Checkpoint · Privacy Act
Privacy Act compliance, run from your Microsoft 365
Checkpoint carries the Australian Privacy Principles and the Notifiable Data Breaches scheme as their own framework, maps each requirement to the ISO 27001 controls that already evidence it, and keeps the records in your own Microsoft 365.
The demo is the real console with sample data. No sign-up.
What Checkpoint holds for Privacy Act
- The 13 Australian Privacy Principles and the Notifiable Data Breaches scheme, as amended in 2024.
- Each requirement mapped to the ISO 27001 controls that evidence it, so privacy work and security work share one evidence set.
- Owners, status and evidence for each requirement, with the same registers, reviews and reports as every other framework.
- A step up to ISO 27701 when a customer or tender asks for a certified privacy management system.
Measured from your Microsoft 365
The Microsoft 365 scan evidences the security side of APP 11, such as access control, encryption and logging, from your tenant.
Checkpoint signs in with Microsoft Entra and reads your settings through Microsoft Graph with read-only, delegated permissions. Your records are SharePoint lists in your own tenant, so if you stop using Checkpoint they are still yours. How Checkpoint works.
Questions
- Is the Privacy Act a certification?
- No. It is law: organisations it covers must comply, and there is no certificate. ISO 27701 is the certifiable privacy standard if you need one.
- Does my business need it?
- Most organisations with annual turnover over three million dollars, and some smaller ones such as health service providers. If you hold personal information for larger customers, they will usually ask how you meet the APPs either way.
- How is it different from the ISO 27701 module?
- This module tracks the Australian law itself. ISO 27701 is an international management system standard that you can certify against. Many organisations start here and add ISO 27701 later; the two map to each other.
