From a9439995eac35ed08ec6753f9a66a97391079336 Mon Sep 17 00:00:00 2001
From: dbca-serkan <serkan.kibritoglu@dbca.wa.gov.au>
Date: Mon, 27 Jul 2026 15:35:24 +0800
Subject: [PATCH 1/8] Update privacy and acknowledge text v1

---
 .../components/layout/main/NewApplication.tsx |  2 +-
 .../components/layout/main/PrivacyPolicy.tsx  | 45 ++++++++++++-------
 2 files changed, 29 insertions(+), 18 deletions(-)

diff --git a/frontend/src/components/layout/main/NewApplication.tsx b/frontend/src/components/layout/main/NewApplication.tsx
index ecf3223..a8c0a32 100644
--- a/frontend/src/components/layout/main/NewApplication.tsx
+++ b/frontend/src/components/layout/main/NewApplication.tsx
@@ -218,7 +218,7 @@ const PrivacyConsentDialogContent = ({
                         disabled={!isVerificationComplete}
                     />
                 )}
-                label="I acknowledge that DBCA will collect, use and disclose my personal information in accordance with applicable privacy laws and DBCA's Privacy Policy."
+                label="I acknowledge the above information and that DBCA will handle my personal information in accordance with applicable privacy laws and its Privacy Policy."
             />
 
             <Stack direction="row" spacing={2} sx={{ mt: 2, justifyContent: "space-between" }}>
diff --git a/frontend/src/components/layout/main/PrivacyPolicy.tsx b/frontend/src/components/layout/main/PrivacyPolicy.tsx
index e143271..ab4ef15 100644
--- a/frontend/src/components/layout/main/PrivacyPolicy.tsx
+++ b/frontend/src/components/layout/main/PrivacyPolicy.tsx
@@ -1,6 +1,7 @@
 import Box from "@mui/material/Box";
 import Link from "@mui/material/Link";
 import Typography from "@mui/material/Typography";
+import LaunchIcon from "@mui/icons-material/Launch";
 
 /**
  * Displays the S717 privacy collection notice content.
@@ -12,77 +13,87 @@ export const PrivacyContent = () => {
     return (
         <>
             <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                The Department of Biodiversity, Conservation and Attractions (DBCA) collects personal information in order to:
+                The Department of Biodiversity, Conservation and Attractions (<strong>DBCA</strong>) collects personal information to:
             </Typography>
 
-            <ul style={{ paddingLeft: 24, margin: "0 0 16px", color: "inherit", listStyleType: "disc" }}>
+            <ul className="pl-6 mb-4 text-inherit list-disc">
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        Receive, assess and manage animal ethics submissions and approvals in accordance with <em>section 8 of the Animal Welfare Act 2002 (WA)</em>
+                        receive, assess and manage animal ethics submissions and approvals in accordance with section 8 of the <em>Animal Welfare Act 2002</em> (WA) — <strong>AW Act</strong>;
                     </Typography>
                 </li>
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        Assess and determine applications made under sections 40 and 45 of the <em>Biodiversity Conservation Act 2016 (WA)</em>
+                        assess and determine applications made under sections 40 and 45 of the <em>Biodiversity Conservation Act 2016</em> (WA) — <strong>BC Act</strong>;
                     </Typography>
                 </li>
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        Administer, monitor and enforce authorisations, permits and approvals issued by DBCA
+                        assess and determine applications made under regulation 89 of the <em>Conservation and Land Management Regulations 2002</em> (WA) — <strong>CALM Regulations</strong>;
                     </Typography>
                 </li>
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        Communicate with applicants, nominees, researchers, licence holders and authorised representatives regarding applications, approvals, compliance matters or related enquiries
+                        administer, monitor and enforce other authorisations, permits and approvals that it issues;
                     </Typography>
                 </li>
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        Meet DBCA's statutory obligations for record-keeping, reporting, audit and regulatory compliance.
+                        communicate with applicants, nominees, researchers, licence holders and authorised representatives regarding applications, approvals, compliance matters or related enquiries; and
+                    </Typography>
+                </li>
+                <li>
+                    <Typography variant="body2" color="textSecondary">
+                        meet its statutory obligations for record-keeping, reporting, audit and regulatory compliance.
                     </Typography>
                 </li>
             </ul>
 
             <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                The personal information collected may include names, contact details, organisational affiliation, role details and other information necessary to assess applications and administer approvals.
+                The personal information collected may include names, contact details, organisational affiliation, role details and other information necessary to assess applications and issue lawful authority for activities.
             </Typography>
 
             <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
                 DBCA may share this information:
             </Typography>
 
-            <ul style={{ paddingLeft: 24, margin: "0 0 16px", color: "inherit", listStyleType: "disc" }}>
+            <ul className="pl-6 mb-4 text-inherit list-disc">
+                <li>
+                    <Typography variant="body2" color="textSecondary">
+                        internally within DBCA for assessment, decision-making, compliance, audit and operational purposes;
+                    </Typography>
+                </li>
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        Internally within DBCA for assessment, decision-making, compliance, audit and operational purposes
+                        with relevant advisory bodies, committees or experts (including the <em>Animal Ethics Committee</em> — <strong>AEC</strong>) for the purpose of evaluating applications and submissions;
                     </Typography>
                 </li>
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        With relevant advisory bodies, committees or experts (including the Animal Ethics Committee) for the purpose of evaluating applications and submissions
+                        with the <em>Department of Primary Industries and Regional Development</em> (<strong>DPIRD</strong>) for the purpose of assessing and determining exemptions under section 7 of the <em>Fish Resources Management Act 1994</em> (WA) — <strong>FRMA Act</strong>, including in some cases the application of biodiversity conservation conditions under section 7(2)(b) of the BC Act; and
                     </Typography>
                 </li>
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        With other Western Australian public sector agencies or oversight bodies where required or authorised under the <em>Privacy and Responsible Information Sharing Act 2024 (WA)</em>, the <em>Biodiversity Conservation Act 2016 (WA)</em>, the <em>Animal Welfare Act 2002 (WA)</em>, or other written law.
+                        with other Western Australian public sector agencies or oversight bodies where required or authorised under the <em>Privacy and Responsible Information Sharing Act 2024</em> (WA) — <strong>PRIS Act</strong>, the BC Act, the AW Act, the <em>Conservation and Land Management Act 1984</em> (WA) — <strong>CALM Act</strong>, or other written law.
                     </Typography>
                 </li>
             </ul>
 
             <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                You are required to provide this information where it is necessary to enable DBCA to assess applications and submissions and to perform its statutory functions under the <em>Biodiversity Conservation Act 2016 (WA)</em> and the <em>Animal Welfare Act 2002 (WA)</em>.
+                You are required to provide this information where it is necessary to enable DBCA to assess applications and submissions and to perform its statutory functions under the BC Act, the AW Act, the CALM Act, the CALM Regulations and to support DPIRD's statutory functions under the FRMA Act.
             </Typography>
 
             <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                If you choose not to provide the required personal information, DBCA may be unable to assess your application or submission, issue an approval or authorisation, or progress the matter further.
+                If you choose not to provide the required personal information, DBCA may be unable to assess your application or submission, issue an approval or authorisation, or progress the matter further. In these circumstances, you may not be able to obtain full lawful authority for the proposed activities and cannot legally proceed.
             </Typography>
 
             <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                DBCA will handle all personal information in accordance with the <em>Privacy and Responsible Information Sharing Act 2024 (WA)</em> and DBCA's Privacy Policy.
+                DBCA will handle all personal information in accordance with the PRIS Act and DBCA's Privacy Policy.
             </Typography>
 
             <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                For further details on how DBCA manages your personal information, please refer to DBCA's Privacy Policy.
+                For further details on how DBCA manages your personal information, please refer to <Link href="https://www.dbca.wa.gov.au/privacy" target="_blank" rel="noopener noreferrer" className="inline-flex items-center gap-1">DBCA's Privacy Policy<LaunchIcon fontSize="inherit" /></Link>.
             </Typography>
 
             <Typography variant="body2" color="textSecondary" sx={{ mb: 0 }}>
@@ -97,7 +108,7 @@ export const PrivacyContent = () => {
  */
 export const PrivacyPolicy = () => {
     return (
-        <Box sx={{ maxWidth: 960 }}>
+        <Box className="p-8 w-full min-w-4xl lg:w-4xl xl:w-5xl 2xl:w-6xl">
             <Typography variant="h4" gutterBottom>
                 Privacy Policy
             </Typography>

From 02fca18237d2767de6f89652655cb79208314985 Mon Sep 17 00:00:00 2001
From: dbca-serkan <serkan.kibritoglu@dbca.wa.gov.au>
Date: Wed, 29 Jul 2026 06:05:28 +0800
Subject: [PATCH 2/8] Collection notice update v2

---
 .../src/components/layout/form/FormLayout.tsx  |  2 +-
 .../components/layout/main/PrivacyPolicy.tsx   | 18 +++++++++---------
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/frontend/src/components/layout/form/FormLayout.tsx b/frontend/src/components/layout/form/FormLayout.tsx
index 197142f..854ffa6 100644
--- a/frontend/src/components/layout/form/FormLayout.tsx
+++ b/frontend/src/components/layout/form/FormLayout.tsx
@@ -223,7 +223,7 @@ export const FormLayout = () => {
         showSnackbar(
             <>
                 DBCA will collect, use and disclose your personal information in <br />
-                accordance with applicable privacy laws and DBCA's{" "}
+                accordance with applicable privacy laws and its{" "}
                 <Link href="/privacy" target="_blank" rel="noopener" color="inherit" underline="always">
                     Privacy Policy
                 </Link>.
diff --git a/frontend/src/components/layout/main/PrivacyPolicy.tsx b/frontend/src/components/layout/main/PrivacyPolicy.tsx
index ab4ef15..6090653 100644
--- a/frontend/src/components/layout/main/PrivacyPolicy.tsx
+++ b/frontend/src/components/layout/main/PrivacyPolicy.tsx
@@ -13,23 +13,23 @@ export const PrivacyContent = () => {
     return (
         <>
             <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                The Department of Biodiversity, Conservation and Attractions (<strong>DBCA</strong>) collects personal information to:
+                The Department of Biodiversity, Conservation and Attractions (DBCA) collects personal information to:
             </Typography>
 
             <ul className="pl-6 mb-4 text-inherit list-disc">
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        receive, assess and manage animal ethics submissions and approvals in accordance with section 8 of the <em>Animal Welfare Act 2002</em> (WA) — <strong>AW Act</strong>;
+                        receive, assess and manage animal ethics submissions and approvals in accordance with section 8 of the <em>Animal Welfare Act 2002</em> (WA) (AW Act);
                     </Typography>
                 </li>
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        assess and determine applications made under sections 40 and 45 of the <em>Biodiversity Conservation Act 2016</em> (WA) — <strong>BC Act</strong>;
+                        assess and determine applications made under sections 40 and 45 of the <em>Biodiversity Conservation Act 2016</em> (WA) (BC Act);
                     </Typography>
                 </li>
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        assess and determine applications made under regulation 89 of the <em>Conservation and Land Management Regulations 2002</em> (WA) — <strong>CALM Regulations</strong>;
+                        assess and determine applications made under regulation 89 of the <em>Conservation and Land Management Regulations 2002</em> (WA) (CALM Regulations);
                     </Typography>
                 </li>
                 <li>
@@ -65,17 +65,17 @@ export const PrivacyContent = () => {
                 </li>
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        with relevant advisory bodies, committees or experts (including the <em>Animal Ethics Committee</em> — <strong>AEC</strong>) for the purpose of evaluating applications and submissions;
+                        with relevant advisory bodies, committees or experts (including the <em>Animal Ethics Committee</em>) for the purpose of evaluating applications and submissions;
                     </Typography>
                 </li>
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        with the <em>Department of Primary Industries and Regional Development</em> (<strong>DPIRD</strong>) for the purpose of assessing and determining exemptions under section 7 of the <em>Fish Resources Management Act 1994</em> (WA) — <strong>FRMA Act</strong>, including in some cases the application of biodiversity conservation conditions under section 7(2)(b) of the BC Act; and
+                        with the <em>Department of Primary Industries and Regional Development</em> (DPIRD) for the purpose of assessing and determining exemptions under section 7 of the <em>Fish Resources Management Act 1994</em> (WA) (FRMA Act), including in some cases the application of biodiversity conservation conditions for the purposes of section 7(2)(b) of the BC Act; and
                     </Typography>
                 </li>
                 <li>
                     <Typography variant="body2" color="textSecondary">
-                        with other Western Australian public sector agencies or oversight bodies where required or authorised under the <em>Privacy and Responsible Information Sharing Act 2024</em> (WA) — <strong>PRIS Act</strong>, the BC Act, the AW Act, the <em>Conservation and Land Management Act 1984</em> (WA) — <strong>CALM Act</strong>, or other written law.
+                        with other Western Australian public sector agencies or oversight bodies where required or authorised under the <em>Privacy and Responsible Information Sharing Act 2024</em> (WA) (PRIS Act), the BC Act, the AW Act, the <em>Conservation and Land Management Act 1984</em> (WA) (CALM Act), or any other written law.
                     </Typography>
                 </li>
             </ul>
@@ -85,7 +85,7 @@ export const PrivacyContent = () => {
             </Typography>
 
             <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                If you choose not to provide the required personal information, DBCA may be unable to assess your application or submission, issue an approval or authorisation, or progress the matter further. In these circumstances, you may not be able to obtain full lawful authority for the proposed activities and cannot legally proceed.
+                If you choose not to provide the required personal information, DBCA may be unable to assess your application or submission, issue an approval or authorisation, or progress the matter further.
             </Typography>
 
             <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
@@ -97,7 +97,7 @@ export const PrivacyContent = () => {
             </Typography>
 
             <Typography variant="body2" color="textSecondary" sx={{ mb: 0 }}>
-                If you have any questions about how your personal information will be handled, or if you would like to access or correct your personal information, please contact DBCA on <strong>(08) 9219 9004</strong> or email <Link href="mailto:privacy@dbca.wa.gov.au">privacy@dbca.wa.gov.au</Link>.
+                If you have any questions about how your personal information will be handled, or if you would like to access or correct your personal information, please contact DBCA at email <Link href="mailto:privacy@dbca.wa.gov.au">privacy@dbca.wa.gov.au</Link>.
             </Typography>
         </>
     );

From 26983b046b174188b2fb13f8650aacf3ba905817 Mon Sep 17 00:00:00 2001
From: dbca-serkan <serkan.kibritoglu@dbca.wa.gov.au>
Date: Wed, 5 Aug 2026 09:40:45 +0800
Subject: [PATCH 3/8] Separate collection notice from privacy policy

---
 backend/api/tests/test_applications_api.py    |   8 +-
 backend/applications/serialisers.py           |  18 +--
 .../applications/tests/test_serialisers.py    |   8 +-
 backend/applications/tests/test_turnstile.py  |   2 +-
 backend/e2e/conftest.py                       |   2 +-
 .../tests/test_my_applications_workflows.py   |   6 +-
 .../e2e/tests/test_new_application_page.py    |   8 +-
 .../e2e/tests/test_user_end_to_end_flow.py    |   2 +-
 .../components/layout/main/NewApplication.tsx | 130 ++++++++++++++++--
 frontend/src/context/ApiManager.tsx           |   6 +-
 .../src/test/unit/context/api-manager.test.ts |   4 +-
 11 files changed, 147 insertions(+), 47 deletions(-)

diff --git a/backend/api/tests/test_applications_api.py b/backend/api/tests/test_applications_api.py
index 74a2397..3f1444c 100644
--- a/backend/api/tests/test_applications_api.py
+++ b/backend/api/tests/test_applications_api.py
@@ -20,7 +20,7 @@ def _build_create_payload(questionnaire):
         "questionnaire_id": questionnaire.id,
         "questionnaire_code": questionnaire.code,
         "questionnaire_version": questionnaire.version,
-        "privacy_consent_agreed": True,
+        "collection_notice_agreed": True,
         "turnstile_token": "test-token",
     }
 
@@ -87,16 +87,16 @@ def test_application_create_requires_privacy_consent(
     questionnaire,
     monkeypatch,
 ):
-    """Reject creation unless privacy consent is explicitly acknowledged."""
+    """Reject creation unless collection notice consent is explicitly acknowledged."""
     monkeypatch.setattr(application_serialisers, "verify_turnstile_token", lambda *_args, **_kwargs: True)
     payload = _build_create_payload(questionnaire)
-    payload["privacy_consent_agreed"] = False
+    payload["collection_notice_agreed"] = False
 
     api_client.force_authenticate(user=user)
     response = api_client.post("/api/applications", payload, format="json")
 
     assert response.status_code == status.HTTP_400_BAD_REQUEST
-    assert "privacy_consent_agreed" in response.data
+    assert "collection_notice_agreed" in response.data
 
 
 @pytest.mark.django_db
diff --git a/backend/applications/serialisers.py b/backend/applications/serialisers.py
index 5265c5d..0246e03 100644
--- a/backend/applications/serialisers.py
+++ b/backend/applications/serialisers.py
@@ -118,7 +118,7 @@ class ApplicationSerialiser(JsonSchemaSerialiserMixin, serializers.ModelSerializ
         required=False,
         read_only=True,
     )
-    privacy_consent_agreed = serializers.BooleanField(
+    collection_notice_agreed = serializers.BooleanField(
         required=False,
         write_only=True,
     )
@@ -151,7 +151,7 @@ class Meta:
             "questionnaire_name",
             "questionnaire_version",
             "questionnaire_sort_order",
-            "privacy_consent_agreed",
+            "collection_notice_agreed",
             "turnstile_token",
             "status",
             "created_at",
@@ -194,9 +194,9 @@ def get_fields(self, *args, **kwargs):
         # Questionnaire version is required when creating (to confirm data integrity)
         fields["questionnaire_version"].required = isPost
         fields["questionnaire_version"].read_only = not isPost
-        # Privacy consent acknowledgement is required when creating for auditability.
-        fields["privacy_consent_agreed"].required = isPost
-        fields["privacy_consent_agreed"].read_only = not isPost
+        # Collection notice acknowledgement is required when creating for auditability.
+        fields["collection_notice_agreed"].required = isPost
+        fields["collection_notice_agreed"].read_only = not isPost
         # Turnstile verification token is required during create and final submit PATCH.
         fields["turnstile_token"].required = isPost or isPatch
         fields["turnstile_token"].read_only = not (isPost or isPatch)
@@ -346,7 +346,7 @@ def validate(self, attrs):
         questionnaire_id = questionnaire_data.get("id")
         questionnaire_code = questionnaire_data.get("code")
         questionnaire_version = questionnaire_data.get("version")
-        privacy_consent_agreed = attrs.get("privacy_consent_agreed")
+        collection_notice_agreed = attrs.get("collection_notice_agreed")
 
         # Ensure all integrity fields are present.
         if (
@@ -359,11 +359,11 @@ def validate(self, attrs):
                 "Process slug, questionnaire id, code and version are required."
             )
 
-        # Creation is allowed only when explicit consent is acknowledged.
-        if privacy_consent_agreed is not True:
+        # Creation is allowed only when explicit collection notice consent is acknowledged.
+        if collection_notice_agreed is not True:
             raise exceptions.ValidationError(
                 {
-                    "privacy_consent_agreed": "This field must be true to create an application."
+                    "collection_notice_agreed": "This field must be true to create an application."
                 }
             )
 
diff --git a/backend/applications/tests/test_serialisers.py b/backend/applications/tests/test_serialisers.py
index 77b2e31..9a7bf71 100644
--- a/backend/applications/tests/test_serialisers.py
+++ b/backend/applications/tests/test_serialisers.py
@@ -181,7 +181,7 @@ def setUp(self):
 
     @patch("applications.serialisers.verify_turnstile_token")
     def test_create_requires_privacy_consent(self, mock_verify):
-        """ApplicationSerialiser requires privacy_consent_agreed."""
+        """ApplicationSerialiser requires collection_notice_agreed."""
         mock_verify.return_value = True
 
         from django.test import RequestFactory
@@ -196,7 +196,7 @@ def test_create_requires_privacy_consent(self, mock_verify):
             "questionnaire_id": self.questionnaire.id,
             "questionnaire_code": self.questionnaire.code,
             "questionnaire_version": self.questionnaire.version,
-            "privacy_consent_agreed": False,  # False
+            "collection_notice_agreed": False,  # False
             "turnstile_token": "test-token",
         }
 
@@ -206,7 +206,7 @@ def test_create_requires_privacy_consent(self, mock_verify):
         )
 
         self.assertFalse(serializer.is_valid())
-        self.assertIn("privacy_consent_agreed", serializer.errors or {})
+        self.assertIn("collection_notice_agreed", serializer.errors or {})
 
     @patch("applications.serialisers.verify_turnstile_token")
     def test_create_validates_questionnaire_exists(self, mock_verify):
@@ -225,7 +225,7 @@ def test_create_validates_questionnaire_exists(self, mock_verify):
             "questionnaire_id": 99999,  # Non-existent
             "questionnaire_code": "new-app",
             "questionnaire_version": 1,
-            "privacy_consent_agreed": True,
+            "collection_notice_agreed": True,
             "turnstile_token": "test-token",
         }
 
diff --git a/backend/applications/tests/test_turnstile.py b/backend/applications/tests/test_turnstile.py
index 79fcc5a..8c3bb69 100644
--- a/backend/applications/tests/test_turnstile.py
+++ b/backend/applications/tests/test_turnstile.py
@@ -78,7 +78,7 @@ def _build_payload(self):
             "questionnaire_id": self.questionnaire.id,
             "questionnaire_code": self.questionnaire.code,
             "questionnaire_version": self.questionnaire.version,
-            "privacy_consent_agreed": True,
+            "collection_notice_agreed": True,
             "turnstile_token": "test-token",
         }
 
diff --git a/backend/e2e/conftest.py b/backend/e2e/conftest.py
index 1b90585..e9746ce 100644
--- a/backend/e2e/conftest.py
+++ b/backend/e2e/conftest.py
@@ -464,7 +464,7 @@ def draft_application(authenticated_request_context_factory, e2e_users):
                 "questionnaire_id": questionnaire.id,
                 "questionnaire_code": questionnaire.code,
                 "questionnaire_version": questionnaire.version,
-                "privacy_consent_agreed": True,
+                "collection_notice_agreed": True,
                 "turnstile_token": "e2e-turnstile-token",
             }),
             headers={
diff --git a/backend/e2e/tests/test_my_applications_workflows.py b/backend/e2e/tests/test_my_applications_workflows.py
index 9becb53..be26aa7 100644
--- a/backend/e2e/tests/test_my_applications_workflows.py
+++ b/backend/e2e/tests/test_my_applications_workflows.py
@@ -39,7 +39,7 @@ def multiple_applications_fixture(authenticated_request_context_factory, e2e_use
                 "questionnaire_id": questionnaire.id,
                 "questionnaire_code": questionnaire.code,
                 "questionnaire_version": questionnaire.version,
-                "privacy_consent_agreed": True,
+                "collection_notice_agreed": True,
                 "turnstile_token": "e2e-turnstile-token",
             }),
             headers={
@@ -58,7 +58,7 @@ def multiple_applications_fixture(authenticated_request_context_factory, e2e_use
                 "questionnaire_id": questionnaire.id,
                 "questionnaire_code": questionnaire.code,
                 "questionnaire_version": questionnaire.version,
-                "privacy_consent_agreed": True,
+                "collection_notice_agreed": True,
                 "turnstile_token": "e2e-turnstile-token",
             }),
             headers={
@@ -105,7 +105,7 @@ def draft_application_for_discard(authenticated_request_context_factory, e2e_use
                 "questionnaire_id": questionnaire.id,
                 "questionnaire_code": questionnaire.code,
                 "questionnaire_version": questionnaire.version,
-                "privacy_consent_agreed": True,
+                "collection_notice_agreed": True,
                 "turnstile_token": "e2e-turnstile-token",
             }),
             headers={
diff --git a/backend/e2e/tests/test_new_application_page.py b/backend/e2e/tests/test_new_application_page.py
index 19418d6..50925c0 100644
--- a/backend/e2e/tests/test_new_application_page.py
+++ b/backend/e2e/tests/test_new_application_page.py
@@ -71,7 +71,7 @@ def test_new_application_requires_privacy_consent_before_creation(
                 "questionnaire_id": questionnaire.id,
                 "questionnaire_code": questionnaire.code,
                 "questionnaire_version": questionnaire.version,
-                "privacy_consent_agreed": False,
+                "collection_notice_agreed": False,
                 "turnstile_token": "e2e-token",
             }),
             headers={
@@ -85,7 +85,7 @@ def test_new_application_requires_privacy_consent_before_creation(
         request_context.dispose()
 
     assert status == 400
-    assert "privacy_consent_agreed" in payload
+    assert "collection_notice_agreed" in payload
 
 
 @pytest.mark.e2e
@@ -109,7 +109,7 @@ def test_new_application_requires_turnstile_token(
                 "questionnaire_id": questionnaire.id,
                 "questionnaire_code": questionnaire.code,
                 "questionnaire_version": questionnaire.version,
-                "privacy_consent_agreed": True,
+                "collection_notice_agreed": True,
             }),
             headers={
                 str(auth_context["csrf_header"]): str(auth_context["csrf_token"]),
@@ -146,7 +146,7 @@ def test_new_application_creation_succeeds_with_valid_payload(
                 "questionnaire_id": questionnaire.id,
                 "questionnaire_code": questionnaire.code,
                 "questionnaire_version": questionnaire.version,
-                "privacy_consent_agreed": True,
+                "collection_notice_agreed": True,
                 "turnstile_token": "e2e-token",
             }),
             headers={
diff --git a/backend/e2e/tests/test_user_end_to_end_flow.py b/backend/e2e/tests/test_user_end_to_end_flow.py
index 81d26e2..ecb0be3 100644
--- a/backend/e2e/tests/test_user_end_to_end_flow.py
+++ b/backend/e2e/tests/test_user_end_to_end_flow.py
@@ -46,7 +46,7 @@ def draft_application(authenticated_request_context_factory, e2e_users):
                 "questionnaire_id": questionnaire.id,
                 "questionnaire_code": questionnaire.code,
                 "questionnaire_version": questionnaire.version,
-                "privacy_consent_agreed": True,
+                "collection_notice_agreed": True,
                 "turnstile_token": "e2e-turnstile-token",
             }),
             headers={
diff --git a/frontend/src/components/layout/main/NewApplication.tsx b/frontend/src/components/layout/main/NewApplication.tsx
index a8c0a32..52de54c 100644
--- a/frontend/src/components/layout/main/NewApplication.tsx
+++ b/frontend/src/components/layout/main/NewApplication.tsx
@@ -1,4 +1,5 @@
 import CreateOutlinedIcon from '@mui/icons-material/CreateOutlined';
+import LaunchIcon from '@mui/icons-material/Launch';
 import LinkOutlinedIcon from '@mui/icons-material/LinkOutlined';
 import Box from "@mui/material/Box";
 import Button from "@mui/material/Button";
@@ -6,6 +7,7 @@ import Card from "@mui/material/Card";
 import Checkbox from "@mui/material/Checkbox";
 import FormControlLabel from "@mui/material/FormControlLabel";
 import IconButton from '@mui/material/IconButton';
+import Link from '@mui/material/Link';
 import MuiLink from '@mui/material/Link';
 import Stack from "@mui/material/Stack";
 import Tab from "@mui/material/Tab";
@@ -26,7 +28,6 @@ import type { IAuthorisationProcess, IQuestionnaireData } from "../../../context
 import { openNewTab } from '../../../context/Utils';
 import { EmptyStateComponent } from "./EmptyState";
 import { LoadingState } from "./LoadingState";
-import { PrivacyContent } from './PrivacyPolicy';
 
 // ============================================================================
 // Utility Functions & Interfaces
@@ -43,7 +44,6 @@ const generateQuestionnaireHash = (questionnaire: IQuestionnaireData): string =>
 };
 
 
-
 interface IProcessGroup {
     process: IAuthorisationProcess;
     questionnaires: IQuestionnaireData[];
@@ -73,15 +73,115 @@ const buildProcessGroups = (
 // Application Flow Functions
 // ============================================================================
 
+/**
+ * Displays the S717 collection notice content for application consent flow.
+ *
+ * The content structure mirrors the source notice so reviewers can validate wording,
+ * bullet points, and links before final legal sign-off.
+ */
+const CollectionNoticeContent = () => {
+    return (
+        <>
+            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                The Department of Biodiversity, Conservation and Attractions (DBCA) collects personal information to:
+            </Typography>
+
+            <ul className="pl-6 mb-4 text-inherit list-disc">
+                <li>
+                    <Typography variant="body2" color="textSecondary">
+                        receive, assess and manage animal ethics submissions and approvals in accordance with section 8 of the <em>Animal Welfare Act 2002</em> (WA) (AW Act);
+                    </Typography>
+                </li>
+                <li>
+                    <Typography variant="body2" color="textSecondary">
+                        assess and determine applications made under sections 40 and 45 of the <em>Biodiversity Conservation Act 2016</em> (WA) (BC Act);
+                    </Typography>
+                </li>
+                <li>
+                    <Typography variant="body2" color="textSecondary">
+                        assess and determine applications made under regulation 89 of the <em>Conservation and Land Management Regulations 2002</em> (WA) (CALM Regulations);
+                    </Typography>
+                </li>
+                <li>
+                    <Typography variant="body2" color="textSecondary">
+                        administer, monitor and enforce other authorisations, permits and approvals that it issues;
+                    </Typography>
+                </li>
+                <li>
+                    <Typography variant="body2" color="textSecondary">
+                        communicate with applicants, nominees, researchers, licence holders and authorised representatives regarding applications, approvals, compliance matters or related enquiries; and
+                    </Typography>
+                </li>
+                <li>
+                    <Typography variant="body2" color="textSecondary">
+                        meet its statutory obligations for record-keeping, reporting, audit and regulatory compliance.
+                    </Typography>
+                </li>
+            </ul>
+
+            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                The personal information collected may include names, contact details, organisational affiliation, role details and other information necessary to assess applications and issue lawful authority for activities.
+            </Typography>
+
+            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                DBCA may share this information:
+            </Typography>
+
+            <ul className="pl-6 mb-4 text-inherit list-disc">
+                <li>
+                    <Typography variant="body2" color="textSecondary">
+                        internally within DBCA for assessment, decision-making, compliance, audit and operational purposes;
+                    </Typography>
+                </li>
+                <li>
+                    <Typography variant="body2" color="textSecondary">
+                        with relevant advisory bodies, committees or experts (including the <em>Animal Ethics Committee</em>) for the purpose of evaluating applications and submissions;
+                    </Typography>
+                </li>
+                <li>
+                    <Typography variant="body2" color="textSecondary">
+                        with the <em>Department of Primary Industries and Regional Development</em> (DPIRD) for the purpose of assessing and determining exemptions under section 7 of the <em>Fish Resources Management Act 1994</em> (WA) (FRMA Act), including in some cases the application of biodiversity conservation conditions for the purposes of section 7(2)(b) of the BC Act; and
+                    </Typography>
+                </li>
+                <li>
+                    <Typography variant="body2" color="textSecondary">
+                        with other Western Australian public sector agencies or oversight bodies where required or authorised under the <em>Privacy and Responsible Information Sharing Act 2024</em> (WA) (PRIS Act), the BC Act, the AW Act, the <em>Conservation and Land Management Act 1984</em> (WA) (CALM Act), or any other written law.
+                    </Typography>
+                </li>
+            </ul>
+
+            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                You are required to provide this information where it is necessary to enable DBCA to assess applications and submissions and to perform its statutory functions under the BC Act, the AW Act, the CALM Act, the CALM Regulations and to support DPIRD's statutory functions under the FRMA Act.
+            </Typography>
+
+            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                If you choose not to provide the required personal information, DBCA may be unable to assess your application or submission, issue an approval or authorisation, or progress the matter further.
+            </Typography>
+
+            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                DBCA will handle all personal information in accordance with the PRIS Act and DBCA's Privacy Policy.
+            </Typography>
+
+            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                For further details on how DBCA manages your personal information, please refer to <Link href="https://www.dbca.wa.gov.au/privacy" target="_blank" rel="noopener noreferrer" className="inline-flex items-center gap-1">DBCA's Privacy Policy<LaunchIcon fontSize="inherit" /></Link>.
+            </Typography>
+
+            <Typography variant="body2" color="textSecondary" sx={{ mb: 0 }}>
+                If you have any questions about how your personal information will be handled, or if you would like to access or correct your personal information, please contact DBCA at email <Link href="mailto:privacy@dbca.wa.gov.au">privacy@dbca.wa.gov.au</Link>.
+            </Typography>
+        </>
+    );
+}
+
 const createNewApplication = async ({
     questionnaire,
-    privacyConsentAgreed,
+    collectionNoticeAgreed,
     turnstileToken,
     navigate,
     showSnackbar,
 }: {
     questionnaire: IQuestionnaireData;
-    privacyConsentAgreed: boolean;
+    collectionNoticeAgreed: boolean;
     turnstileToken: string;
     navigate: NavigateFunction;
     showSnackbar: (message: React.ReactNode, severity?: AlertColor) => void;
@@ -91,7 +191,7 @@ const createNewApplication = async ({
         questionnaireId: questionnaire.id,
         questionnaireCode: questionnaire.code,
         questionnaireVersion: questionnaire.version,
-        privacyConsentAgreed,
+        collectionNoticeAgreed,
         turnstileToken,
     }).catch((error: AxiosError) => {
         showSnackbar(
@@ -112,13 +212,13 @@ const createNewApplication = async ({
 }
 
 /**
- * Wraps the privacy notice with dialog-specific acknowledgement controls.
+ * Wraps the collection notice disclaimer with dialog-specific acknowledgement controls.
  *
  * The content stays reusable for standalone pages, while this component owns
  * the acceptance state required only for the application creation flow.
  * Renders a Turnstile verification widget and gates checkbox interaction on successful verification.
  */
-const PrivacyConsentDialogContent = ({
+const CollectionNoticeConsentDialogContent = ({
     onAgree,
     onDecline,
 }: {
@@ -194,7 +294,7 @@ const PrivacyConsentDialogContent = ({
     return (
         <>
             <Box sx={{ maxHeight: "60vh", overflowY: "auto", mb: 2, pr: 1 }}>
-                <PrivacyContent />
+                <CollectionNoticeContent />
             </Box>
 
             {/* Turnstile verification widget container with loading spinner */}
@@ -209,7 +309,7 @@ const PrivacyConsentDialogContent = ({
                 )}
             </Box>
 
-            {/* Privacy acknowledgement checkbox is disabled until verification succeeds */}
+            {/* Collection notice acknowledgement checkbox is disabled until verification succeeds */}
             <FormControlLabel
                 control={(
                     <Checkbox
@@ -279,13 +379,13 @@ const startApplication = async ({
     }
 
     /**
-     * Opens the PRIS consent window and gates application creation on acceptance.
+     * Opens the collection notice consent window and gates application creation on acceptance.
      */
-    const showPrivacyConsentDialog = () => {
+    const showCollectionNoticeConsentDialog = () => {
         showDialog({
             title: "Collection Notice Disclaimer",
             content: (
-                <PrivacyConsentDialogContent
+                <CollectionNoticeConsentDialogContent
                     onDecline={() => {
                         hideDialog();
                         setInProgress(false);
@@ -293,7 +393,7 @@ const startApplication = async ({
                     onAgree={async (turnstileToken: string) => {
                         await createNewApplication({
                             questionnaire,
-                            privacyConsentAgreed: true,
+                            collectionNoticeAgreed: true,
                             turnstileToken,
                             navigate,
                             showSnackbar,
@@ -331,7 +431,7 @@ const startApplication = async ({
                         color="warning"
                         onClick={async () => {
                             hideDialog();
-                            showPrivacyConsentDialog();
+                            showCollectionNoticeConsentDialog();
                         }}
                     >Confirm</Button>
                 </>
@@ -340,7 +440,7 @@ const startApplication = async ({
         });
     }
     else {
-        showPrivacyConsentDialog();
+        showCollectionNoticeConsentDialog();
     }
 }
 
diff --git a/frontend/src/context/ApiManager.tsx b/frontend/src/context/ApiManager.tsx
index 2659a4a..7fe572e 100644
--- a/frontend/src/context/ApiManager.tsx
+++ b/frontend/src/context/ApiManager.tsx
@@ -53,14 +53,14 @@ export class ApiManager {
         questionnaireId,
         questionnaireCode,
         questionnaireVersion,
-        privacyConsentAgreed,
+        collectionNoticeAgreed,
         turnstileToken,
     }: {
         processSlug: string;
         questionnaireId: number;
         questionnaireCode: string;
         questionnaireVersion: number;
-        privacyConsentAgreed: boolean;
+        collectionNoticeAgreed: boolean;
         turnstileToken: string;
     }): Promise<IApplicationData> {
         const requestConfig = ApiManager.getRequestConfig();
@@ -69,7 +69,7 @@ export class ApiManager {
             questionnaire_id: questionnaireId,
             questionnaire_code: questionnaireCode,
             questionnaire_version: questionnaireVersion,
-            privacy_consent_agreed: privacyConsentAgreed,
+            collection_notice_agreed: collectionNoticeAgreed,
             turnstile_token: turnstileToken,
         }, requestConfig);
 
diff --git a/frontend/src/test/unit/context/api-manager.test.ts b/frontend/src/test/unit/context/api-manager.test.ts
index b46d4c9..1c7ea30 100644
--- a/frontend/src/test/unit/context/api-manager.test.ts
+++ b/frontend/src/test/unit/context/api-manager.test.ts
@@ -37,7 +37,7 @@ describe("ApiManager", () => {
       questionnaireId: 5,
       questionnaireCode: "new",
       questionnaireVersion: 2,
-      privacyConsentAgreed: true,
+      collectionNoticeAgreed: true,
       turnstileToken: "ts-token",
     });
 
@@ -48,7 +48,7 @@ describe("ApiManager", () => {
       questionnaire_id: 5,
       questionnaire_code: "new",
       questionnaire_version: 2,
-      privacy_consent_agreed: true,
+      collection_notice_agreed: true,
       turnstile_token: "ts-token",
     });
     expect(config.baseURL).toBe("/api");

From 017bf1d840e84673f32812267a3a2dc34e5b945d Mon Sep 17 00:00:00 2001
From: dbca-serkan <serkan.kibritoglu@dbca.wa.gov.au>
Date: Wed, 5 Aug 2026 20:43:53 +0800
Subject: [PATCH 4/8] Refactor the collection notice dialog

---
 .../components/layout/main/NewApplication.tsx | 546 ++++++++----------
 .../layout/main/new-application.test.tsx      |  86 ++-
 2 files changed, 334 insertions(+), 298 deletions(-)

diff --git a/frontend/src/components/layout/main/NewApplication.tsx b/frontend/src/components/layout/main/NewApplication.tsx
index 52de54c..bbaad3e 100644
--- a/frontend/src/components/layout/main/NewApplication.tsx
+++ b/frontend/src/components/layout/main/NewApplication.tsx
@@ -8,18 +8,15 @@ import Checkbox from "@mui/material/Checkbox";
 import FormControlLabel from "@mui/material/FormControlLabel";
 import IconButton from '@mui/material/IconButton';
 import Link from '@mui/material/Link';
-import MuiLink from '@mui/material/Link';
 import Stack from "@mui/material/Stack";
 import Tab from "@mui/material/Tab";
 import Tabs from "@mui/material/Tabs";
 import Typography from "@mui/material/Typography";
 import React from "react";
 
-import type { AlertColor } from '@mui/material/Alert';
 import { AxiosError } from 'axios';
 import { useLoaderData, useNavigate, type NavigateFunction } from "react-router";
 import { ApiManager } from '../../../context/ApiManager';
-import type { DialogOptions } from '../../../context/DialogContext';
 import { useDialog, useResolvedPromise, useSnackbar } from '../../../context/Hooks';
 import { TurnstileManager } from '../../../context/TurnstileManager';
 import { activeStatuses, type IApplicationData } from "../../../context/types/Application";
@@ -74,156 +71,18 @@ const buildProcessGroups = (
 // ============================================================================
 
 /**
- * Displays the S717 collection notice content for application consent flow.
+ * Collection notice dialog with consent acknowledgement and Turnstile verification.
  *
- * The content structure mirrors the source notice so reviewers can validate wording,
- * bullet points, and links before final legal sign-off.
+ * Renders the S717 collection notice content with a Turnstile verification widget,
+ * acknowledgement checkbox, and action buttons. The checkbox and "I agree" button
+ * are disabled until Turnstile verification succeeds and user acknowledges.
  */
-const CollectionNoticeContent = () => {
-    return (
-        <>
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                The Department of Biodiversity, Conservation and Attractions (DBCA) collects personal information to:
-            </Typography>
-
-            <ul className="pl-6 mb-4 text-inherit list-disc">
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        receive, assess and manage animal ethics submissions and approvals in accordance with section 8 of the <em>Animal Welfare Act 2002</em> (WA) (AW Act);
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        assess and determine applications made under sections 40 and 45 of the <em>Biodiversity Conservation Act 2016</em> (WA) (BC Act);
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        assess and determine applications made under regulation 89 of the <em>Conservation and Land Management Regulations 2002</em> (WA) (CALM Regulations);
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        administer, monitor and enforce other authorisations, permits and approvals that it issues;
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        communicate with applicants, nominees, researchers, licence holders and authorised representatives regarding applications, approvals, compliance matters or related enquiries; and
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        meet its statutory obligations for record-keeping, reporting, audit and regulatory compliance.
-                    </Typography>
-                </li>
-            </ul>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                The personal information collected may include names, contact details, organisational affiliation, role details and other information necessary to assess applications and issue lawful authority for activities.
-            </Typography>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                DBCA may share this information:
-            </Typography>
-
-            <ul className="pl-6 mb-4 text-inherit list-disc">
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        internally within DBCA for assessment, decision-making, compliance, audit and operational purposes;
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        with relevant advisory bodies, committees or experts (including the <em>Animal Ethics Committee</em>) for the purpose of evaluating applications and submissions;
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        with the <em>Department of Primary Industries and Regional Development</em> (DPIRD) for the purpose of assessing and determining exemptions under section 7 of the <em>Fish Resources Management Act 1994</em> (WA) (FRMA Act), including in some cases the application of biodiversity conservation conditions for the purposes of section 7(2)(b) of the BC Act; and
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        with other Western Australian public sector agencies or oversight bodies where required or authorised under the <em>Privacy and Responsible Information Sharing Act 2024</em> (WA) (PRIS Act), the BC Act, the AW Act, the <em>Conservation and Land Management Act 1984</em> (WA) (CALM Act), or any other written law.
-                    </Typography>
-                </li>
-            </ul>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                You are required to provide this information where it is necessary to enable DBCA to assess applications and submissions and to perform its statutory functions under the BC Act, the AW Act, the CALM Act, the CALM Regulations and to support DPIRD's statutory functions under the FRMA Act.
-            </Typography>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                If you choose not to provide the required personal information, DBCA may be unable to assess your application or submission, issue an approval or authorisation, or progress the matter further.
-            </Typography>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                DBCA will handle all personal information in accordance with the PRIS Act and DBCA's Privacy Policy.
-            </Typography>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                For further details on how DBCA manages your personal information, please refer to <Link href="https://www.dbca.wa.gov.au/privacy" target="_blank" rel="noopener noreferrer" className="inline-flex items-center gap-1">DBCA's Privacy Policy<LaunchIcon fontSize="inherit" /></Link>.
-            </Typography>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 0 }}>
-                If you have any questions about how your personal information will be handled, or if you would like to access or correct your personal information, please contact DBCA at email <Link href="mailto:privacy@dbca.wa.gov.au">privacy@dbca.wa.gov.au</Link>.
-            </Typography>
-        </>
-    );
-}
-
-const createNewApplication = async ({
-    questionnaire,
-    collectionNoticeAgreed,
-    turnstileToken,
-    navigate,
-    showSnackbar,
+const CollectionNoticeDialog = ({
+    onConfirmed,
+    onDeclined,
 }: {
-    questionnaire: IQuestionnaireData;
-    collectionNoticeAgreed: boolean;
-    turnstileToken: string;
-    navigate: NavigateFunction;
-    showSnackbar: (message: React.ReactNode, severity?: AlertColor) => void;
-}) => {
-    const newApplication: IApplicationData | null = await ApiManager.createApplication({
-        processSlug: questionnaire.process_slug,
-        questionnaireId: questionnaire.id,
-        questionnaireCode: questionnaire.code,
-        questionnaireVersion: questionnaire.version,
-        collectionNoticeAgreed,
-        turnstileToken,
-    }).catch((error: AxiosError) => {
-        showSnackbar(
-            "Failed to create an application, please try again later. If problem persists, contact support.",
-            "error",
-        );
-        console.error('Error creating application:', error);
-        return null;
-    });
-
-    if (newApplication === null) {
-        return;
-    }
-
-    openNewTab(`/a/${newApplication.key}`, newApplication.key);
-
-    navigate('/my-applications', { viewTransition: true });
-}
-
-/**
- * Wraps the collection notice disclaimer with dialog-specific acknowledgement controls.
- *
- * The content stays reusable for standalone pages, while this component owns
- * the acceptance state required only for the application creation flow.
- * Renders a Turnstile verification widget and gates checkbox interaction on successful verification.
- */
-const CollectionNoticeConsentDialogContent = ({
-    onAgree,
-    onDecline,
-}: {
-    onAgree: (turnstileToken: string) => Promise<void>;
-    onDecline: () => void;
+    onConfirmed: (userAcknowledged: boolean, turnstileToken: string) => void;
+    onDeclined: () => void;
 }) => {
     const [isAccepted, setIsAccepted] = React.useState<boolean>(false);
     const [turnstileLoading, setTurnstileLoading] = React.useState<boolean>(true);
@@ -291,159 +150,148 @@ const CollectionNoticeConsentDialogContent = ({
      */
     const isVerificationComplete = !turnstileLoading && !turnstileError && !!turnstileToken;
 
+    const handleConfirmed = () => {
+        if (!turnstileToken) {
+            throw new Error("Turnstile token is missing. Cannot proceed with application creation.");
+        }
+        onConfirmed(isAccepted, turnstileToken);
+    };
+
     return (
-        <>
-            <Box sx={{ maxHeight: "60vh", overflowY: "auto", mb: 2, pr: 1 }}>
-                <CollectionNoticeContent />
-            </Box>
+        <Box>
+            <Box className="max-h-[60vh] overflow-y-auto border-b border-gray-300">
+                <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                    The Department of Biodiversity, Conservation and Attractions (DBCA) collects personal information to:
+                </Typography>
 
-            {/* Turnstile verification widget container with loading spinner */}
-            <Box sx={{ mb: 2 }}>
-                <Box sx={{ display: "flex", justifyContent: "center" }}>
-                    <div ref={turnstileContainerRef} />
-                </Box>
-                {turnstileError && (
-                    <Typography variant="body2" color="error" sx={{ mt: 1, textAlign: "center" }}>
-                        Verification failed: {turnstileError}
-                    </Typography>
-                )}
-            </Box>
+                <ul className="pl-6 mb-4 text-inherit list-disc">
+                    <li>
+                        <Typography variant="body2" color="textSecondary">
+                            receive, assess and manage animal ethics submissions and approvals in accordance with section 8 of the <em>Animal Welfare Act 2002</em> (WA) (AW Act);
+                        </Typography>
+                    </li>
+                    <li>
+                        <Typography variant="body2" color="textSecondary">
+                            assess and determine applications made under sections 40 and 45 of the <em>Biodiversity Conservation Act 2016</em> (WA) (BC Act);
+                        </Typography>
+                    </li>
+                    <li>
+                        <Typography variant="body2" color="textSecondary">
+                            assess and determine applications made under regulation 89 of the <em>Conservation and Land Management Regulations 2002</em> (WA) (CALM Regulations);
+                        </Typography>
+                    </li>
+                    <li>
+                        <Typography variant="body2" color="textSecondary">
+                            administer, monitor and enforce other authorisations, permits and approvals that it issues;
+                        </Typography>
+                    </li>
+                    <li>
+                        <Typography variant="body2" color="textSecondary">
+                            communicate with applicants, nominees, researchers, licence holders and authorised representatives regarding applications, approvals, compliance matters or related enquiries; and
+                        </Typography>
+                    </li>
+                    <li>
+                        <Typography variant="body2" color="textSecondary">
+                            meet its statutory obligations for record-keeping, reporting, audit and regulatory compliance.
+                        </Typography>
+                    </li>
+                </ul>
 
-            {/* Collection notice acknowledgement checkbox is disabled until verification succeeds */}
-            <FormControlLabel
-                control={(
-                    <Checkbox
-                        checked={isAccepted && isVerificationComplete}
-                        onChange={(_event, checked) => isVerificationComplete && setIsAccepted(checked)}
-                        disabled={!isVerificationComplete}
-                    />
-                )}
-                label="I acknowledge the above information and that DBCA will handle my personal information in accordance with applicable privacy laws and its Privacy Policy."
-            />
+                <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                    The personal information collected may include names, contact details, organisational affiliation, role details and other information necessary to assess applications and issue lawful authority for activities.
+                </Typography>
 
-            <Stack direction="row" spacing={2} sx={{ mt: 2, justifyContent: "space-between" }}>
-                <Button
-                    variant="outlined"
-                    color="inherit"
-                    onClick={onDecline}
-                >I decline</Button>
-                <Button
-                    variant="contained"
-                    color="primary"
-                    disabled={!isAccepted || !isVerificationComplete}
-                    onClick={async () => {
-                        if (turnstileToken) {
-                            await onAgree(turnstileToken);
-                        }
-                    }}
-                >I agree</Button>
-            </Stack>
-        </>
-    );
-}
+                <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                    DBCA may share this information:
+                </Typography>
 
-const startApplication = async ({
-    questionnaire, setInProgress, navigate,
-    showDialog, hideDialog, showSnackbar,
-}: {
-    questionnaire: IQuestionnaireData;
-    setInProgress: React.Dispatch<React.SetStateAction<boolean>>;
-    navigate: NavigateFunction;
-    showDialog: (options: DialogOptions) => void;
-    hideDialog: () => void;
-    showSnackbar: (message: React.ReactNode, severity?: AlertColor) => void,
-}) => {
-    setInProgress(true);
+                <ul className="pl-6 mb-4 text-inherit list-disc">
+                    <li>
+                        <Typography variant="body2" color="textSecondary">
+                            internally within DBCA for assessment, decision-making, compliance, audit and operational purposes;
+                        </Typography>
+                    </li>
+                    <li>
+                        <Typography variant="body2" color="textSecondary">
+                            with relevant advisory bodies, committees or experts (including the <em>Animal Ethics Committee</em>) for the purpose of evaluating applications and submissions;
+                        </Typography>
+                    </li>
+                    <li>
+                        <Typography variant="body2" color="textSecondary">
+                            with the <em>Department of Primary Industries and Regional Development</em> (DPIRD) for the purpose of assessing and determining exemptions under section 7 of the <em>Fish Resources Management Act 1994</em> (WA) (FRMA Act), including in some cases the application of biodiversity conservation conditions for the purposes of section 7(2)(b) of the BC Act; and
+                        </Typography>
+                    </li>
+                    <li>
+                        <Typography variant="body2" color="textSecondary">
+                            with other Western Australian public sector agencies or oversight bodies where required or authorised under the <em>Privacy and Responsible Information Sharing Act 2024</em> (WA) (PRIS Act), the BC Act, the AW Act, the <em>Conservation and Land Management Act 1984</em> (WA) (CALM Act), or any other written law.
+                        </Typography>
+                    </li>
+                </ul>
 
-    const existingApplications: IApplicationData[] | null = await ApiManager.fetchApplications()
-        .catch((error: AxiosError) => {
-            showSnackbar(
-                "Failed to fetch existing applications, please try again later. If problem persists, contact support.",
-                "error",
-            );
-            console.error('Error fetching applications:', error);
-            return null;
-        })
+                <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                    You are required to provide this information where it is necessary to enable DBCA to assess applications and submissions and to perform its statutory functions under the BC Act, the AW Act, the CALM Act, the CALM Regulations and to support DPIRD's statutory functions under the FRMA Act.
+                </Typography>
 
-    if (existingApplications === null) {
-        setInProgress(false);
-        return;
-    }
+                <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                    If you choose not to provide the required personal information, DBCA may be unable to assess your application or submission, issue an approval or authorisation, or progress the matter further.
+                </Typography>
 
-    const inProgressApplication = existingApplications.find((app: IApplicationData) =>
-        app.process_slug === questionnaire.process_slug && activeStatuses.includes(app.status)
-    );
+                <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                    DBCA will handle all personal information in accordance with the PRIS Act and DBCA's Privacy Policy.
+                </Typography>
 
-    if (import.meta.env.DEV) {
-        console.debug("Existing applications:", existingApplications);
-    }
+                <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                    For further details on how DBCA manages your personal information, please refer to <Link href="https://www.dbca.wa.gov.au/privacy" target="_blank" rel="noopener noreferrer" className="inline-flex items-center gap-1">DBCA's Privacy Policy<LaunchIcon fontSize="inherit" /></Link>.
+                </Typography>
 
-    /**
-     * Opens the collection notice consent window and gates application creation on acceptance.
-     */
-    const showCollectionNoticeConsentDialog = () => {
-        showDialog({
-            title: "Collection Notice Disclaimer",
-            content: (
-                <CollectionNoticeConsentDialogContent
-                    onDecline={() => {
-                        hideDialog();
-                        setInProgress(false);
-                    }}
-                    onAgree={async (turnstileToken: string) => {
-                        await createNewApplication({
-                            questionnaire,
-                            collectionNoticeAgreed: true,
-                            turnstileToken,
-                            navigate,
-                            showSnackbar,
-                        }).finally(() => {
-                            hideDialog();
-                            setInProgress(false);
-                        });
-                    }}
+                <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
+                    If you have any questions about how your personal information will be handled, or if you would like to access or correct your personal information, please contact DBCA at email <Link href="mailto:privacy@dbca.wa.gov.au">privacy@dbca.wa.gov.au</Link>.
+                </Typography>
+
+                {/* Turnstile verification widget container with loading spinner */}
+                <Box sx={{ mb: 2 }}>
+                    <Box sx={{ display: "flex", justifyContent: "center" }}>
+                        <div ref={turnstileContainerRef} />
+                    </Box>
+                    {turnstileError && (
+                        <Typography variant="body2" color="error" sx={{ mt: 1, textAlign: "center" }}>
+                            Verification failed: {turnstileError}
+                        </Typography>
+                    )}
+                </Box>
+
+                {/* Collection notice acknowledgement checkbox is disabled until verification succeeds */}
+                <FormControlLabel
+                    control={(
+                        <Checkbox
+                            checked={isAccepted && isVerificationComplete}
+                            onChange={(_event, checked) => isVerificationComplete && setIsAccepted(checked)}
+                            disabled={!isVerificationComplete}
+                        />
+                    )}
+                    label="I acknowledge the above information and that DBCA will handle my personal information in accordance with applicable privacy laws and its Privacy Policy."
                 />
-            ),
-            onClose: () => setInProgress(false),
-        });
-    }
+            </Box>
 
-    if (inProgressApplication) {
-        showDialog({
-            title: "Create a new application?",
-            content: <>
-                <Typography>You already have <MuiLink href="/my-applications">application(s)</MuiLink> that
-                    are in-progress for this authorisation.</Typography><br />
-                <Typography>Are you sure you want to proceed and create a new one?</Typography>
-            </>,
-            actions: (
-                <>
-                    <Button
-                        variant="outlined"
-                        color="inherit"
-                        onClick={() => {
-                            hideDialog();
-                            setInProgress(false);
-                        }}
-                    >Cancel</Button>
-                    <Button
-                        variant="contained"
-                        color="warning"
-                        onClick={async () => {
-                            hideDialog();
-                            showCollectionNoticeConsentDialog();
-                        }}
-                    >Confirm</Button>
-                </>
-            ),
-            onClose: () => setInProgress(false),
-        });
-    }
-    else {
-        showCollectionNoticeConsentDialog();
-    }
+            {/* Action buttons */}
+            <Stack direction="row" sx={{ justifyContent: "space-between", mt: 2 }}>
+                <Button variant="outlined" color="inherit" onClick={onDeclined}>
+                    I decline
+                </Button>
+                <Button
+                    variant="contained"
+                    color="primary"
+                    disabled={!isAccepted || !isVerificationComplete}
+                    onClick={handleConfirmed}
+                >
+                    I agree
+                </Button>
+            </Stack>
+        </Box>
+    );
 }
 
+
 // ============================================================================
 // Component Hierarchy (Child to Parent)
 // ============================================================================
@@ -532,6 +380,118 @@ const Questionnaire = ({
         });
     };
 
+
+    /**
+     * Starts a new application process after checking for same type existing in-progress applications
+     * and showing a collection notice dialog for consent and Turnstile verification.
+     */
+    const onStartApplication = async () => {
+        setInProgress(true);
+
+        // Fetch existing applications to check for in-progress applications of the same type.
+        const existingApplications: IApplicationData[] | null = await ApiManager.fetchApplications()
+            .catch((error: AxiosError) => {
+                showSnackbar(
+                    "Failed to fetch existing applications, please try again later. If problem persists, contact support.",
+                    "error",
+                );
+                console.error('Error fetching applications:', error);
+                return null;
+            })
+
+        // Error fetching existing applications, stop the flow and reset inProgress state.
+        if (existingApplications === null) {
+            setInProgress(false);
+            return;
+        }
+
+        if (import.meta.env.DEV) {
+            console.debug("Existing same process applications:", existingApplications);
+        }
+
+        // Find any existing applications that are in-progress for the same process type.
+        const inProgressApplication = existingApplications.find((app: IApplicationData) =>
+            app.process_slug === questionnaire.process_slug && activeStatuses.includes(app.status)
+        );
+
+        /**
+         * Opens the collection notice consent window and proceeds to create a new application 
+         * if Turnstile verification succeeds and the user acknowledges the collection notice.
+         */
+        const showCollectionNoticeDialog = () => {
+            const onConfirmed = (userAcknowledged: boolean, turnstileToken: string) => {
+                ApiManager.createApplication({
+                    processSlug: questionnaire.process_slug,
+                    questionnaireId: questionnaire.id,
+                    questionnaireCode: questionnaire.code,
+                    questionnaireVersion: questionnaire.version,
+                    collectionNoticeAgreed: userAcknowledged,
+                    turnstileToken,
+                }).then((newApplication) => {
+                    openNewTab(`/a/${newApplication.key}`, newApplication.key);
+                    navigate('/my-applications', { viewTransition: true });
+                    return true;
+                }).catch((error: AxiosError) => {
+                    console.error('Error creating application:', error);
+                    showSnackbar(
+                        "Failed to create an application, please try again later. If problem persists, contact support.",
+                        "error",
+                    );
+                    return false;
+                }).finally(() => {
+                    hideDialog();
+                    setInProgress(false);
+                });
+            };
+
+            const onDeclined = () => {
+                hideDialog();
+                setInProgress(false);
+            };
+
+            showDialog({
+                title: "Collection Notice Disclaimer",
+                content: <CollectionNoticeDialog onConfirmed={onConfirmed} onDeclined={onDeclined} />,
+                onClose: () => setInProgress(false),
+            });
+        }
+
+        if (inProgressApplication) {
+            showDialog({
+                title: "Create a new application?",
+                content: <>
+                    <Typography>You already have <Link href="/my-applications">application(s)</Link> that
+                        are in-progress for this authorisation.</Typography><br />
+                    <Typography>Are you sure you want to proceed and create a new one?</Typography>
+                </>,
+                actions: (
+                    <>
+                        <Button
+                            variant="outlined"
+                            color="inherit"
+                            onClick={() => {
+                                hideDialog();
+                                setInProgress(false);
+                            }}
+                        >Cancel</Button>
+                        <Button
+                            variant="contained"
+                            color="warning"
+                            onClick={async () => {
+                                hideDialog();
+                                showCollectionNoticeDialog();
+                            }}
+                        >Confirm</Button>
+                    </>
+                ),
+                onClose: () => setInProgress(false),
+            });
+        }
+        else {
+            showCollectionNoticeDialog();
+        }
+    }
+
     return (
         <Box sx={{ p: 1, minHeight: 300, display: "flex", flexDirection: "column", position: "relative" }}>
             <Typography variant="h6" gutterBottom>
@@ -558,13 +518,7 @@ const Questionnaire = ({
                     loading={inProgress}
                     disabled={inProgress}
                     startIcon={<CreateOutlinedIcon />}
-                    onClick={() => startApplication({
-                        questionnaire,
-                        setInProgress,
-                        navigate,
-                        showDialog, hideDialog,
-                        showSnackbar,
-                    })}
+                    onClick={onStartApplication}
                 >Start Application</Button>
                 <Box sx={{ textAlign: "right" }}>
                     <Stack direction="row" spacing={2} sx={{ flexWrap: "wrap" }} useFlexGap>
diff --git a/frontend/src/test/unit/components/layout/main/new-application.test.tsx b/frontend/src/test/unit/components/layout/main/new-application.test.tsx
index 17a25fd..1280b76 100644
--- a/frontend/src/test/unit/components/layout/main/new-application.test.tsx
+++ b/frontend/src/test/unit/components/layout/main/new-application.test.tsx
@@ -53,12 +53,17 @@ vi.mock("../../../../../context/ApiManager", () => ({
   ApiManager: apiMocks,
 }));
 
-vi.mock("../../../../../context/TurnstileManager", () => ({
-  TurnstileManager: {
+const { TurnstileManagerMock } = vi.hoisted(() => ({
+  TurnstileManagerMock: {
     preload: vi.fn(),
+    render: vi.fn(),
   },
 }));
 
+vi.mock("../../../../../context/TurnstileManager", () => ({
+  TurnstileManager: TurnstileManagerMock,
+}));
+
 import { NewApplication } from "../../../../../components/layout/main/NewApplication";
 
 
@@ -511,6 +516,83 @@ describe("NewApplication", () => {
     });
   });
 
+  describe("Collection Notice Dialog - Button State", () => {
+    it("keeps 'I agree' button disabled until both Turnstile verification and consent checkbox are ready", async () => {
+      useResolvedPromiseMock.mockReturnValue([
+        [
+          makeQuestionnaire({
+            process_slug: "s40",
+            name: "New application",
+          }),
+        ],
+        false,
+      ]);
+      apiMocks.fetchApplications.mockResolvedValue([]);
+
+      render(<NewApplication />);
+
+      fireEvent.click(screen.getByRole("button", { name: "Start Application" }));
+
+      await waitFor(() => {
+        expect(showDialogMock).toHaveBeenCalledWith(
+          expect.objectContaining({ title: "Collection Notice Disclaimer" }),
+        );
+      });
+
+      // Get the dialog content (CollectionNoticeDialog component)
+      const dialogOptions = showDialogMock.mock.calls[0][0];
+      const dialogContent = dialogOptions.content;
+
+      // Mock TurnstileManager.render to simulate successful verification
+      let capturedOnSuccess: ((token: string) => void) | null = null;
+      TurnstileManagerMock.render.mockImplementation(
+        (_container: HTMLElement, callbacks: { onSuccess: (token: string) => void }) => {
+          capturedOnSuccess = callbacks.onSuccess;
+          return Promise.resolve();
+        }
+      );
+
+      // Render the dialog content which now includes the buttons
+      render(dialogContent);
+
+      // Initially the button should be disabled (before Turnstile verification)
+      const agreeButton = screen.getByRole("button", { name: "I agree" });
+      expect(agreeButton).toHaveAttribute("disabled");
+
+      // Also check that the checkbox is disabled until Turnstile succeeds
+      const checkbox = screen.getByRole("checkbox", {
+        name: /I acknowledge the above information/i,
+      });
+      expect(checkbox).toHaveAttribute("disabled");
+
+      // Simulate Turnstile verification succeeding
+      await waitFor(() => {
+        expect(capturedOnSuccess).not.toBeNull();
+      });
+
+      if (capturedOnSuccess) {
+        (capturedOnSuccess as (token: string) => void)("fake-turnstile-token");
+      }
+
+      // After Turnstile succeeds, the checkbox should be enabled
+      await waitFor(() => {
+        expect(checkbox).not.toHaveAttribute("disabled");
+      });
+
+      // But button should still be disabled because checkbox is not yet checked
+      expect(agreeButton).toHaveAttribute("disabled");
+
+      // User clicks the checkbox to acknowledge
+      fireEvent.click(checkbox);
+
+      // Now both conditions are met, button should be enabled
+      await waitFor(() => {
+        expect(agreeButton).not.toHaveAttribute("disabled");
+      });
+    });
+  });
+
+
   describe("Questionnaire Rendering", () => {
     it("displays questionnaire description when available", () => {
       useResolvedPromiseMock.mockReturnValue([

From df236063017c72430018de038b9afd394a076c38 Mon Sep 17 00:00:00 2001
From: dbca-serkan <serkan.kibritoglu@dbca.wa.gov.au>
Date: Thu, 6 Aug 2026 09:25:38 +0800
Subject: [PATCH 5/8] Add "scroll for more" indicator

---
 .../components/layout/main/NewApplication.tsx | 81 ++++++++++++++++---
 1 file changed, 69 insertions(+), 12 deletions(-)

diff --git a/frontend/src/components/layout/main/NewApplication.tsx b/frontend/src/components/layout/main/NewApplication.tsx
index bbaad3e..fb868a4 100644
--- a/frontend/src/components/layout/main/NewApplication.tsx
+++ b/frontend/src/components/layout/main/NewApplication.tsx
@@ -1,4 +1,5 @@
 import CreateOutlinedIcon from '@mui/icons-material/CreateOutlined';
+import ArrowDownwardRoundedIcon from '@mui/icons-material/ArrowDownwardRounded';
 import LaunchIcon from '@mui/icons-material/Launch';
 import LinkOutlinedIcon from '@mui/icons-material/LinkOutlined';
 import Box from "@mui/material/Box";
@@ -88,8 +89,10 @@ const CollectionNoticeDialog = ({
     const [turnstileLoading, setTurnstileLoading] = React.useState<boolean>(true);
     const [turnstileError, setTurnstileError] = React.useState<string | null>(null);
     const [turnstileToken, setTurnstileToken] = React.useState<string | null>(null);
+    const [showScrollButton, setShowScrollButton] = React.useState<boolean>(true);
     const hasInitializedRef = React.useRef<boolean>(false);
     const turnstileContainerRef = React.useRef<HTMLDivElement | null>(null);
+    const scrollableContentRef = React.useRef<HTMLDivElement | null>(null);
 
     /**
     * Render the Turnstile widget on component mount and wait for its callbacks
@@ -157,13 +160,59 @@ const CollectionNoticeDialog = ({
         onConfirmed(isAccepted, turnstileToken);
     };
 
+    // Scroll down indicator button handler
+    const handleScrollDown = () => {
+        if (scrollableContentRef.current) {
+            scrollableContentRef.current.scrollBy({
+                top: scrollableContentRef.current.clientHeight,
+                behavior: 'smooth',
+            });
+        }
+        setShowScrollButton(false);
+    };
+
+    // Hide the scroll down button when the user scrolls manually
+    React.useEffect(() => {
+        const scrollableContent = scrollableContentRef.current;
+        if (!scrollableContent) return;
+
+        const handleScroll = () => {
+            setShowScrollButton(false);
+        };
+
+        scrollableContent.addEventListener('scroll', handleScroll);
+        return () => {
+            scrollableContent.removeEventListener('scroll', handleScroll);
+        };
+    }, []);
+
+    // Determine if content is actually scrollable using ResizeObserver
+    React.useEffect(() => {
+        const scrollableContent = scrollableContentRef.current;
+        if (!scrollableContent) return;
+
+        const resizeObserver = new ResizeObserver(() => {
+            const isScrollable = scrollableContent.scrollHeight > scrollableContent.clientHeight;
+            setShowScrollButton(isScrollable);
+        });
+
+        resizeObserver.observe(scrollableContent);
+
+        return () => {
+            resizeObserver.disconnect();
+        };
+    }, []);
+
+
     return (
-        <Box>
-            <Box className="max-h-[60vh] overflow-y-auto border-b border-gray-300">
+        <>
+            <Box
+                ref={scrollableContentRef}
+                className="max-h-[60vh] overflow-y-auto border-b border-gray-300"
+            >
                 <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
                     The Department of Biodiversity, Conservation and Attractions (DBCA) collects personal information to:
                 </Typography>
-
                 <ul className="pl-6 mb-4 text-inherit list-disc">
                     <li>
                         <Typography variant="body2" color="textSecondary">
@@ -196,15 +245,12 @@ const CollectionNoticeDialog = ({
                         </Typography>
                     </li>
                 </ul>
-
                 <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
                     The personal information collected may include names, contact details, organisational affiliation, role details and other information necessary to assess applications and issue lawful authority for activities.
                 </Typography>
-
                 <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
                     DBCA may share this information:
                 </Typography>
-
                 <ul className="pl-6 mb-4 text-inherit list-disc">
                     <li>
                         <Typography variant="body2" color="textSecondary">
@@ -227,23 +273,18 @@ const CollectionNoticeDialog = ({
                         </Typography>
                     </li>
                 </ul>
-
                 <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
                     You are required to provide this information where it is necessary to enable DBCA to assess applications and submissions and to perform its statutory functions under the BC Act, the AW Act, the CALM Act, the CALM Regulations and to support DPIRD's statutory functions under the FRMA Act.
                 </Typography>
-
                 <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
                     If you choose not to provide the required personal information, DBCA may be unable to assess your application or submission, issue an approval or authorisation, or progress the matter further.
                 </Typography>
-
                 <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
                     DBCA will handle all personal information in accordance with the PRIS Act and DBCA's Privacy Policy.
                 </Typography>
-
                 <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
                     For further details on how DBCA manages your personal information, please refer to <Link href="https://www.dbca.wa.gov.au/privacy" target="_blank" rel="noopener noreferrer" className="inline-flex items-center gap-1">DBCA's Privacy Policy<LaunchIcon fontSize="inherit" /></Link>.
                 </Typography>
-
                 <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
                     If you have any questions about how your personal information will be handled, or if you would like to access or correct your personal information, please contact DBCA at email <Link href="mailto:privacy@dbca.wa.gov.au">privacy@dbca.wa.gov.au</Link>.
                 </Typography>
@@ -271,6 +312,22 @@ const CollectionNoticeDialog = ({
                     )}
                     label="I acknowledge the above information and that DBCA will handle my personal information in accordance with applicable privacy laws and its Privacy Policy."
                 />
+
+                {/* Scroll down indicator button - sticky at bottom, disappears after click */}
+                {showScrollButton && (
+                    <Box className="sticky bottom-0 mx-auto w-fit pb-4">
+                        <IconButton
+                            color="primary"
+                            onClick={handleScrollDown}
+                            size="medium"
+                            sx={{ borderColor: 'primary.main', backgroundColor: theme => theme.palette.background.default }}
+                            className="border! animate-bounce"
+                            disableRipple
+                        >
+                            <ArrowDownwardRoundedIcon />
+                        </IconButton>
+                    </Box>
+                )}
             </Box>
 
             {/* Action buttons */}
@@ -287,7 +344,7 @@ const CollectionNoticeDialog = ({
                     I agree
                 </Button>
             </Stack>
-        </Box>
+        </>
     );
 }
 

From 72c406073649ac2ef4ede386b7d5b47e052d42e4 Mon Sep 17 00:00:00 2001
From: dbca-serkan <serkan.kibritoglu@dbca.wa.gov.au>
Date: Thu, 6 Aug 2026 09:30:06 +0800
Subject: [PATCH 6/8] Fix frontend test

---
 .../unit/components/layout/main/new-application.test.tsx  | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/frontend/src/test/unit/components/layout/main/new-application.test.tsx b/frontend/src/test/unit/components/layout/main/new-application.test.tsx
index 1280b76..45866ab 100644
--- a/frontend/src/test/unit/components/layout/main/new-application.test.tsx
+++ b/frontend/src/test/unit/components/layout/main/new-application.test.tsx
@@ -10,6 +10,14 @@ Object.assign(navigator, {
   },
 });
 
+// Mock ResizeObserver
+class MockResizeObserver {
+  observe = vi.fn();
+  unobserve = vi.fn();
+  disconnect = vi.fn();
+}
+(globalThis as any).ResizeObserver = MockResizeObserver;
+
 const {
   apiMocks,
   hideDialogMock,

From 136c2f8ebb940bd951d60cd2f1f60ac2794f681c Mon Sep 17 00:00:00 2001
From: dbca-serkan <serkan.kibritoglu@dbca.wa.gov.au>
Date: Thu, 6 Aug 2026 11:08:38 +0800
Subject: [PATCH 7/8] Fix TS lint

---
 .../test/unit/components/layout/main/new-application.test.tsx   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/frontend/src/test/unit/components/layout/main/new-application.test.tsx b/frontend/src/test/unit/components/layout/main/new-application.test.tsx
index 45866ab..d725535 100644
--- a/frontend/src/test/unit/components/layout/main/new-application.test.tsx
+++ b/frontend/src/test/unit/components/layout/main/new-application.test.tsx
@@ -16,7 +16,7 @@ class MockResizeObserver {
   unobserve = vi.fn();
   disconnect = vi.fn();
 }
-(globalThis as any).ResizeObserver = MockResizeObserver;
+(globalThis as Record<string, unknown>).ResizeObserver = MockResizeObserver;
 
 const {
   apiMocks,

From 5a27a35f4fc6e4e0a95c5f2ae652a3bdbf360dc3 Mon Sep 17 00:00:00 2001
From: dbca-serkan <serkan.kibritoglu@dbca.wa.gov.au>
Date: Thu, 6 Aug 2026 15:57:51 +0800
Subject: [PATCH 8/8] Separate "Privacy Statement"

---
 CHANGELOG.md                                  |   2 +
 .../src/components/layout/form/FormLayout.tsx |   6 +-
 .../src/components/layout/main/MainLayout.tsx |   1 +
 .../components/layout/main/NewApplication.tsx |   6 +-
 .../components/layout/main/PrivacyPolicy.tsx  | 118 ------
 .../layout/main/PrivacyStatement.tsx          | 373 ++++++++++++++++++
 frontend/src/router.tsx                       |   6 +-
 .../layout/main/main-layout.test.tsx          |   4 +-
 .../layout/main/privacy-policy.test.tsx       |  15 -
 .../layout/main/privacy-statement.test.tsx    |  39 ++
 10 files changed, 426 insertions(+), 144 deletions(-)
 delete mode 100644 frontend/src/components/layout/main/PrivacyPolicy.tsx
 create mode 100644 frontend/src/components/layout/main/PrivacyStatement.tsx
 delete mode 100644 frontend/src/test/unit/components/layout/main/privacy-policy.test.tsx
 create mode 100644 frontend/src/test/unit/components/layout/main/privacy-statement.test.tsx

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 907e29f..79f315f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,8 @@ Entries should be concise, single-sentence summaries without excessive technical
 - Added discard and revert functionality allowing applicants to abandon draft applications by moving them to DISCARDED status, with the ability to restore them back to DRAFT for continued editing.
 - Added tab-based filtering system for My Applications page enabling applicants to organise applications by status category (Active, Terminated, Finalised), improving visibility of application lifecycle stages.
 - Added permanent links to questionnaire types on the new application page, enabling users to share and bookmark direct links to specific application types.
+- Added a full privacy statement page with section-by-section expandable content and dedicated contact details. Also updated the 
+"Collection Notice Disclaimer" that we request applicants to acknowledge and agree prior to creating new applications.
 - Added a new favicon, replacing the default placeholder.
 - Added comprehensive feature development guide ([FEATURE-DEVELOPMENT.md](docs/FEATURE-DEVELOPMENT.md)) consolidating all mandatory best practices, testing requirements, code quality standards, and common commands in a single reference document for AI agents and developers.
 - Added new frontend as well as E2E tests for comprehensive coverage of "New application" page functionality.
diff --git a/frontend/src/components/layout/form/FormLayout.tsx b/frontend/src/components/layout/form/FormLayout.tsx
index 854ffa6..3ff28e6 100644
--- a/frontend/src/components/layout/form/FormLayout.tsx
+++ b/frontend/src/components/layout/form/FormLayout.tsx
@@ -222,10 +222,10 @@ export const FormLayout = () => {
         privacyNoticeShown.current = true;
         showSnackbar(
             <>
-                DBCA will collect, use and disclose your personal information in <br />
-                accordance with applicable privacy laws and its{" "}
+                Your personal information is collected, used and disclosed in <br />
+                accordance with applicable privacy laws and our{" "}
                 <Link href="/privacy" target="_blank" rel="noopener" color="inherit" underline="always">
-                    Privacy Policy
+                    Privacy Statement
                 </Link>.
             </>,
             "info",
diff --git a/frontend/src/components/layout/main/MainLayout.tsx b/frontend/src/components/layout/main/MainLayout.tsx
index f092fa8..404b0a5 100644
--- a/frontend/src/components/layout/main/MainLayout.tsx
+++ b/frontend/src/components/layout/main/MainLayout.tsx
@@ -90,6 +90,7 @@ export const MainLayout = ({
                             value={footerRoute.external ? `external:${footerRoute.path}` : footerRoute.path}
                             sx={{
                                 minWidth: 'auto',
+                                textWrap: 'nowrap',
                                 px: 2,
                                 '& .MuiBottomNavigationAction-label': {
                                     display: 'none',
diff --git a/frontend/src/components/layout/main/NewApplication.tsx b/frontend/src/components/layout/main/NewApplication.tsx
index fb868a4..7165499 100644
--- a/frontend/src/components/layout/main/NewApplication.tsx
+++ b/frontend/src/components/layout/main/NewApplication.tsx
@@ -280,10 +280,10 @@ const CollectionNoticeDialog = ({
                     If you choose not to provide the required personal information, DBCA may be unable to assess your application or submission, issue an approval or authorisation, or progress the matter further.
                 </Typography>
                 <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                    DBCA will handle all personal information in accordance with the PRIS Act and DBCA's Privacy Policy.
+                    DBCA will handle all personal information in accordance with the PRIS Act and DBCA's Privacy Statement.
                 </Typography>
                 <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                    For further details on how DBCA manages your personal information, please refer to <Link href="https://www.dbca.wa.gov.au/privacy" target="_blank" rel="noopener noreferrer" className="inline-flex items-center gap-1">DBCA's Privacy Policy<LaunchIcon fontSize="inherit" /></Link>.
+                    For further details on how DBCA manages your personal information, please refer to <Link href="https://www.dbca.wa.gov.au/privacy" target="_blank" rel="noopener noreferrer" className="inline-flex items-center gap-1">DBCA's Privacy Statement<LaunchIcon fontSize="inherit" /></Link>.
                 </Typography>
                 <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
                     If you have any questions about how your personal information will be handled, or if you would like to access or correct your personal information, please contact DBCA at email <Link href="mailto:privacy@dbca.wa.gov.au">privacy@dbca.wa.gov.au</Link>.
@@ -310,7 +310,7 @@ const CollectionNoticeDialog = ({
                             disabled={!isVerificationComplete}
                         />
                     )}
-                    label="I acknowledge the above information and that DBCA will handle my personal information in accordance with applicable privacy laws and its Privacy Policy."
+                    label="I acknowledge the above information and that DBCA will handle my personal information in accordance with applicable privacy laws and its Privacy Statement."
                 />
 
                 {/* Scroll down indicator button - sticky at bottom, disappears after click */}
diff --git a/frontend/src/components/layout/main/PrivacyPolicy.tsx b/frontend/src/components/layout/main/PrivacyPolicy.tsx
deleted file mode 100644
index 6090653..0000000
--- a/frontend/src/components/layout/main/PrivacyPolicy.tsx
+++ /dev/null
@@ -1,118 +0,0 @@
-import Box from "@mui/material/Box";
-import Link from "@mui/material/Link";
-import Typography from "@mui/material/Typography";
-import LaunchIcon from "@mui/icons-material/Launch";
-
-/**
- * Displays the S717 privacy collection notice content.
- *
- * The content structure mirrors the source notice so reviewers can validate wording,
- * bullet points, and links before final legal sign-off.
- */
-export const PrivacyContent = () => {
-    return (
-        <>
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                The Department of Biodiversity, Conservation and Attractions (DBCA) collects personal information to:
-            </Typography>
-
-            <ul className="pl-6 mb-4 text-inherit list-disc">
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        receive, assess and manage animal ethics submissions and approvals in accordance with section 8 of the <em>Animal Welfare Act 2002</em> (WA) (AW Act);
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        assess and determine applications made under sections 40 and 45 of the <em>Biodiversity Conservation Act 2016</em> (WA) (BC Act);
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        assess and determine applications made under regulation 89 of the <em>Conservation and Land Management Regulations 2002</em> (WA) (CALM Regulations);
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        administer, monitor and enforce other authorisations, permits and approvals that it issues;
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        communicate with applicants, nominees, researchers, licence holders and authorised representatives regarding applications, approvals, compliance matters or related enquiries; and
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        meet its statutory obligations for record-keeping, reporting, audit and regulatory compliance.
-                    </Typography>
-                </li>
-            </ul>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                The personal information collected may include names, contact details, organisational affiliation, role details and other information necessary to assess applications and issue lawful authority for activities.
-            </Typography>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                DBCA may share this information:
-            </Typography>
-
-            <ul className="pl-6 mb-4 text-inherit list-disc">
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        internally within DBCA for assessment, decision-making, compliance, audit and operational purposes;
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        with relevant advisory bodies, committees or experts (including the <em>Animal Ethics Committee</em>) for the purpose of evaluating applications and submissions;
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        with the <em>Department of Primary Industries and Regional Development</em> (DPIRD) for the purpose of assessing and determining exemptions under section 7 of the <em>Fish Resources Management Act 1994</em> (WA) (FRMA Act), including in some cases the application of biodiversity conservation conditions for the purposes of section 7(2)(b) of the BC Act; and
-                    </Typography>
-                </li>
-                <li>
-                    <Typography variant="body2" color="textSecondary">
-                        with other Western Australian public sector agencies or oversight bodies where required or authorised under the <em>Privacy and Responsible Information Sharing Act 2024</em> (WA) (PRIS Act), the BC Act, the AW Act, the <em>Conservation and Land Management Act 1984</em> (WA) (CALM Act), or any other written law.
-                    </Typography>
-                </li>
-            </ul>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                You are required to provide this information where it is necessary to enable DBCA to assess applications and submissions and to perform its statutory functions under the BC Act, the AW Act, the CALM Act, the CALM Regulations and to support DPIRD's statutory functions under the FRMA Act.
-            </Typography>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                If you choose not to provide the required personal information, DBCA may be unable to assess your application or submission, issue an approval or authorisation, or progress the matter further.
-            </Typography>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                DBCA will handle all personal information in accordance with the PRIS Act and DBCA's Privacy Policy.
-            </Typography>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 2 }}>
-                For further details on how DBCA manages your personal information, please refer to <Link href="https://www.dbca.wa.gov.au/privacy" target="_blank" rel="noopener noreferrer" className="inline-flex items-center gap-1">DBCA's Privacy Policy<LaunchIcon fontSize="inherit" /></Link>.
-            </Typography>
-
-            <Typography variant="body2" color="textSecondary" sx={{ mb: 0 }}>
-                If you have any questions about how your personal information will be handled, or if you would like to access or correct your personal information, please contact DBCA at email <Link href="mailto:privacy@dbca.wa.gov.au">privacy@dbca.wa.gov.au</Link>.
-            </Typography>
-        </>
-    );
-}
-
-/**
- * Renders the standalone privacy policy page content for navigation routes.
- */
-export const PrivacyPolicy = () => {
-    return (
-        <Box className="p-8 w-full min-w-4xl lg:w-4xl xl:w-5xl 2xl:w-6xl">
-            <Typography variant="h4" gutterBottom>
-                Privacy Policy
-            </Typography>
-            <PrivacyContent />
-        </Box>
-    );
-};
diff --git a/frontend/src/components/layout/main/PrivacyStatement.tsx b/frontend/src/components/layout/main/PrivacyStatement.tsx
new file mode 100644
index 0000000..e851516
--- /dev/null
+++ b/frontend/src/components/layout/main/PrivacyStatement.tsx
@@ -0,0 +1,373 @@
+import Box from "@mui/material/Box";
+import Typography from "@mui/material/Typography";
+import ExpandMoreIcon from "@mui/icons-material/ExpandMore";
+import Accordion from "@mui/material/Accordion";
+import AccordionDetails from "@mui/material/AccordionDetails";
+import AccordionSummary from "@mui/material/AccordionSummary";
+import Link from "@mui/material/Link";
+import List from "@mui/material/List";
+import ListItem from "@mui/material/ListItem";
+
+import type { ReactNode } from "react";
+
+
+/**
+ * A simple wrapper for consistent privacy statement body text spacing and colour.
+ */
+const PolicyParagraph = ({ children }: { children: ReactNode }) => {
+    return (
+        <Typography variant="body2" color="textSecondary">
+            {children}
+        </Typography>
+    );
+};
+
+/**
+ * Renders bullet-point lists used by multiple policy sections.
+ */
+const PolicyList = ({ items }: { items: string[] }) => {
+    return (
+        <List className="list-disc! pl-8! py-0!">
+            {items.map((item) => (
+                <ListItem key={item} className="list-item! p-1!">
+                    <PolicyParagraph>{item}</PolicyParagraph>
+                </ListItem>
+            ))}
+        </List>
+    );
+};
+
+/**
+ * Shared accordion shell to keep section interactions and visual style consistent.
+ */
+const PrivacyStatementAccordionSection = ({
+    title,
+    children,
+}: {
+    title: string;
+    children: ReactNode;
+}) => {
+    return (
+        <Accordion disableGutters className="min-h-20 rounded-sm! border border-slate-200 shadow-sm! before:hidden">
+            <AccordionSummary
+                id={`${title}-header`}
+                expandIcon={<ExpandMoreIcon />}
+                aria-controls={`${title}-content`}
+            >
+                <Typography variant="h6" className="font-semibold">
+                    {title}
+                </Typography>
+            </AccordionSummary>
+            <AccordionDetails className="border-t border-slate-100 p-4! space-y-4!">
+                {children}
+            </AccordionDetails>
+        </Accordion>
+    );
+};
+
+/**
+ * Displays the Overview as non-collapsible content as requested.
+ */
+const PrivacyStatementOverviewSection = () => {
+    return (
+        <Box className="rounded-lg border border-slate-200 bg-slate-50 p-8 space-y-4!">
+            <Typography variant="h5" className="font-semibold">
+                Overview
+            </Typography>
+            <PolicyParagraph>
+                This Privacy Statement explains how the Authorisations System collects, uses, stores and discloses
+                personal information.
+            </PolicyParagraph>
+            <PolicyParagraph>
+                This statement applies only to information collected through the Authorisations System. The
+                Authorisations System is provided and maintained by the Ecoinformatics Team within the Biodiversity and
+                Conservation Science division of the Department of Biodiversity, Conservations and Attractions (DBCA).
+            </PolicyParagraph>
+            <PolicyParagraph>
+                This statement should be read together with DBCA&apos;s Corporate Privacy Statement, which explains how
+                personal information is managed across DBCA&apos;s broader functions.
+            </PolicyParagraph>
+        </Box>
+    );
+};
+
+/**
+ * Describes what personal information is collected for Authorisations System workflows.
+ */
+const WhatInformationWeCollectSection = () => {
+    const collectedInformationItems = [
+        "your name and contact details;",
+        "organisation, position or affiliation;",
+        "information relating to authorised representatives or nominees;",
+        "information contained in applications, supporting documents and correspondence;",
+        "payment or invoicing information where applicable; and",
+        "any other information reasonably required to assess, administer or monitor an application or approval.",
+    ];
+
+    return (
+        <PrivacyStatementAccordionSection title="What information do we collect?">
+            <PolicyParagraph>
+                The Authorisations System collects personal information that is reasonably necessary to assess
+                applications and submissions, administer approvals, and support DBCA&apos;s statutory functions.
+            </PolicyParagraph>
+            <PolicyParagraph>Depending on your application, this may include:</PolicyParagraph>
+            <PolicyList items={collectedInformationItems} />
+            <PolicyParagraph>
+                Some information requested through the Authorisations System is mandatory. If you choose not to provide required
+                information, the Authorisations System may be unable to assess your application or submission, issue an
+                approval or authorisation, or progress the matter further.
+            </PolicyParagraph>
+        </PrivacyStatementAccordionSection>
+    );
+};
+
+/**
+ * Explains technical data automatically captured when users interact with the Authorisations System.
+ */
+const InformationCollectedAutomaticallySection = () => {
+    const automaticallyCollectedItems = [
+        "your Internet Protocol (IP) address;",
+        "browser type and version;",
+        "operating system;",
+        "device identifiers;",
+        "date and time of access;",
+        "pages viewed;",
+        "documents downloaded;",
+        "referring website; and",
+        "information collected through cookies and similar technologies.",
+    ];
+    const technicalUseItems = [
+        "operate and maintain the Authorisations System;",
+        "protect the security and integrity of the system;",
+        "diagnose technical issues;",
+        "monitor portal performance;",
+        "improve functionality and user experience; and",
+        "produce statistical and analytical information to improve our online services.",
+    ];
+
+    return (
+        <PrivacyStatementAccordionSection title="Information collected automatically">
+            <PolicyParagraph>
+                When you access the Authorisations System, certain technical information is collected automatically.
+            </PolicyParagraph>
+            <PolicyParagraph>This may include:</PolicyParagraph>
+            <PolicyList items={automaticallyCollectedItems} />
+            <PolicyParagraph>This information is collected to:</PolicyParagraph>
+            <PolicyList items={technicalUseItems} />
+            <PolicyParagraph>
+                Cookies do not generally identify you personally. However, where cookie information is linked with
+                other information collected through your use of the Authorisations System, it will be handled as
+                personal
+                information.
+            </PolicyParagraph>
+            <PolicyParagraph>
+                The Authorisations System does not use information collected through this website to make solely
+                automated decisions about applications. All application decisions remain subject to assessment by
+                authorised officers.
+            </PolicyParagraph>
+        </PrivacyStatementAccordionSection>
+    );
+};
+
+/**
+ * Outlines the lawful and operational purposes for which personal information is used.
+ */
+const HowWeUseYourInformationSection = () => {
+    const useItems = [
+        "assess and determine applications, licences, permits, approvals and exemptions;",
+        "administer and monitor approvals and authorised activities;",
+        "communicate with applicants, researchers, licence holders and authorised representatives;",
+        "undertake compliance, audit and enforcement activities;",
+        "maintain records required under legislation; and",
+        "perform DBCA's statutory functions under applicable legislation.",
+    ];
+
+    return (
+        <PrivacyStatementAccordionSection title="How we use your information">
+            <PolicyParagraph>Personal information collected through the Authorisations System is used to:</PolicyParagraph>
+            <PolicyList items={useItems} />
+            <PolicyParagraph>
+                Your personal information will only be used for these purposes or another purpose authorised or
+                required by law.
+            </PolicyParagraph>
+        </PrivacyStatementAccordionSection>
+    );
+};
+
+/**
+ * Lists circumstances in which personal information may be shared with other parties.
+ */
+const SharingYourInformationSection = () => {
+    const sharingItems = [
+        "within DBCA for assessment, decision-making, compliance, operational and administrative purposes;",
+        "to relevant advisory bodies, committees, technical experts or external specialists where required to assess applications and submissions;",
+        "to the Department of Primary Industries and Regional Development (DPIRD) where required or authorised by law, including for functions under the Fish Resources Management Act 1994 (WA);",
+        "to other Western Australian public sector agencies, regulators or oversight bodies where authorised or required by law, including under the Privacy and Responsible Information Sharing Act 2024 (WA) and other written laws.",
+    ];
+
+    return (
+        <PrivacyStatementAccordionSection title="Sharing your information">
+            <PolicyParagraph>
+                Personal information collected through the Authorisations System may be shared:
+            </PolicyParagraph>
+            <PolicyList items={sharingItems} />
+            <PolicyParagraph>
+                Personal information is only shared where authorised or required by law and reasonable steps are taken
+                to ensure that information is disclosed securely.
+            </PolicyParagraph>
+        </PrivacyStatementAccordionSection>
+    );
+};
+
+/**
+ * Describes storage, security controls, and how users can request access or corrections.
+ */
+const StorageSecurityAndAccessSection = () => {
+    return (
+        <PrivacyStatementAccordionSection title="Storage and security">
+            <PolicyParagraph>
+                The Authorisations System applies reasonable measures to protect personal information from misuse,
+                loss and unauthorised access, modification or disclosure.
+            </PolicyParagraph>
+            <PolicyParagraph>
+                Personal information collected through the Authorisations System may be stored in secure DBCA
+                information systems or trusted service providers engaged to support business operations. Information is
+                managed in accordance with applicable legislation, information security requirements and recordkeeping
+                obligations.
+            </PolicyParagraph>
+
+            <Typography variant="subtitle1" className="font-semibold">
+                Accessing or correcting your information
+            </Typography>
+            <PolicyParagraph>
+                You may request access to, or correction of, your personal information held through the Authorisations
+                System and by DBCA, subject to
+                applicable legislation.
+            </PolicyParagraph>
+            <PolicyParagraph>
+                If you have questions about how your personal information is handled, or wish to request access to or
+                correction of your personal information, please contact from the information provided in the "Contact
+                Information" section below.
+            </PolicyParagraph>
+        </PrivacyStatementAccordionSection>
+    );
+};
+
+/**
+ * Explains how updates to the privacy statement are published.
+ */
+const ChangesToPrivacyStatementSection = () => {
+    return (
+        <PrivacyStatementAccordionSection title="Changes to this Privacy Statement">
+            <PolicyParagraph>
+                Ecoinformatics may update this Privacy Statement from time to time to reflect changes to legislation,
+                business processes, or the functionality of the Authorisations System. The most current version will
+                always be available through this website.
+            </PolicyParagraph>
+        </PrivacyStatementAccordionSection>
+    );
+};
+
+/**
+ * Points users to broader organisation-wide privacy information.
+ */
+const FurtherInformationSection = () => {
+    return (
+        <PrivacyStatementAccordionSection title="Further information">
+            <PolicyParagraph>
+                Further information about how DBCA manages personal information is available in DBCA&apos;s Corporate
+                Privacy Statement:
+            </PolicyParagraph>
+            <List className="list-disc! pl-8! py-0!">
+                <ListItem className="list-item! p-1!">
+                    <Link
+                        href="https://www.dbca.wa.gov.au/privacy"
+                        target="_blank"
+                        rel="noopener noreferrer"
+                        color="inherit"
+                        underline="always"
+                    >
+                        DBCA Corporate Privacy Statement
+                    </Link>
+                </ListItem>
+                <ListItem className="list-item! p-1!">
+                    <Link
+                        href="https://www.dbca.wa.gov.au/media/6324/download"
+                        target="_blank"
+                        rel="noopener noreferrer"
+                        color="inherit"
+                        underline="always"
+                    >
+                        DBCA Privacy of Personal Information Statement (PDF)
+                    </Link>
+                </ListItem>
+            </List>
+
+        </PrivacyStatementAccordionSection>
+    );
+};
+
+/**
+ * Restates the collection notice acknowledgement language shown during application creation.
+ */
+const CollectionNoticeAcknowledgementSection = () => {
+    return (
+        <PrivacyStatementAccordionSection title="Collection Notice acknowledgement">
+            <PolicyParagraph>
+                By using this website, you acknowledge and agree that your personal information may be collected, used,
+                stored and disclosed in accordance with this Privacy Statement, applicable privacy legislation, and
+                DBCA&apos;s Corporate Privacy Statement.
+            </PolicyParagraph>
+        </PrivacyStatementAccordionSection>
+    );
+};
+
+
+/**
+ * Presents contact details for privacy enquiries.
+ */
+const ContactInformationSection = () => {
+    return (
+        <PrivacyStatementAccordionSection title="Contact information">
+            <PolicyParagraph>
+                For privacy enquiries about the Authorisations System, contact the Ecoinformatics Team at{" "}
+                <Link href="mailto:ecoinformatics.admin@dbca.wa.gov.au" underline="hover">
+                    ecoinformatics.admin@dbca.wa.gov.au
+                </Link>
+                .
+            </PolicyParagraph>
+            <PolicyParagraph>
+                You can also contact DBCA Privacy at{" "}
+                <Link href="mailto:privacy@dbca.wa.gov.au" underline="hover">
+                    privacy@dbca.wa.gov.au
+                </Link>
+                .
+            </PolicyParagraph>
+        </PrivacyStatementAccordionSection>
+    );
+};
+
+
+/**
+ * Renders the standalone privacy statement page content for navigation routes.
+ */
+export const PrivacyStatement = () => {
+    return (
+        <Box className="p-8 w-full min-w-4xl lg:w-4xl xl:w-5xl 2xl:w-6xl space-y-4">
+            <Typography variant="h4" gutterBottom>
+                Privacy Statement
+            </Typography>
+
+            <PrivacyStatementOverviewSection />
+            <WhatInformationWeCollectSection />
+            <InformationCollectedAutomaticallySection />
+            <HowWeUseYourInformationSection />
+            <SharingYourInformationSection />
+            <StorageSecurityAndAccessSection />
+            <ChangesToPrivacyStatementSection />
+            <FurtherInformationSection />
+            <CollectionNoticeAcknowledgementSection />
+            <ContactInformationSection />
+        </Box>
+    );
+};
diff --git a/frontend/src/router.tsx b/frontend/src/router.tsx
index 8fa1259..f5b52b3 100644
--- a/frontend/src/router.tsx
+++ b/frontend/src/router.tsx
@@ -13,7 +13,7 @@ import { ApplicationReview } from './components/layout/main/Review';
 import { MainLayout } from "./components/layout/main/MainLayout";
 import { MyApplications } from './components/layout/main/MyApplications';
 import { NewApplication } from './components/layout/main/NewApplication';
-import { PrivacyPolicy } from './components/layout/main/PrivacyPolicy';
+import { PrivacyStatement } from './components/layout/main/PrivacyStatement';
 import { UserSettings } from './components/layout/main/UserSettings';
 import { ApiManager } from './context/ApiManager';
 import type { IRoute, LoaderData } from "./context/types/Generic";
@@ -91,11 +91,11 @@ export const ROUTES: IRoute[] = [
 		loader: mainLoader(),
 	},
 	{
-		label: "Privacy Policy",
+		label: "Privacy Statement",
 		path: "/privacy",
 		icon: <PolicyIcon />,
 		divider: false,
-		component: PrivacyPolicy,
+		component: PrivacyStatement,
 		loader: mainLoader(),
 		sidebar: false,
 	},
diff --git a/frontend/src/test/unit/components/layout/main/main-layout.test.tsx b/frontend/src/test/unit/components/layout/main/main-layout.test.tsx
index 58c7152..851fb6f 100644
--- a/frontend/src/test/unit/components/layout/main/main-layout.test.tsx
+++ b/frontend/src/test/unit/components/layout/main/main-layout.test.tsx
@@ -24,7 +24,7 @@ vi.mock("../../../../../router", () => ({
       divider: false,
     },
     {
-      label: "Privacy Policy",
+      label: "Privacy Statement",
       path: "/privacy",
       icon: <span>Privacy</span>,
       divider: false,
@@ -83,7 +83,7 @@ describe("MainLayout", () => {
       />,
     );
 
-    fireEvent.click(screen.getByLabelText("Privacy Policy"));
+    fireEvent.click(screen.getByLabelText("Privacy Statement"));
 
     expect(navigateMock).toHaveBeenCalledWith("/privacy", { viewTransition: true });
   });
diff --git a/frontend/src/test/unit/components/layout/main/privacy-policy.test.tsx b/frontend/src/test/unit/components/layout/main/privacy-policy.test.tsx
deleted file mode 100644
index e60d9bd..0000000
--- a/frontend/src/test/unit/components/layout/main/privacy-policy.test.tsx
+++ /dev/null
@@ -1,15 +0,0 @@
-import { render, screen } from "@testing-library/react";
-import { describe, expect, it } from "vitest";
-
-import { PrivacyPolicy } from "../../../../../components/layout/main/PrivacyPolicy";
-
-
-describe("PrivacyPolicy", () => {
-  it("renders policy heading and privacy contact email", () => {
-    render(<PrivacyPolicy />);
-
-    expect(screen.getByText("Privacy Policy")).toBeInTheDocument();
-    const emailLink = screen.getByRole("link", { name: "privacy@dbca.wa.gov.au" });
-    expect(emailLink).toHaveAttribute("href", "mailto:privacy@dbca.wa.gov.au");
-  });
-});
diff --git a/frontend/src/test/unit/components/layout/main/privacy-statement.test.tsx b/frontend/src/test/unit/components/layout/main/privacy-statement.test.tsx
new file mode 100644
index 0000000..c2c6d0f
--- /dev/null
+++ b/frontend/src/test/unit/components/layout/main/privacy-statement.test.tsx
@@ -0,0 +1,39 @@
+import { fireEvent, render, screen } from "@testing-library/react";
+import { describe, expect, it } from "vitest";
+
+import { PrivacyStatement } from "../../../../../components/layout/main/PrivacyStatement";
+
+
+describe("PrivacyStatement", () => {
+  it("renders the page heading and accordion triggers", () => {
+    render(<PrivacyStatement />);
+
+    expect(screen.getByText("Privacy Statement")).toBeInTheDocument();
+    expect(screen.getByRole("button", { name: "What information do we collect?" })).toBeInTheDocument();
+    expect(screen.getByRole("button", { name: "Information collected automatically" })).toBeInTheDocument();
+    expect(screen.getByRole("button", { name: "Contact information" })).toBeInTheDocument();
+  });
+
+  it("toggles accordion expanded state when a section heading is clicked", () => {
+    render(<PrivacyStatement />);
+
+    const sectionButton = screen.getByRole("button", { name: "How we use your information" });
+    expect(sectionButton).toHaveAttribute("aria-expanded", "false");
+
+    fireEvent.click(sectionButton);
+    expect(sectionButton).toHaveAttribute("aria-expanded", "true");
+
+    fireEvent.click(sectionButton);
+    expect(sectionButton).toHaveAttribute("aria-expanded", "false");
+  });
+
+  it("opens contact information accordion and exposes contact links", () => {
+    render(<PrivacyStatement />);
+
+    const contactButton = screen.getByRole("button", { name: "Contact information" });
+    fireEvent.click(contactButton);
+
+    expect(screen.getByRole("link", { name: "ecoinformatics.admin@dbca.wa.gov.au" })).toBeInTheDocument();
+    expect(screen.getByRole("link", { name: "privacy@dbca.wa.gov.au" })).toBeInTheDocument();
+  });
+});