Internal Policies & Procedures",null,null,null,"Privacy Processes",null,null,1,null,"Privacy Processes / Internal Policies & Procedures"]
[null,12,"Privacy Training",null,null,null,"Privacy Processes",null,null,2,null,"Privacy Processes / Privacy Training"]
[null,13,"Privacy Impact Assessments",null,null,null,"Privacy Processes",null,null,2,null,"Privacy Processes / Privacy Impact Assessments"]
[null,14,"Dealing with Suppliers",null,null,null,"Privacy Processes",null,null,1,null,"Privacy Processes / Dealing with Suppliers"]
[null,15,"Access & Correction",null,null,null,"Privacy Processes",null,null,2,null,"Privacy Processes / Access & Correction"]
[null,16,"Complaints & Enquiries",null,null,null,"Privacy Processes",null,null,1,null,"Privacy Processes / Complaints & Enquiries"]
[null,17,"Risk Identification & Assessment",null,null,null,"Risk & Assurance",null,null,1,null,"Risk & Assurance / Risk Identification & Assessment"]
[null,18,"Reporting & Escalation ",null,null,null,"Risk & Assurance",null,null,1,null,"Risk & Assurance / Reporting & Escalation "]
[null,19,"Assurance Model",null,null,null,"Risk & Assurance",null,null,1,null,"Risk & Assurance / Assurance Model"]
[null,20,"Data Breach Response Plan",null,null,null,"Data Breach Response",null,null,1,null,"Data Breach Response / Data Breach Response Plan"]
[null,21,"Data Breach Notification",null,null,null,"Data Breach Response",null,null,2,null,"Data Breach Response / Data Breach Notification"]