{
  "node_id": "cc-privacy-framework",
  "title": "Cocos (Keeling) Islands - Australian Privacy Act and OAIC Supervisory Framework",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-04-27",
  "bluf": "The Cocos (Keeling) Islands are an Australian external territory comprising 27 small coral islands in the Indian Ocean. The territory has a resident population of approximately 600 people, primarily members of the Cocos Malay community on Home Island and Australian Government workers and their families on West Island. The islands are administered by the Australian Government through the Department of Infrastructure, Transport, Regional Development, Communications and the Arts. The Australian Privacy Act 1988 (Cth) applies in the Cocos (Keeling) Islands as an Australian external territory, and the Australian Privacy Principles (APPs) govern the handling of personal data by Australian Government agencies and private sector organisations with annual turnover exceeding AU$3 million operating in the territory. The Office of the Australian Information Commissioner (OAIC) is the competent supervisory authority for privacy matters in the Cocos (Keeling) Islands. The Cocos (Keeling) Islands Act 1955 provides the legislative basis for the territory's status. The territory has a distinct cultural identity centred on the Cocos Malay community, whose privacy interests and cultural data must be handled with particular sensitivity. Organisations processing personal data in the Cocos (Keeling) Islands must comply with the Australian Privacy Act 1988, the Australian Privacy Principles, the notifiable data breaches scheme, and relevant Commonwealth legislation applicable to Australian external territories.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0",
    "l402_paywall_url": "https://bidda.com/api/v1/vault/nodes/cc-privacy-framework.json"
  },
  "crosswalks": {
    "_available_keys": [
      "gdpr_equivalent",
      "iso_standard",
      "nist_framework",
      "regional_framework"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "iso-27001-2022",
    "iso-27701-privacy-information-management"
  ],
  "primary_citations_count": 7
}