Office of the Australian Information Commissioner, Guide to Undertaking Privacy Impact Assessments (May 2014) (full-text).