Has someone just asked to see your security policy?
Send them one written for your country's law. Editable Word templates, free.
Get the pack for
Aligned to ISO/IEC 27001 · ACSC Essential Eight · Australian Privacy Principles
This policy is adopted by [organisation name] ("we", "us", "our").
- Document owner
- [name and role]
- Approved by
- [owner, chief executive, board or delegated executive]
- Approved date
- [date]
- Review cycle
- Annually, or on material change
Australia
Written to the Privacy Act 1988, the Essential Eight, ISO 27001 and the Notifiable Data Breaches scheme.
Browse the 25 Australian guides →New Zealand
Written to the Privacy Act 2020, the NZISM, NCSC guidance and Own Your Online.
Browse the 23 New Zealand guides →Trading in both countries? Choose Both and you get both packs.
Australian law and New Zealand law aren't the same, so neither are the templates.
The privacy law differs
Each country has its own breach rules, tests and deadlines. A template has to name the right ones.
So do the regulators
Each pack names its own country's regulator and guidance, and nothing from the other side.
Every claim is checked
1,497 of 1,826 claims in our guides trace to a primary source. The rest are marked as our reading. How we check
Changes are dated
When the law moves, the guide says what changed and when, with a link to the source. Change log
Next scheduled changes
See both libraries before you download a thing.
Switch countries and the map re-colours. Similar topic areas on each side, different guides underneath, because the obligations underneath are different.