Our Privacy Impact Assessments Register
The Privacy (Australian Government Agencies — Governance) APP Code 2017 (Privacy Code) requires us to conduct privacy impact assessments (PIAs) for high privacy risk projects.
The Privacy Code also requires us to publish the register, or a version of the register, on our website. Ours is set out below.
| Project name | Project description | Date approved |
| Board governance | An online platform used to support Board and committee activities. | 17/09/2026 |
| EFA Bonds <500k | Formalisation of Bond products 20k-500k for distribution through the Small Business channel | 25/06/2026 |
| Governance software | Data Governance Tool | 01/04/2026 |
| Interactive Webinars | Implementation of the Interactive Webinars feature that is integrated with the existing Marketing Automation Software. | 27/01/2026 |
| Risk Management System | New Enterprise Risk Management Software | 6/6/2025 |
| Information Technology Enhancement | Pilot usage of Copilot capability within Microsoft365 applications. | 5/9/2024 |
| Marketing Automation | Existing Marketing Automation Software being integrated with our new Customer Relationship Management system. | 7/5/2024 |
| Technology Transformation | New Loan Origination, Product Ledger and AML/CTF Screening Systems | 7/3/2024 |
| Performance Management | New Performance Management Software Provider | 15/7/2020 |
| ExportOnline | Online portal for Customer applications | 14/05/2019 |
Last reviewed/updated 30 January 2026