What does this mean for you?
You can now collect, store and transmit information at an OFFICIAL: Sensitive level. You still need to comply with the Privacy Act(Opens in a new tab/window) and the Australian Privacy Principles(Opens in a new tab/window). This includes notifying people that you're collecting their information and how it will be used. Ask your Privacy Officer for advice before using GovCMS to collect information, especially if your site uses web forms.
A friendly reminder
You have risk assessment and due diligence obligations. For more information, refer to Information Security Manual (Opens in a new tab/window) (ISM) and Protective Security Policy Framework (Opens in a new tab/window) (PSPF).