The weekly paper
for curious people
See the connections.
Understand the consequences.
Swipe to see more sections →
Sick of fake news?
Same evidence. Different perspective.
Viewing through
Start with the shortest supported answer, then follow the evidence and the limits together.
What comes into focusIt keeps the claim, its source and the point where certainty ends in one view.
What this view may missA specialist Lens can make one practical consequence easier to see.
Changing the Lens changes what comes into focus. It never changes the evidence underneath.
Issue 002 Story 3 · Privacy
Your identity fields are used during processing, then separated from the other answers. Separation is a protection—but it is not the same as immediate destruction.
Watch the relevant chapter from Lens in 8, then inspect the evidence below.
What people heard
Once the Census is processed, my name and address either disappear immediately or stay attached to everything forever.
Established, with an important distinction
What actually happens to the identity records?
Short answer. The ABS uses identity fields during processing, then separates names and addresses from other answers and keeps them under different retention limits.
Choose how to read this
The facts do not change. Each view uses the same published sources and leaves the same questions open.
See through another Lens
Each view notices something useful. None is allowed to stand in for the complete evidence.
Household
I need to know whether information identifying me is disclosed or used against me.
What this view explainsWhy secrecy, separation, access controls and disclosure boundaries matter.
What it may missA public policy cannot reveal the live state of one submitted form.
The answer
Names help with household completion, duplicates, quality review and approved data linkage. Addresses support geographic statistics and population estimates.
The ABS says it removes names and addresses from other Census data during processing, then stores the separated records apart.
Names may be kept to February 2028 and addresses to August 2029 under the stated maximum periods.
Sources processing purposeseparation principleretention limits
The ordinary path
The public notices describe policy and maximum periods. They do not expose live household-level processing events.
The form contains identity, location and household answers. Once submitted, the ABS says the form itself cannot be accessed or changed by the respondent.
Identity fields support duplicate detection, quality work and linkage. Encryption, access controls, audit logging and secrecy duties apply.
Names and addresses are removed from other Census answers and stored separately from those answers and from one another.
The stated maximum is 18 months for names and 36 months for addresses. Other records follow separate archives authorities.
It does not mean every record became anonymous the moment Submit was pressed. It also does not mean de-identified data can never be linked for approved research.
Sources separation principleretention limitsstatistical useindividual processing boundary
The optional branch
If the household chose the 99-year time capsule, the Census information is transferred to the National Archives of Australia. Once transferred, the choice cannot be reversed and the information cannot be accessed, altered or retrieved before 2125.
The ABS says administrative data used to support Census processing is not included in that transfer. The public records do not establish whether one household selected the option or whether its transfer has already occurred.
Who can use what
A privacy explanation becomes misleading when every form of use is collapsed into “shared” or “not shared.”
Identifiable form information
The ABS says it does not share Census-form information that could identify a household with other departments or direct-marketing companies, and does not use it for compliance or enforcement apart from Census Act offences.
De-identified statistical information
The ABS may link de-identified Census data with other datasets under strict controls. DATA Scheme sharing is limited to permitted purposes and requires written approval from the Australian Statistician.
What remains unknown
Show me the evidence
The Privacy Statement explains handling and use. The Collection Notice explains what was collected, why and the principal retention limits.
ABS 2026 Census Privacy Statement
ABS 2026 Census Privacy Statement
ABS 2026 Census Privacy Statement and Collection Notice
ABS 2026 Census Privacy Statement
ABS 2026 Census Privacy Statement
ABS 2026 Census Privacy Statement and Collection Notice
ABS 2026 Census Privacy Statement
Lens assessment
The question
Understand the post-submission path of identity fields, statistical answers and the optional time capsule without confusing separation, destruction and archival preservation.
What we checked
The ABS 2026 Census Privacy Statement and Data Collection Notice available through 16 August 2026. Internal processing logs, an individual's submitted form and the eventual operation of the archive transfer are outside the established boundary.
Best-supported answer
The ABS uses names and addresses during Census processing, then removes them from the other form data and stores names and addresses separately. Names may be retained until the end of February 2028 and addresses until the end of August 2029 before destruction under records authorities. If the household chose the time capsule, the submitted Census information is transferred to the National Archives, cannot be retrieved or changed and remains closed until 2125.
Why we told it this way
The evidence supports a branching data-path explanation with distinct processing, separation, retention and optional archive stages. It does not support a claim about the processing state of one submitted form.
An editor remains responsible. Sense separated processing, identity storage, statistical use, destruction limits and optional archival preservation. Lens remains responsible for the wording, source admission and corrections.
Issue 002 record Two current ABS primary records reviewed · Sense run opened before prose · processing, separation, destruction and optional archive kept distinct · original illustration labelled · published 16 August 2026
Possible effects · We cannot say how likely
The published path creates dated tests for separation, destruction and optional archiving. It could make later privacy claims more auditable, but public notices cannot reveal the live state of one household's record.
The ABS published distinct purposes, separation steps and maximum retention periods for names, addresses, statistical data and the optional time capsule.
Those commitments could give oversight bodies and the public clearer checkpoints for testing whether identity fields are separated, destroyed or archived as described.
Where the connection stopsThe notices establish the declared handling rules, not a live audit of systems or the processing state of an individual form.
How people may respond
How people understand the separation, destruction and optional archive pathways could influence trust in Census handling and future participation.
What the evidence does not showThe published process is established; its effect on trust, consent or response behaviour is not measured here.
The story separates processing, identity handling, destruction and optional archive decisions.
Clear, verifiable stages may make the privacy promise easier to assess than one general assurance.
Attention shifts toward whether each published commitment is later completed.
ABS, archivists and participants: Provide or seek evidence that the promised stages occurred.
Trust becomes more dependent on observable compliance and correction.
What we know has changedWe have not established that this possible change has happened.
What this does not showVerification of process would not show that every participant feels reassured.
This is the first time Lens has mapped this path. We have no later evidence showing whether it is happening more, less or about the same.
The current pathway is presented as a set of distinct commitments.
A changed retention, linkage or archive rule could be interpreted as altering the terms under which information was supplied.
Public and institutional attention could move from procedure to consent and accountability.
ABS, government and participants: Explain, challenge or revise the handling arrangement.
A policy change could commit the system to a materially different data path.
What we know has changedWe have not established that this possible change has happened.
What this does not showConcern about a hypothetical change is not evidence that one has occurred.
This is the first time Lens has mapped this path. We have no later evidence showing whether it is happening more, less or about the same.
If assurance or oversight reports test separation, access controls and destruction against the stated dates
Then the public could distinguish verified implementation from a policy promise and identify any material exception.
Would weaken this: The report does not test the relevant controls or periods. Definitions change so the reported categories are not comparable.
Scope: 2026 Census identity-field handling and the optional archive path. Horizon: Through the February 2028 name and August 2029 address limits.
If law, policy, system design or an incident materially changes how identity or de-identified data is handled
Then the current explanation could need revision and readers would need a new account of purpose, access, retention and remedy.
Would weaken this: The change concerns unrelated administrative records. The existing handling path and maximum periods remain unchanged.
Scope: Material changes to the described 2026 Census path, not speculation about undisclosed access. Horizon: Until the relevant identity-retention periods end and any time-capsule transfer is complete.
The ABS says names support household completion, duplicate processing, quality review and data linkage; addresses support geographic statistics, population estimates, travel-to-work analysis and the Address Register.
Open evidence ↗Census form names are retained for up to 18 months, to the end of February 2028, and addresses for up to 36 months, to the end of August 2029.
Open evidence ↗What could change this assessment?