I hear from privacy professionals and from the Privacy Commissioner's office that it's generally not used a lot. It is often dated. It produces huge headaches for government departments that have to keep it up to date and define consistent uses.
I certainly see the value in having something like that when you are trying to regulate information sharing, but I do wonder sometimes whether or not it's a bureaucratic requirement that has outlived its necessity.