IT Privacy

Question 1

What is the relevant federal act?

Answer 1

Privacy Act 1988

Question 2

Who are the privacy obligations imposed on?

Answer 2

Those who collect and handle personal information

Question 3

Who does the Privacy Act apply to?

Answer 3

• Businesses
• Non-profit organisations
• Clubs, associations, unions
  Where turnover exceeds 3 million per year, or if it holds non-employee health data
  It also applies to :
• organisations who trade in personal information
• credit reporting bodies
• service providers under Commonwealth government contracts
• Entities related to companies under the Act

Question 4

Who does the Privacy Act not apply to?

Answer 4

• Businesses with turnover of less than 3 million (unless under exception)
• Individuals gathering data for personal/family/household reasons
• Public schools, universities (except ANU + private Unis)
• Registered political parties
• People working in a way related to elections
• State and territory government agencies (unless under exception)