You must comply with the Australian Privacy Principles (APPs) if you intend to collect and use the personal information of individuals in a business capacity. Subject to some exceptions, the APPs apply to:
- organisations and entities with an annual turnover of more than $3 million
- certain small businesses (annual turnover less that $3 million), including private sector health service providers.
The APPs provide for standards, rights and obligations around:
- the collection, use and disclosure of personal information
- an organisation or agency's governance and accountability
- integrity and correction of personal information
- the rights of individuals to access their personal information.
