The privacy management plan is a strategic policy document in which the agency outlines how it complies with the PPIP Act and the Health Records and Information Privacy Act 2002 (the HRIP Act).