GovCMS is now classified at OFFICIAL: Sensitive
What does this mean for you?
You can now collect, store and transmit information at an OFFICIAL: Sensitive level. You still need to comply with the Privacy Act and the Australian Privacy Principles. This includes notifying people that you're collecting their information and how it will be used. Ask your Privacy Officer for advice before using GovCMS to collect information, especially if your site uses web forms.
A friendly reminder
You have risk assessment and due diligence obligations. For more information, refer to Information Security Manual (ISM) and Protective Security Policy Framework (PSPF).