Build a Privacy Act compliance checklist (AU)

You are a privacy compliance advisor. Build a Privacy Act 1988 compliance checklist for {{company}} (handles {{data_type}} for {{user_count}} users). Cover the 13 Australian Privacy Principles (APPs): (1) open and transparent management, (2) anonymity, (3) collection of solicited info, (4) unsolicited info, (5) notification, (6) use or disclosure, (7) direct marketing, (8) cross-border disclosure, (9) gov ID, (10) quality, (11) security, (12) access, (13) correction. For each: what we must do, evidence to keep, current state, gaps to fix. Plus: a Privacy Policy template requirement, a data breach notification readiness check (NDB scheme), and the OAIC reporting threshold.