Australian Privacy Act 1988
Australian Privacy Act 1988
Compilation No. 66
Part II—Interpretation 5
Division 1—General definitions 5
6 Interpretation ..................................................................................... 5
6AA Meaning of responsible person ....................................................... 33
6A Breach of an Australian Privacy Principle ....................................... 34
6B Breach of a registered APP code ..................................................... 36
6BA Breach of the registered CR code .................................................... 37
6C Organisations ................................................................................... 37
6D Small business and small business operators ................................... 40
6DA What is the annual turnover of a business? ..................................... 42
6E Small business operator treated as organisation .............................. 43
6EA Small business operators choosing to be treated as
organisations.................................................................................... 45
6F State instrumentalities etc. treated as organisations ......................... 46
Division 2—Key definitions relating to credit reporting 48
Subdivision A—Credit provider 48
6G Meaning of credit provider.............................................................. 48
6H Agents of credit providers ............................................................... 49
6J Securitisation arrangements etc. ...................................................... 50
6K Acquisition of the rights of a credit provider ................................... 51
Subdivision B—Other definitions 52
6L Meaning of access seeker ................................................................ 52
6M Meaning of credit and amount of credit .......................................... 52
6N Meaning of credit information......................................................... 53
6P Meaning of credit reporting business .............................................. 54
6Q Meaning of default information ....................................................... 55
Section 1
Part I—Preliminary
1 Short title
This Act may be cited as the Privacy Act 1988.
2 Commencement
This Act commences on a day to be fixed by Proclamation.
Section 3
Section 4
Agencies
(1) This Act, a registered APP code and the registered CR code extend
to an act done, or practice engaged in, outside Australia and the
external Territories by an agency.
Note: The act or practice overseas will not breach an Australian Privacy
Principle or a registered APP code if the act or practice is required by
an applicable foreign law (see sections 6A and 6B).
Section 5B
Australian link
(2) An organisation or small business operator has an Australian link
if the organisation or operator is:
(a) an Australian citizen; or
(b) a person whose continued presence in Australia is not subject
to a limitation as to time imposed by law; or
(c) a partnership formed in Australia or an external Territory; or
(d) a trust created in Australia or an external Territory; or
(e) a body corporate incorporated in Australia or an external
Territory; or
(f) an unincorporated association that has its central
management and control in Australia or an external Territory.
(3) An organisation or small business operator also has an Australian
link if all of the following apply:
(a) the organisation or operator is not described in
subsection (2);
(b) the organisation or operator carries on business in Australia
or an external Territory;
(c) the personal information was collected or held by the
organisation or operator in Australia or an external Territory,
either before or at the time of the act or practice.
Section 6
Part II—Interpretation
Division 1—General definitions
6 Interpretation
(1) In this Act, unless the contrary intention appears:
ACC means the Australian Crime Commission.
access seeker has the meaning given by subsection 6L(1).
ACT enactment has the same meaning as enactment has in the
Australian Capital Territory (Self-Government) Act 1988.
advice related functions has the meaning given by
subsection 28B(1).
affected information recipient means:
(a) a mortgage insurer; or
(b) a trade insurer; or
(c) a body corporate referred to in paragraph 21G(3)(b); or
(d) a person referred to in paragraph 21G(3)(c); or
(e) an entity or adviser referred to in paragraph 21N(2)(a).
agency means:
(a) a Minister; or
(b) a Department; or
(c) a body (whether incorporated or not), or a tribunal,
established or appointed for a public purpose by or under a
Commonwealth enactment, not being:
(i) an incorporated company, society or association; or
(ii) an organisation that is registered under the Fair Work
(Registered Organisations) Act 2009 or a branch of such
an organisation; or
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
(b) a matter that relates to the information and that is still being
dealt with by a recognised external dispute resolution
scheme; or
(c) a complaint made to the Commissioner under Part V that
relates to the information and that is still being dealt with.
permitted CP disclosure has the meaning given by sections 21J to
21N.
permitted CP use has the meaning given by section 21H.
permitted CRB disclosure has the meaning given by section 20F.
permitted general situation has the meaning given by section 16A.
permitted health situation has the meaning given by section 16B.
personal information means information or an opinion about an
identified individual, or an individual who is reasonably
identifiable:
(a) whether the information or opinion is true or not; and
(b) whether the information or opinion is recorded in a material
form or not.
personal insolvency information has the meaning given by
section 6U.
pre-screening assessment means an assessment made under
paragraph 20G(2)(d).
principal executive, of an agency, has a meaning affected by
section 37.
purchase, in relation to credit, includes the purchase of rights to
receive payments relating to the credit.
recognised external dispute resolution scheme means an external
dispute resolution scheme recognised under section 35A.
record includes:
(a) a document; or
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6
Section 6AA
Section 6A
Section 6A
Section 6B
Section 6BA
6C Organisations
What is an organisation?
(1) In this Act:
organisation means:
(a) an individual; or
(b) a body corporate; or
(c) a partnership; or
(d) any other unincorporated association; or
(e) a trust;
that is not a small business operator, a registered political party, an
agency, a State or Territory authority or a prescribed
instrumentality of a State or Territory.
Note: Regulations may prescribe an instrumentality by reference to one or
more classes of instrumentality. See subsection 13(3) of the
Legislative Instruments Act 2003.
Example: Regulations may prescribe an instrumentality of a State or Territory
that is an incorporated company, society or association and therefore
not a State or Territory authority.
Section 6C
Section 6D
Section 6D
Section 6D
Section 6DA
Section 6E
Section 6E
Section 6EA
Definition
(3) In this section:
protected action ballot agent means a person (other than the
Australian Electoral Commission) that conducts a protected action
ballot under Part 3-3 of the Fair Work Act 2009.
Making regulations
(4) Before the Governor-General makes regulations prescribing a
small business operator, act or practice for the purposes of
subsection (1) or (2), the Minister must:
(a) be satisfied that it is desirable in the public interest to
regulate under this Act the small business operator, act or
practice; and
(b) consult the Commissioner about the desirability of regulating
under this Act the matters described in paragraph (a).
Section 6F
(b) the operator’s ABN, if the operator has one under the A New
Tax System (Australian Business Number) Act 1999.
(4) If a small business operator revokes a choice to be treated as an
organisation, the Commissioner must remove from the register the
material relating to the operator.
(5) The Commissioner may decide the form of the register and how it
is to be kept.
(6) The Commissioner must make the register available to the public
in the way that the Commissioner determines. However, the
Commissioner must not make available to the public in the register
information other than that described in subsection (3).
Section 6F
Section 6G
General
(1) Each of the following is a credit provider:
(a) a bank;
(b) an organisation or small business operator if:
(i) the organisation or operator carries on a business or
undertaking; and
(ii) a substantial part of the business or undertaking is the
provision of credit;
(c) an organisation or small business operator:
(i) that carries on a retail business; and
(ii) that, in the course of the business, issues credit cards to
individuals in connection with the sale of goods, or the
supply of services, by the organisation or operator (as
the case may be);
(d) an agency, organisation or small business operator:
(i) that carries on a business or undertaking that involves
providing credit; and
(ii) that is prescribed by the regulations.
Section 6H
Exclusions
(5) Despite subsections (1) to (4) of this section, an organisation or
small business operator acting in the capacity of:
(a) a real estate agent; or
(b) a general insurer (within the meaning of the Insurance Act
1973); or
(c) an employer of an individual;
is not a credit provider while acting in that capacity.
(6) Despite subsections (1) to (4) of this section, an organisation or
small business operator is not a credit provider if it is included in a
class of organisations or operators prescribed by the regulations.
Section 6J
Section 6K
Section 6L
Section 6N
Section 6P
Section 6Q
Guarantor defaults
(2) Default information about an individual is information about a
payment that the individual is overdue in making as a guarantor
under a guarantee given against any default by a person (the
borrower) in repaying all or any of the debt deferred under
consumer credit provided by a credit provider to the borrower if:
(a) the provider has given the individual written notice of the
borrower’s default that gave rise to the individual’s
obligation to make the overdue payment; and
(b) the notice requests that the individual pay the amount of the
overdue payment; and
(c) at least 60 days have passed since the day on which the
notice was given; and
Section 6R
(d) in addition to giving the notice, the provider has taken other
steps to recover the amount of the overdue payment from the
individual; and
(e) the provider is not prevented by a statute of limitations from
recovering the amount of the overdue payment.
Credit provider
(1) A credit provider has made an information request in relation to
an individual if the provider has sought information about the
individual from a credit reporting body:
(a) in connection with an application for consumer credit made
by the individual to the provider; or
(b) in connection with an application for commercial credit made
by a person to the provider; or
(c) for a credit guarantee purpose of the provider in relation to
the individual; or
(d) for a securitisation related purpose of the provider in relation
to the individual.
Mortgage insurer
(2) A mortgage insurer has made an information request in relation to
an individual if:
(a) the insurer has sought information about the individual from
a credit reporting body; and
(b) the information was sought in connection with the provision
of insurance to a credit provider in relation to mortgage credit
provided by the provider to:
(i) the individual; or
(ii) a person for whom the individual is, or is proposing to
be, a guarantor.
Section 6S
Trade insurer
(3) A trade insurer has made an information request in relation to an
individual if:
(a) the insurer has sought information about the individual from
a credit reporting body; and
(b) the information was sought in connection with the provision
of insurance to a credit provider in relation to commercial
credit provided by the provider to the individual or another
person.
Section 6T
Section 6V
Section 6V
Section 7
Section 7
Section 7
Section 7A
Section 7B
Employee records
(3) An act done, or practice engaged in, by an organisation that is or
was an employer of an individual, is exempt for the purposes of
paragraph 7(1)(ee) if the act or practice is directly related to:
(a) a current or former employment relationship between the
employer and the individual; and
Section 7C
Journalism
(4) An act done, or practice engaged in, by a media organisation is
exempt for the purposes of paragraph 7(1)(ee) if the act is done, or
the practice is engaged in:
(a) by the organisation in the course of journalism; and
(b) at a time when the organisation is publicly committed to
observe standards that:
(i) deal with privacy in the context of the activities of a
media organisation (whether or not the standards also
deal with other matters); and
(ii) have been published in writing by the organisation or a
person or body representing a class of media
organisations.
Section 7C
Section 7C
Section 8
Section 10
Section 11
shall be regarded, for the purposes of this Act, to be the agency that
holds that record.
(5) Where a record of personal information was placed by or on behalf
of an agency in the memorial collection within the meaning of the
Australian War Memorial Act 1980, that agency or, if that agency
no longer exists, the agency to whose functions the contents of the
record are most closely related, shall be regarded, for the purposes
of this Act, to be the agency that holds that record.
Section 12A
(2) This Act also has the effect it would have if its operation in relation
to regulated entities were expressly confined to an operation to
give effect to the following:
(a) the International Covenant on Civil and Political Rights done
at New York on 16 December 1966 ([1980] ATS 23), and in
particular Articles 17 and 24(1) of the Covenant;
Section 12B
(3) This Act also has the effect it would have if its operation in relation
to regulated entities were expressly confined to acts or practices
covered by section 5B (which deals with acts and practices outside
Australia and the external Territories).
(4) This Act also has the effect it would have if its operation in relation
to regulated entities were expressly confined to regulated entities
that are corporations.
(5) This Act also has the effect it would have if its operation in relation
to regulated entities were expressly confined to acts or practices of
regulated entities taking place in the course of, or in relation to,
trade or commerce:
(a) between Australia and places outside Australia; or
(b) among the States; or
(c) within a Territory, between a State and a Territory or
between 2 Territories.
(5A) This Act also has the effect it would have if its operation in relation
to regulated entities were expressly confined to acts or practices
engaged in by regulated entities in the course of:
(a) banking (other than State banking not extending beyond the
limits of the State concerned); or
(b) insurance (other than State insurance not extending beyond
the limits of the State concerned).
(6) This Act also has the effect it would have if its operation in relation
to regulated entities were expressly confined to acts or practices of
regulated entities taking place using a postal, telegraphic,
telephonic or other like service within the meaning of
paragraph 51(v) of the Constitution.
Section 12B
(7) This Act also has the effect it would have if its operation in relation
to regulated entities were expressly confined to acts or practices of
regulated entities taking place in a Territory.
(8) This Act also has the effect it would have if its operation in relation
to regulated entities were expressly confined to acts or practices of
regulated entities taking place in a place acquired by the
Commonwealth for public purposes.
Section 13
APP entities
(1) An act or practice of an APP entity is an interference with the
privacy of an individual if:
(a) the act or practice breaches an Australian Privacy Principle in
relation to personal information about the individual; or
(b) the act or practice breaches a registered APP code that binds
the entity in relation to personal information about the
individual.
Credit reporting
(2) An act or practice of an entity is an interference with the privacy
of an individual if:
(a) the act or practice breaches a provision of Part IIIA in
relation to personal information about the individual; or
(b) the act or practice breaches the registered CR code in relation
to personal information about the individual and the code
binds the entity.
Section 13
Section 13B
Section 13C
Section 13D
Section 14
Section 16A
Section 16B
Section 16B
Collection—research etc.
(2) A permitted health situation exists in relation to the collection by
an organisation of health information about an individual if:
(a) the collection is necessary for any of the following purposes:
(i) research relevant to public health or public safety;
(ii) the compilation or analysis of statistics relevant to
public health or public safety;
(iii) the management, funding or monitoring of a health
service; and
(b) that purpose cannot be served by the collection of
information about the individual that is de-identified
information; and
(c) it is impracticable for the organisation to obtain the
individual’s consent to the collection; and
(d) any of the following apply:
(i) the collection is required by or under an Australian law
(other than this Act);
Section 16B
Section 16C
Section 16C
Section 17
Section 19
Section 20
This Division sets out rules that apply to credit reporting bodies in
relation to their handling of the following:
Section 20B
Section 20C
(d) the purposes for which the body collects, holds, uses and
discloses credit reporting information;
(e) information about the effect of section 20G (which deals with
direct marketing) and how the individual may make a request
under subsection (5) of that section;
(f) how an individual may access credit reporting information
about the individual that is held by the body and seek the
correction of such information;
(g) information about the effect of section 20T (which deals with
individuals requesting the correction of credit information
etc.);
(h) how an individual may complain about a failure of the body
to comply with this Division or the registered CR code and
how the body will deal with such a complaint.
Prohibition on collection
(1) A credit reporting body must not collect credit information about
an individual.
Section 20C
Exceptions
(2) Subsection (1) does not apply if the collection of the credit
information is required or authorised by or under an Australian law
or a court/tribunal order.
(3) Subsection (1) does not apply if:
(a) the credit reporting body collects the credit information about
the individual from a credit provider who is permitted under
section 21D to disclose the information to the body; and
(b) the body collects the information in the course of carrying on
a credit reporting business; and
(c) if the information is identification information about the
individual—the body also collects from the provider, or
already holds, credit information of another kind about the
individual.
(4) Subsection (1) does not apply if:
(a) the credit reporting body:
(i) collects the credit information about the individual from
an entity (other than a credit provider) in the course of
carrying on a credit reporting business; and
(ii) knows, or believes on reasonable grounds, that the
individual is at least 18 years old; and
(b) the information does not relate to an act, omission, matter or
thing that occurred or existed before the individual turned 18;
and
(c) if the information relates to consumer credit or commercial
credit—the credit is or has been provided, or applied for, in
Australia; and
(d) if the information is identification information about the
individual—the body also collects from the entity, or already
holds, credit information of another kind about the
individual; and
Section 20D
Means of collection
(7) A credit reporting body must collect credit information only by
lawful and fair means.
Section 20E
(3) If the credit reporting body determines that it could have collected
the credit information, sections 20E to 20ZA apply in relation to
the information as if the body had collected the information under
section 20C.
(4) If the credit reporting body determines that it could not have
collected the credit information, the body must, as soon as
practicable, destroy the information.
Civil penalty: 1,000 penalty units.
(5) Subsection (4) does not apply if the credit reporting body is
required by or under an Australian law, or a court/tribunal order, to
retain the credit information.
Permitted uses
(2) Subsection (1) does not apply to the use of credit reporting
information about the individual if:
(a) the credit reporting body uses the information in the course
of carrying on the body’s credit reporting business; or
(b) the use is required or authorised by or under an Australian
law or a court/tribunal order; or
(c) the use is a use prescribed by the regulations.
Section 20E
Permitted disclosures
(3) Subsection (1) does not apply to the disclosure of credit reporting
information about the individual if:
(a) the disclosure is a permitted CRB disclosure in relation to the
individual; or
(b) the disclosure is to another credit reporting body that has an
Australian link; or
(c) both of the following apply:
(i) the disclosure is for the purposes of a recognised
external dispute resolution scheme;
(ii) a credit reporting body or credit provider is a member of
the scheme; or
(d) both of the following apply:
(i) the disclosure is to an enforcement body;
(ii) the credit reporting body is satisfied that the body, or
another enforcement body, believes on reasonable
grounds that the individual has committed a serious
credit infringement; or
(e) the disclosure is required or authorised by or under an
Australian law or a court/tribunal order; or
(f) the disclosure is a disclosure prescribed by the regulations.
(4) However, if the credit reporting information is, or was derived
from, repayment history information about the individual, the
credit reporting body must not disclose the information under
paragraph (3)(a) or (f) unless the recipient of the information is:
(a) a credit provider who is a licensee or is prescribed by the
regulations; or
(b) a mortgage insurer.
Civil penalty: 2,000 penalty units.
(5) If a credit reporting body discloses credit reporting information
under this section, the body must make a written note of that
disclosure.
Civil penalty: 500 penalty units.
Section 20F
Note: Other Acts may provide that the note must not be made (see for
example the Australian Crime Commission Act 2002 and the Law
Enforcement Integrity Commissioner Act 2006).
Section 20F
(2) The consent of the individual under paragraph (b) of item 2 of the
table in subsection (1) must be given in writing unless:
(a) the credit provider referred to in that item requests the
information for the purpose of assessing an application for
commercial credit made by a person to the provider; and
(b) the application has not been made in writing.
Section 20G
Section 20H
Section 20J
Section 20K
Ban period
(3) The ban period for credit reporting information about an individual
is the period that:
(a) starts when the individual makes a request under
paragraph (1)(c); and
(b) ends:
(i) 21 days after the day on which the request is made; or
(ii) if the period is extended under subsection (4)—on the
day after the extended period ends.
(4) If:
Section 20L
Section 20M
Use or disclosure
(1) If:
(a) a credit reporting body holds credit reporting information;
and
(b) the information (the de-identified information) is
de-identified;
the body must not use or disclose the de-identified information.
(2) Subsection (1) does not apply to the use or disclosure of the
de-identified information if:
(a) the use or disclosure is for the purposes of conducting
research in relation to credit; and
(b) the credit reporting body complies with the rules made under
subsection (3).
Section 20N
Offence
(1) A credit reporting body commits an offence if:
(a) the body uses or discloses credit reporting information under
this Division (other than subsections 20D(2) and 20T(4));
and
(b) the information is false or misleading in a material particular.
Penalty: 200 penalty units.
Section 20Q
Civil penalty
(2) A credit reporting body must not use or disclose credit reporting
information under this Division (other than subsections 20D(2) and
20T(4)) if the information is false or misleading in a material
particular.
Civil penalty: 2,000 penalty units.
Access
(1) If a credit reporting body holds credit reporting information about
an individual, the body must, on request by an access seeker in
Section 20R
Exceptions to access
(2) Despite subsection (1), the credit reporting body is not required to
give the access seeker access to the credit reporting information to
the extent that:
(a) giving access would be unlawful; or
(b) denying access is required or authorised by or under an
Australian law or a court/tribunal order; or
(c) giving access would be likely to prejudice one or more
enforcement related activities conducted by, or on behalf of,
an enforcement body.
Means of access
(4) If the credit reporting body gives access to the credit reporting
information, the access must be given in the manner set out in the
registered CR code.
Access charges
(5) If a request under subsection (1) in relation to the individual has
not been made to the credit reporting body in the previous 12
months, the body must not charge the access seeker for the making
of the request or for giving access to the information.
(6) If subsection (5) does not apply, any charge by the credit reporting
body for giving access to the information must not be excessive
and must not apply to the making of the request.
Section 20S
Section 20T
Request
(1) An individual may request a credit reporting body to correct
personal information about the individual if:
(a) the personal information is:
(i) credit information about the individual; or
(ii) CRB derived information about the individual; or
(iii) CP derived information about the individual; and
(b) the body holds at least one kind of the personal information
referred to in paragraph (a).
Correction
(2) If the credit reporting body is satisfied that the personal
information is inaccurate, out-of-date, incomplete, irrelevant or
misleading, the body must take such steps (if any) as are
reasonable in the circumstances to correct the information within:
(a) the period of 30 days that starts on the day on which the
request is made; or
(b) such longer period as the individual has agreed to in writing.
Consultation
(3) If the credit reporting body considers that the body cannot be
satisfied of the matter referred to in subsection (2) in relation to the
personal information without consulting either or both of the
following (the interested party):
(a) another credit reporting body that holds or held the
information and that has an Australian link;
Section 20U
(b) a credit provider that holds or held the information and that
has an Australian link;
the body must consult that interested party, or those interested
parties, about the individual’s request.
(4) The use or disclosure of personal information about the individual
for the purposes of the consultation is taken, for the purposes of
this Act, to be a use or disclosure that is authorised by this
subsection.
No charge
(5) The credit reporting body must not charge the individual for the
making of the request or for correcting the information.
Section 20V
(b) sets out the body’s reasons for not correcting the information
(including evidence substantiating the correctness of the
information); and
(c) states that, if the individual is not satisfied with the response
to the request, the individual may:
(i) access a recognised external dispute resolution scheme
of which the body is a member; or
(ii) make a complaint to the Commissioner under Part V.
Exceptions
(4) Paragraph (2)(c) does not apply if it is impracticable for the credit
reporting body to give the notice under that paragraph.
(5) Subsection (2) or (3) does not apply if the credit reporting body is
required by or under an Australian law, or a court/tribunal order,
not to give the notice under that subsection.
Section 20V
(3) Despite subsection (2), the credit reporting body must neither
destroy the credit information nor ensure that the information is
de-identified, if immediately before the retention period ends:
(a) there is a pending correction request in relation to the
information; or
(b) there is a pending dispute in relation to the information.
Civil penalty: 500 penalty units.
(4) Subsection (2) does not apply if the credit reporting body is
required by or under an Australian law, or a court/tribunal order, to
retain the credit information.
Section 20W
Retention period
Item If the credit information is ... the retention period for the information
is ...
1 consumer credit liability the period of 2 years that starts on the
information day on which the consumer credit to
which the information relates is
terminated or otherwise ceases to be in
force.
2 repayment history information the period of 2 years that starts on the
day on which the monthly payment to
which the information relates is due and
payable.
3 information of a kind referred to the period of 5 years that starts on the
in paragraph 6N(d) or (e) day on which the information request to
which the information relates is made.
4 default information the period of 5 years that starts on the
day on which the credit reporting body
collects the information.
5 payment information the period of 5 years that starts on the
Section 20X
Retention period
Item If the credit information is ... the retention period for the information
is ...
day on which the credit reporting body
collects the default information to which
the payment information relates.
6 new arrangement information the period of 2 years that starts on the
within the meaning of day on which the credit reporting body
subsection 6S(1) collects the default information referred
to in that subsection.
7 new arrangement information the period of 2 years that starts on the
within the meaning of day on which the credit reporting body
subsection 6S(2) collects the information about the
opinion referred to in that subsection.
8 court proceedings information the period of 5 years that starts on the
day on which the judgement to which the
information relates is made or given.
9 information of a kind referred to the period of 7 years that starts on the
in paragraph 6N(l) day on which the credit reporting body
collects the information.
Section 20X
Section 20Y
Control of property
(3) If personal insolvency information relates to a direction given, or
an order made, under section 50 of the Bankruptcy Act, the
retention period for the information is the period that ends on the
day on which the control of the property to which the direction or
order relates ends.
Note: See subsection 50(1B) of the Bankruptcy Act for when the control of
the property ends.
Interpretation
(5) An expression used in this section that is also used in the
Bankruptcy Act has the same meaning in this section as it has in
that Act.
Section 20Z
Section 20Z
Notification of Commissioner
(2) The credit reporting body must, as soon as practicable, notify in
writing the Commissioner of the matter referred to in
paragraph (1)(a) or (b) of this section.
Civil penalty: 1,000 penalty units.
Use or disclosure
(3) The credit reporting body must not use or disclose the information
under Subdivision D of this Division.
Civil penalty: 2,000 penalty units.
(4) However, the credit reporting body may use or disclose the
information under this subsection if:
(a) the use or disclosure is for the purposes of the pending
correction request, or pending dispute, in relation to the
information; or
(b) the use or disclosure of the information is required by or
under an Australian law or a court/tribunal order.
(5) If the credit reporting body uses or discloses the information under
subsection (4), the body must make a written note of the use or
disclosure.
Civil penalty: 500 penalty units.
Section 20ZA
Use or disclosure
(2) The credit reporting body must not use or disclose the information
under Subdivision D of this Division.
Civil penalty: 2,000 penalty units.
(3) However, the credit reporting body may use or disclose the
information under this subsection if the use or disclosure of the
information is required by or under an Australian law or a
court/tribunal order.
(4) If the credit reporting body uses or discloses the information under
subsection (3), the body must make a written note of the use or
disclosure.
Civil penalty: 500 penalty units.
Other requirements
(5) Subdivision E of this Division (other than section 20Q) does not
apply in relation to the use or disclosure of the information.
Section 20ZA
Note: Section 20Q deals with the security of credit reporting information.
Section 21
Section 21B
Section 21B
(d) the purposes for which the provider collects, holds, uses and
discloses credit information and credit eligibility information;
(e) how an individual may access credit eligibility information
about the individual that is held by the provider;
(f) how an individual may seek the correction of credit
information or credit eligibility information about the
individual that is held by the provider;
(g) how an individual may complain about a failure of the
provider to comply with this Division or the registered CR
code if it binds the provider;
(h) how the provider will deal with such a complaint;
(i) whether the provider is likely to disclose credit information
or credit eligibility information to entities that do not have an
Australian link;
(j) if the provider is likely to disclose credit information or
credit eligibility information to such entities—the countries
in which those entities are likely to be located if it is
practicable to specify those countries in the policy.
Section 21C
Section 21D
Prohibition on disclosure
(1) A credit provider must not disclose credit information about an
individual to a credit reporting body (whether or not the body’s
credit reporting business is carried on in Australia).
Civil penalty: 2,000 penalty units.
Permitted disclosure
(2) Subsection (1) does not apply to the disclosure of credit
information about the individual if:
(a) the credit provider:
(i) is a member of a recognised external dispute resolution
scheme or is prescribed by the regulations; and
(ii) knows, or believes on reasonable grounds, that the
individual is at least 18 years old; and
(b) the credit reporting body is:
(i) an agency; or
(ii) an organisation that has an Australian link; and
(c) the information meets the requirements of subsection (3).
Note: Section 21F limits the disclosure of credit information if there is a ban
period for the information.
Section 21D
Section 21E
Section 21G
(2) If the credit provider holds credit information about the individual
that relates to the consumer credit, the provider must not, despite
sections 21D and 21E, disclose the information to a credit
reporting body.
Civil penalty: 2,000 penalty units.
(3) Subsection (2) does not apply if the credit provider has taken such
steps as are reasonable in the circumstances to verify the identity of
the individual.
Permitted uses
(2) Subsection (1) does not apply to the use of credit eligibility
information about the individual if:
(a) the use is for a consumer credit related purpose of the credit
provider in relation to the individual; or
(b) the use is a permitted CP use in relation to the individual; or
(c) both of the following apply:
(i) the credit provider believes on reasonable grounds that
the individual has committed a serious credit
infringement;
(ii) the provider uses the information in connection with the
infringement; or
(d) the use is required or authorised by or under an Australian
law or a court/tribunal order; or
(e) the use is a use prescribed by the regulations.
Section 21G
Permitted disclosures
(3) Subsection (1) does not apply to the disclosure of credit eligibility
information about the individual if:
(a) the disclosure is a permitted CP disclosure in relation to the
individual; or
(b) the disclosure is to a related body corporate of the credit
provider; or
(c) the disclosure is to:
(i) a person for the purpose of processing an application for
credit made to the credit provider; or
(ii) a person who manages credit provided by the credit
provider for use in managing that credit; or
(d) both of the following apply:
(i) the credit provider believes on reasonable grounds that
the individual has committed a serious credit
infringement;
(ii) the provider discloses the information to another credit
provider that has an Australian link, or to an
enforcement body; or
(e) both of the following apply:
(i) the disclosure is for the purposes of a recognised
external dispute resolution scheme;
(ii) a credit provider or credit reporting body is a member of
the scheme; or
(f) the disclosure is required or authorised by or under an
Australian law or a court/tribunal order; or
(g) the disclosure is a disclosure prescribed by the regulations.
Note: See section 21NA for additional rules about the disclosure of credit
eligibility information under paragraph (3)(b) or (c).
Section 21H
Section 21H
(b) the provider uses the credit eligibility information for the
purpose specified in column 2 of the table.
Permitted CP uses
Column 1 Column 2
Item The relevant credit reporting The credit provider uses the credit
information was disclosed to the eligibility information for ...
credit provider under ...
1 item 1 of the table in (a) a securitisation related purpose of
subsection 20F(1) for the purpose the provider in relation to the
of assessing an application for individual; or
consumer credit made by the (b) the internal management purposes
individual to the provider. of the provider that are directly
related to the provision or
management of consumer credit by
the provider.
2 item 2 of the table in that particular commercial credit
subsection 20F(1) for a particular related purpose.
commercial credit related purpose
of the provider in relation to the
individual.
3 item 2 of the table in the internal management purposes of
subsection 20F(1) for the purpose the provider that are directly related to
of assessing an application for the provision or management of
commercial credit made by a commercial credit by the provider.
person to the provider.
4 item 3 of the table in (a) the credit guarantee purpose; or
subsection 20F(1) for a credit (b) the internal management purposes
guarantee purpose of the provider of the provider that are directly
in relation to the individual. related to the provision or
management of any credit by the
provider.
5 item 5 of the table in the purpose of assisting the individual
subsection 20F(1). to avoid defaulting on his or her
obligations in relation to consumer
credit provided by the provider to the
individual.
Section 21J
Permitted CP uses
Column 1 Column 2
Item The relevant credit reporting The credit provider uses the credit
information was disclosed to the eligibility information for ...
credit provider under ...
6 item 6 of the table in that particular securitisation related
subsection 20F(1) for a particular purpose.
securitisation related purpose of
the provider in relation to the
individual.
Consent
(1) A disclosure by a credit provider of credit eligibility information
about an individual is a permitted CP disclosure in relation to the
individual if:
(a) the disclosure is to another credit provider (the recipient) for
a particular purpose; and
(b) the recipient has an Australian link; and
(c) the individual expressly consents to the disclosure of the
information to the recipient for that purpose.
(2) The consent of the individual under paragraph (1)(c):
(a) must be given in writing unless:
(i) the disclosure of the information to the recipient is for
the purpose of assessing an application for consumer
credit or commercial credit made to the recipient; and
(ii) the application has not been made in writing; and
(b) must be given to the credit provider or recipient.
Section 21J
Section 21K
Section 21L
Guarantors etc.
(3) A disclosure by a credit provider of credit eligibility information
about an individual is a permitted CP disclosure in relation to the
individual if:
(a) the disclosure is to a person who:
(i) is a guarantor in relation to credit provided by the
provider to the individual; or
(ii) has provided property as security for such credit; and
(b) the person has an Australian link; and
(c) either:
(i) the individual expressly consents to the disclosure of the
information to the person; or
(ii) if subparagraph (a)(i) applies—the information is
disclosed to the person for a purpose related to the
enforcement, or proposed enforcement, of the
guarantee.
(4) The consent of the individual under subparagraph (3)(c)(i) must be
given in writing unless the application for the credit was not made
in writing.
Section 21M
Section 21N
Section 21NA
Section 21P
the act done, or the practice engaged in, by the body or person is
taken, for the purposes of this Act, to have been done, or engaged
in, by the provider and to be a breach of those provisions by the
provider.
Debt collectors
(3) Before a credit provider discloses credit eligibility information
under subsection 21M(1) to a person or body that does not have an
Australian link, the provider must take such steps as are reasonable
in the circumstances to ensure that the person or body does not
breach the Australian Privacy Principles (other than Australian
Privacy Principle 1) in relation to the information.
(4) If:
(a) a credit provider discloses credit eligibility information under
subsection 21M(1) to a person or body that does not have an
Australian link; and
(b) the Australian Privacy Principles do not apply, under this
Act, to an act done, or a practice engaged in, by the person or
body in relation to the information; and
(c) the person or body does an act, or engages in a practice, in
relation to the information that would be a breach of the
Australian Privacy Principles (other than Australian Privacy
Principle 1) if those Australian Privacy Principles applied to
the act or practice;
the act done, or the practice engaged in, by the person or body is
taken, for the purposes of this Act, to have been done, or engaged
in, by the provider and to be a breach of those Australian Privacy
Principles by the provider.
Section 21Q
Section 21R
Offences
(1) A credit provider commits an offence if:
(a) the provider discloses credit information under section 21D;
and
(b) the information is false or misleading in a material particular.
Penalty: 200 penalty units.
(2) A credit provider commits an offence if:
(a) the provider uses or discloses credit eligibility information
under this Division; and
(b) the information is false or misleading in a material particular.
Penalty: 200 penalty units.
Civil penalties
(3) A credit provider must not disclose credit information under
section 21D if the information is false or misleading in a material
particular.
Civil penalty: 2,000 penalty units.
(4) A credit provider must not use or disclose credit eligibility
information under this Division if the information is false or
misleading in a material particular.
Civil penalty: 2,000 penalty units.
Section 21S
Access
(1) If a credit provider holds credit eligibility information about an
individual, the provider must, on request by an access seeker in
relation to the information, give the access seeker access to the
information.
Section 21T
Exceptions to access
(2) Despite subsection (1), the credit provider is not required to give
the access seeker access to the credit eligibility information to the
extent that:
(a) giving access would be unlawful; or
(b) denying access is required or authorised by or under an
Australian law or a court/tribunal order; or
(c) giving access would be likely to prejudice one or more
enforcement related activities conducted by, or on behalf of,
an enforcement body.
Means of access
(4) If the credit provider gives access to the credit eligibility
information, the access must be given in the manner set out in the
registered CR code.
Access charges
(5) If the credit provider is an agency, the provider must not charge the
access seeker for the making of the request or for giving access to
the information.
(6) If a credit provider is an organisation or small business operator,
any charge by the provider for giving access to the information
must not be excessive and must not apply to the making of the
request.
Section 21U
(a) sets out the reasons for the refusal except to the extent that,
having regard to the grounds for the refusal, it would be
unreasonable to do so; and
(b) states that, if the access seeker is not satisfied with the
response to the request, the access seeker may:
(i) access a recognised external dispute resolution scheme
of which the provider is a member; or
(ii) make a complaint to the Commissioner under Part V.
Notice of correction
(2) If:
(a) the credit provider corrects credit information or credit
eligibility information under subsection (1); and
(b) the provider has previously disclosed the information under:
(i) this Division (other than subsection 21V(4)); or
Section 21V
Request
(1) An individual may request a credit provider to correct personal
information about the individual if:
(a) the personal information is:
(i) credit information about the individual; or
(ii) CRB derived information about the individual; or
(iii) CP derived information about the individual; and
(b) the provider holds at least one kind of the personal
information referred to in paragraph (a).
Section 21V
Correction
(2) If the credit provider is satisfied that the personal information is
inaccurate, out-of-date, incomplete, irrelevant or misleading, the
provider must take such steps (if any) as are reasonable in the
circumstances to correct the information within:
(a) the period of 30 days that starts on the day on which the
request is made; or
(b) such longer period as the individual has agreed to in writing.
Consultation
(3) If the credit provider considers that the provider cannot be satisfied
of the matter referred to in subsection (2) in relation to the personal
information without consulting either or both of the following (the
interested party):
(a) a credit reporting body that holds or held the information and
that has an Australian link;
(b) another credit provider that holds or held the information and
that has an Australian link;
the provider must consult that interested party, or those interested
parties, about the individual’s request.
(4) The use or disclosure of personal information about the individual
for the purposes of the consultation is taken, for the purposes of
this Act, to be a use or disclosure that is authorised by this
subsection.
No charge
(5) The credit provider must not charge the individual for the making
of the request or for correcting the information.
Section 21W
Section 21W
(c) states that, if the individual is not satisfied with the response
to the request, the individual may:
(i) access a recognised external dispute resolution scheme
of which the provider is a member; or
(ii) make a complaint to the Commissioner under Part V.
Exceptions
(4) Paragraph (2)(c) does not apply if it is impracticable for the credit
provider to give the notice under that paragraph.
(5) Subsection (2) or (3) does not apply if the credit provider is
required by or under an Australian law, or a court/tribunal order,
not to give the notice under that subsection.
Section 22
Section 22A
Section 22B
Section 22C
Permitted uses
(2) Subsection (1) does not apply to the use of the information if:
(a) for a mortgage insurer—the use is for:
(i) a mortgage insurance purpose of the insurer in relation
to the individual; or
(ii) any purpose arising under a contract for mortgage
insurance that has been entered into between the credit
provider and the insurer; or
(b) for a trade insurer—the use is for a trade insurance purpose
of the insurer in relation to the individual; or
(c) the use is required or authorised by or under an Australian
law or a court/tribunal order.
Permitted disclosure
(3) Subsection (1) does not apply to the disclosure of the information
if the disclosure is required or authorised by or under an Australian
law or a court/tribunal order.
Section 22D
Section 22E
Permitted uses
(2) Subsection (1) does not apply to the use of the information if:
(a) the person uses the information for the purpose for which it
was disclosed to the person under paragraph 21G(3)(c); or
(b) the use is required or authorised by or under an Australian
law or a court/tribunal order.
Section 22F
Permitted disclosure
(3) Subsection (1) does not apply to the disclosure of the information
if:
(a) the disclosure is to the credit provider; or
(b) the disclosure is required or authorised by or under an
Australian law or a court/tribunal order.
Section 22F
Permitted uses
(2) Subsection (1) does not apply to the use of the information if:
(a) for a recipient that is the entity—the information is used for a
matter referred to in subsection 21N(3); or
(b) for a recipient that is the professional legal adviser, or
professional financial adviser, of the entity—the information
is used:
(i) in the adviser’s capacity as an adviser of the entity; and
(ii) in connection with advising the entity about a matter
referred to in subsection 21N(3); or
(c) the use is required or authorised by or under an Australian
law or a court/tribunal order.
Permitted disclosure
(3) Subsection (1) does not apply to the disclosure of the information
if the disclosure is required or authorised by or under an Australian
law or a court/tribunal order.
Section 23
Division 5—Complaints
Complaint
(1) An individual may complain to a credit reporting body about an act
or practice engaged in by the body that may be a breach of either of
the following provisions in relation to the individual:
(a) a provision of this Part (other than section 20R or 20T);
(b) a provision of the registered CR code (other than a provision
that relates to that section).
Note: A complaint about a breach of section 20R or 20T, or a provision of
the registered CR code that relates to that section, may be made to the
Commissioner under Part V.
Section 23B
Nature of complaint
(3) If an individual makes a complaint, the individual must specify the
nature of the complaint.
(4) The complaint may relate to personal information that has been
destroyed or de-identified.
No charge
(5) The credit reporting body or credit provider must not charge the
individual for the making of the complaint or for dealing with the
complaint.
Section 23C
Section 23C
(3) If:
(a) the respondent for the complaint is a credit provider; and
(b) the complaint relates to:
(i) credit reporting information that a credit reporting body
holds; or
(ii) credit information or credit eligibility information that
another credit provider holds;
the respondent must, in writing:
(c) notify the body or other provider (as the case may be) of the
making of the complaint as soon as practicable after it is
made; and
(d) notify the body or other provider (as the case may be) of the
making of a decision about the complaint under
subsection 23B(4) as soon as practicable after it is made.
Section 23C
Exceptions
(6) Subsection (2), (3), (4) or (5) does not apply if:
(a) it is impracticable for the credit reporting body or credit
provider to give the notification under that subsection; or
(b) the credit reporting body or credit provider is required by or
under an Australian law, or a court/tribunal order, not to give
the notification under that subsection.
Section 24
Offences
(1) An entity commits an offence if:
(a) the entity obtains credit reporting information; and
(b) the information is obtained from a credit reporting body; and
(c) the entity is not:
(i) an entity to which the body is permitted to disclose the
information under Division 2 of this Part; or
(ii) an access seeker for the information.
Penalty: 200 penalty units.
(2) An entity commits an offence if:
(a) the entity obtains credit reporting information; and
(b) the information is obtained from a credit reporting body; and
(c) the information is obtained by false pretence.
Penalty: 200 penalty units.
Civil penalties
(3) An entity must not obtain credit reporting information from a credit
reporting body if the entity is not:
(a) an entity to which the body is permitted to disclose the
information under Division 2 of this Part; or
(b) an access seeker for the information.
Civil penalty: 2,000 penalty units.
(4) An entity must not obtain, by false pretence, credit reporting
information from a credit reporting body.
Section 24A
Offences
(1) An entity commits an offence if:
(a) the entity obtains credit eligibility information; and
(b) the information is obtained from a credit provider; and
(c) the entity is not:
(i) an entity to which the provider is permitted to disclose
the information under Division 3 of this Part; or
(ii) an access seeker for the information.
Penalty: 200 penalty units.
(2) An entity commits an offence if:
(a) the entity obtains credit eligibility information; and
(b) the information is obtained from a credit provider; and
(c) the information is obtained by false pretence.
Penalty: 200 penalty units.
Civil penalties
(3) An entity must not obtain credit eligibility information from a
credit provider if the entity is not:
(a) an entity to which the provider is permitted to disclose the
information under Division 3 of this Part; or
(b) an access seeker for the information.
Civil penalty: 2,000 penalty units.
(4) An entity must not obtain, by false pretence, credit eligibility
information from a credit provider.
Civil penalty: 2,000 penalty units.
Section 25
25 Compensation orders
(1) The Federal Court or the Federal Circuit Court may order an entity
to compensate a person for loss or damage (including injury to the
person’s feelings or humiliation) suffered by the person if:
(a) either:
(i) a civil penalty order has been made against the entity for
a contravention of a civil penalty provision (other than
section 13G); or
(ii) the entity is found guilty of an offence against this Part;
and
(b) that loss or damage resulted from the contravention or
commission of the offence.
The order must specify the amount of compensation.
(2) The court may make the order only if:
(a) the person applies for an order under this section; and
(b) the application is made within 6 years of the day the cause of
action that relates to the contravention or commission of the
offence accrued.
(3) If the court makes the order, the amount of compensation specified
in the order that is to be paid to the person may be recovered as a
debt due to the person.
Section 25A
Section 26
Section 26
Section 26A
Section 26D
Section 26E
Own initiative
(1) An APP code developer may develop an APP code.
Section 26F
Section 26H
(3) Before registering the APP code under section 26H, the
Commissioner must:
(a) make a draft of the code publicly available; and
(b) invite the public to make submissions to the Commissioner
about the draft within a specified period (which must run for
at least 28 days); and
(c) give consideration to any submissions made within the
specified period.
Section 26J
Section 26K
Section 26L
Section 26P
(e) specify any other entities subject to Part IIIA that are bound
by the code, or a way of determining which of those entities
are bound.
(3) A CR code may do one or more of the following:
(a) impose additional requirements to those imposed by
Part IIIA, so long as the additional requirements are not
contrary to, or inconsistent with, that Part;
(b) deal with the internal handling of complaints;
(c) provide for the reporting to the Commissioner about
complaints;
(d) deal with any other relevant matters.
(4) A CR code may be expressed to apply differently in relation to:
(a) classes of entities that are subject to Part IIIA; and
(b) specified classes of credit information, credit reporting
information or credit eligibility information; and
(c) specified classes of activities of entities that are subject to
Part IIIA.
(5) A CR code is not a legislative instrument.
Section 26Q
Section 26R
Section 26T
(4) The Commissioner must ensure that there is one, and only one,
registered CR code at all times after this Part commences.
Section 26T
Section 26U
Section 26W
(2) The Commissioner may make written guidelines about matters the
Commissioner may consider in deciding whether:
(a) to register an APP code or a CR code; or
(b) to approve a variation of a registered APP code or the
registered CR code; or
(c) to remove a registered APP code from the Codes Register.
(3) The Commissioner may publish any such guidelines on the
Commissioner’s website.
(4) Guidelines are not a legislative instrument.
Section 27
Section 28
Section 28A
Other matters
(2) The following are also the monitoring related functions of the
Commissioner:
(a) examining a proposed enactment that would require or
authorise acts or practices of an entity that might otherwise
be interferences with the privacy of individuals, or which
may otherwise have any adverse effects on the privacy of
individuals;
(b) examining a proposal for data matching or linkage that may
involve an interference with the privacy of individuals, or
which may otherwise have any adverse effects on the privacy
of individuals;
(c) ensuring that any adverse effects of the proposed enactment
or the proposal on the privacy of individuals are minimised;
(d) undertaking research into, and monitoring developments in,
data processing and technology (including data matching and
Section 28B
Section 29
Section 30
Section 30
Section 31
(5) The Minister shall cause a copy of a report given to the Minister
under subsection (4) to be laid before each House of the Parliament
within 15 sitting days of that House after the report is received by
the Minister.
Section 33
Section 33
Norfolk Island
(5) In this section:
State includes Norfolk Island.
Section 33C
Section 33D
Review
(7) Before the fifth anniversary of the commencement of this section,
the Minister must cause a review to be undertaken of whether this
section should apply in relation to organisations.
Section 33E
Section 33F
(2) If the court is satisfied that the entity has breached the undertaking,
the court may make any or all of the following orders:
(a) an order directing the entity to comply with the undertaking;
(b) any order that the court considers appropriate directing the
person to compensate any other person who has suffered loss
or damage as a result of the breach;
(c) any other order that the court considers appropriate.
Section 34
Division 4—Miscellaneous
Section 35
Section 35A
Section 36A
Section 36A
Section 36
36 Complaints
(1) An individual may complain to the Commissioner about an act or
practice that may be an interference with the privacy of the
individual.
(2) In the case of an act or practice that may be an interference with
the privacy of 2 or more individuals, any one of those individuals
may make a complaint under subsection (1) on behalf of all of the
individuals.
(2A) In the case of a representative complaint, this section has effect
subject to section 38.
(3) A complaint shall be in writing.
(4) It is the duty of:
(a) members of the staff of the Commissioner; and
(b) members of the staff of the Ombudsman who have had
powers of the Commissioner delegated to them under
section 99;
to provide appropriate assistance to a person who wishes to make a
complaint and requires assistance to formulate the complaint.
(5) The complaint shall specify the respondent to the complaint.
(6) In the case of a complaint about an act or practice of an agency:
(a) if the agency is an individual or a body corporate, the agency
shall be the respondent; and
(b) if the agency is an unincorporated body, the principal
executive of the agency shall be the respondent.
(7) In the case of a complaint about an act or practice of an
organisation, the organisation is the respondent.
Section 37
Note: Sections 98A to 98C contain further rules about how this Part operates
in relation to respondent organisations that are not legal persons.
Column 1 Column 2
Item Agency Principal executive
1 Department The Secretary of the
Department
2 An unincorporated body, or a The chief executive officer
tribunal, referred to in of the body or tribunal
paragraph (c) of the definition
of agency in subsection 6(1)
3 A body referred to in The chief executive officer
paragraph (d) of the definition of the body
of agency in subsection 6(1)
4 A federal court The registrar or principal
registrar of the court or the
person occupying an
equivalent office
5 The Australian Federal Police The Commissioner of Police
5A A public sector agency The Chief Executive Officer
(within the meaning of the (within the meaning of the
Public Sector Management Public Sector Management
Act 2000 of Norfolk Island) Act 2000 of Norfolk Island)
Section 38
Column 1 Column 2
Item Agency Principal executive
5B An unincorporated body, or a The Chief Executive Officer
tribunal, referred to in (within the meaning of the
paragraph (c) of the definition Public Service Act 2014 of
of Norfolk Island agency in Norfolk Island)
subsection 6(1)
5C A body referred to in The Chief Executive Officer
paragraph (d) of the definition (within the meaning of the
of Norfolk Island agency in Public Service Act 2014 of
subsection 6(1) Norfolk Island)
5D A court of Norfolk Island The registrar or principal
registrar of the court or the
person occupying an
equivalent office
8 The nominated AGHS The chief executive officer
company of the company
9 An eligible hearing service The individual
provider that is an individual
10 An eligible hearing service The individual primarily
provider that is not an responsible for the
individual management of the eligible
hearing service provider
Section 38A
(b) specify the nature of the complaints made on behalf of the
class members; and
(c) specify the nature of the relief sought; and
(d) specify the questions of law or fact that are common to the
complaints of the class members.
In describing or otherwise identifying the class members, it is not
necessary to name them or specify how many there are.
(3) A representative complaint may be lodged without the consent of
class members.
Section 38B
(b) on the application of a person who was a class member for
the purposes of the former representative complaint, the
Commissioner may join that person as a complainant to the
complaint as continued under paragraph (a).
(3) The Commissioner may at any stage direct that notice of any
matter be given to a class member or class members.
Section 39
39 Class member for representative complaint not entitled to lodge
individual complaint
A person who is a class member for a representative complaint is
not entitled to lodge a complaint in respect of the same subject
matter.
40 Investigations
(1) Subject to subsection (1A), the Commissioner shall investigate an
act or practice if:
(a) the act or practice may be an interference with the privacy of
an individual; and
(b) a complaint about the act or practice has been made under
section 36.
(1A) The Commissioner must not investigate a complaint if the
complainant did not complain to the respondent before making the
complaint to the Commissioner under section 36. However, the
Commissioner may decide to investigate the complaint if he or she
considers that it was not appropriate for the complainant to
complain to the respondent.
(1B) Subsection (1A) does not apply if the complaint is about an act or
practice that may breach:
(a) section 20R, 20T, 21T or 21V (which are about access to,
and correction of, credit reporting information etc.); or
(b) a provision of the registered CR code that relates to that
section.
(2) The Commissioner may, on the Commissioner’s own initiative,
investigate an act or practice if:
(a) the act or practice may be an interference with the privacy of
an individual or a breach of Australian Privacy Principle 1;
and
(b) the Commissioner thinks it is desirable that the act or practice
be investigated.
Section 40A
(3) This section has effect subject to section 41.
Section 41
41 Commissioner may or must decide not to investigate etc. in
certain circumstances
(1) The Commissioner may decide not to investigate, or not to
investigate further, an act or practice about which a complaint has
been made under section 36 if the Commissioner is satisfied that:
(a) the act or practice is not an interference with the privacy of
an individual; or
(c) the complaint was made more than 12 months after the
complainant became aware of the act or practice; or
(d) the complaint is frivolous, vexatious, misconceived, lacking
in substance or not made in good faith; or
(da) an investigation, or further investigation, of the act or
practice is not warranted having regard to all the
circumstances; or
(db) the complainant has not responded, within the period
specified by the Commissioner, to a request for information
in relation to the complaint; or
(dc) the act or practice is being dealt with by a recognised external
dispute resolution scheme; or
(dd) the act or practice would be more effectively or appropriately
dealt with by a recognised external dispute resolution
scheme; or
(e) the act or practice is the subject of an application under
another Commonwealth law, or a State or Territory law, and
the subject-matter of the complaint has been, or is being,
dealt with adequately under that law; or
(f) another Commonwealth law, or a State or Territory law,
provides a more appropriate remedy for the act or practice
that is the subject of the complaint.
(1A) The Commissioner must not investigate, or investigate further, an
act or practice about which a complaint has been made under
section 36 if the Commissioner is satisfied that the complainant has
withdrawn the complaint.
Section 42
(2) The Commissioner may decide not to investigate, or not to
investigate further, an act or practice about which a complaint has
been made under section 36 if the Commissioner is satisfied that
the complainant has complained to the respondent about the act or
practice and either:
(a) the respondent has dealt, or is dealing, adequately with the
complaint; or
(b) the respondent has not yet had an adequate opportunity to
deal with the complaint.
(3) The Commissioner may defer the investigation or further
investigation of an act or practice about which a complaint has
been made under section 36 if:
(a) an application has been made by the respondent for a
determination under section 72 in relation to the act or
practice; and
(b) the Commissioner is satisfied that the interests of persons
affected by the act or practice would not be unreasonably
prejudiced if the investigation or further investigation were
deferred until the application had been disposed of.
42 Preliminary inquiries
(1) Where a complaint has been made to the Commissioner, the
Commissioner may, for the purpose of determining:
(a) whether the Commissioner has power to investigate the
matter to which the complaint relates; or
(b) whether the Commissioner may, in his or her discretion,
decide not to investigate the matter;
make inquiries of the respondent or any other person.
(2) The Commissioner may make inquiries of any person for the
purpose of determining whether to investigate an act or practice
under subsection 40(2).
Section 43
43 Conduct of investigations
(1) Before commencing an investigation of a matter to which a
complaint relates, the Commissioner shall inform the respondent
that the matter is to be investigated.
(1AA) Before commencing an investigation of an act or practice of a
person or entity under subsection 40(2), the Commissioner must
inform the person or entity that the act or practice is to be
investigated.
(1A) Before starting to investigate an act done, or practice engaged in,
by a contracted service provider for the purpose of providing
(directly or indirectly) a service to an agency under a
Commonwealth contract, the Commissioner must also inform the
agency that the act or practice is to be investigated.
Note: See subsection 6(9) about provision of services to an agency.
Section 43A
(c) an application for a hearing has not been made under
section 43A.
(7) Where, in connection with an investigation of a matter under this
Division, the Commissioner proposes to hold a hearing, or
proposes to make a requirement of a person under section 44, the
Commissioner shall, if he or she has not previously informed the
responsible Minister (if any) that the matter is being investigated,
inform that Minister accordingly.
(8) The Commissioner may, either before or after the completion of an
investigation under this Division, discuss any matter that is
relevant to the investigation with a Minister concerned with the
matter.
(8A) Subsection (8) does not allow the Commissioner to discuss a
matter relevant to an investigation of a breach of the Australian
Privacy Principles or a registered APP code with a Minister, unless
the investigation is of an act done, or practice engaged in:
(a) by a contracted service provider for a Commonwealth
contract; and
(b) for the purpose of providing a service to an agency to meet
(directly or indirectly) an obligation under the contract.
(9) Where the Commissioner forms the opinion, either before or after
completing an investigation under this Division, that there is
evidence that an officer of an agency has been guilty of a breach of
duty or of misconduct and that the evidence is, in all the
circumstances, of sufficient force to justify the Commissioner
doing so, the Commissioner shall bring the evidence to the notice
of:
(a) an appropriate officer of an agency; or
(b) if the Commissioner thinks that there is no officer of an
agency to whose notice the evidence may appropriately be
drawn—an appropriate Minister.
Section 43A
43A Interested party may request a hearing
(1) An interested party in relation to an investigation under this
Division may, in writing, request that the Commissioner hold a
hearing before the Commissioner makes a determination under
section 52 in relation to the investigation.
(2) If an interested party makes request under subsection (1), the
Commissioner must:
(a) notify any other interested party of the request; and
(b) give all interested parties a reasonable opportunity to make a
submission about the request; and
(c) decide whether or not to hold a hearing.
(3) In this section:
interested party in relation to an investigation means:
(a) in the case of an investigation under subsection 40(1)—the
complainant or respondent; or
(b) otherwise—the person or entity that engaged in the act or
practice that is being investigated.
Section 45
(b) the time at which, or the period within which, the information
or document is to be given or produced.
(2A) If documents are produced to the Commissioner in accordance
with a requirement under subsection (1), the Commissioner:
(a) may take possession of, and may make copies of, or take
extracts from, the documents; and
(b) may retain possession of the documents for any period that is
necessary for the purposes of the investigation to which the
documents relate; and
(c) during that period must permit a person who would be
entitled to inspect any one or more of the documents if they
were not in the Commissioner’s possession to inspect at all
reasonable times any of the documents that the person would
be so entitled to inspect.
(3) If the Commissioner has reason to believe that a person has
information relevant to an investigation under this Division, the
Commissioner may give to the person a written notice requiring the
person to attend before the Commissioner at a time and place
specified in the notice to answer questions relevant to the
investigation.
(4) This section is subject to section 70 but it has effect regardless of
any other enactment.
(5) A person is not liable to a penalty under the provisions of any other
enactment because he or she gives information, produces a
document or answers a question when required to do so under this
Division.
Section 46
(2) The oath or affirmation to be taken or made by a person for the
purposes of this section is an oath or affirmation that the answers
the person will give will be true.
Section 47
(3) A person who has been directed under subsection (1) to attend a
conference is entitled to be paid by the Commonwealth a
reasonable sum for the person’s attendance at the conference.
(4) The Commissioner may, in a notice given to a person under
subsection (1), require the person to produce such documents at the
conference as are specified in the notice.
Section 49
for the purpose of providing (directly or indirectly) a service to an
agency under a Commonwealth contract, the Commissioner must
also inform the agency of the decision.
Note: See subsection 6(9) about provision of services to an agency.
Section 49A
section 35H, 35J or 35K of the Anti-Money Laundering and
Counter-Terrorism Financing Act 2006.
credit reporting offence means:
(a) an offence against subsection 20P(1), 21R(1) or (2), 24(1) or
(2) or 24A(1) or (2); or
(b) an offence against section 6 of the Crimes Act 1914, or
section 11.1, 11.4 or 11.5 of the Criminal Code, being an
offence that relates to an offence referred to in paragraph (a)
of this definition.
tax file number offence means:
(a) an offence against section 8WA or 8WB of the Taxation
Administration Act 1953; or
(b) an offence against section 6 of the Crimes Act 1914, or
section 11.1, 11.4 or 11.5 of the Criminal Code, being an
offence that relates to an offence referred to in paragraph (a)
of this definition.
Section 50
(2) The Registrar of Personal Property Securities must notify the
Commissioner in writing if, after having been informed of the
Commissioner’s opinion under paragraph (1)(a), the Registrar
decides:
(a) not to apply for an order under section 222 of the Personal
Property Securities Act 2009; or
(b) to discontinue a proceeding that is an application for an order
under section 222 of that Act.
(3) Upon receiving a notice under subsection (2), the Commissioner
may continue an investigation discontinued under paragraph (1)(c).
Section 50
(ii) to the Ombudsman under the Ombudsman Act 1976; or
(iia) to the Ombudsman under a particular Norfolk Island
enactment; or
(iii) to the Postal Industry Ombudsman under the
Ombudsman Act 1976; or
(iv) to the Overseas Students Ombudsman under the
Ombudsman Act 1976; or
(v) to a recognised external dispute resolution scheme; or
(b) an application with respect to that matter has been, or could
have been, made by the complainant to the Australian Public
Service Commissioner under the Public Service Act 1999;
and that that matter could be more conveniently or effectively dealt
with by the alternative complaint body, the Commissioner may
decide not to investigate the matter, or not to investigate the matter
further, as the case may be, and, if the Commissioner so decides,
he or she shall:
(c) transfer the complaint to the alternative complaint body; and
(d) give notice in writing to the complainant stating that the
complaint has been so transferred; and
(e) give to the alternative complaint body any information or
documents that relate to the complaint and are in the
possession, or under the control, of the Commissioner.
(3) A complaint transferred under subsection (2) shall be taken to be:
(a) a complaint made:
(i) to the Australian Human Rights Commission under
Division 3 of Part II of the Australian Human Rights
Commission Act 1986; or
(ii) to the Ombudsman under the Ombudsman Act 1976; or
(iia) to the Ombudsman under the Norfolk Island enactment
concerned; or
(iii) to the Postal Industry Ombudsman under the
Ombudsman Act 1976; or
(iv) to the Overseas Students Ombudsman under the
Ombudsman Act 1976; or
Section 50A
(v) to the recognised external dispute resolution scheme; or
(b) an application made to the Australian Public Service
Commissioner under the Public Service Act 1999;
as the case requires.
Section 51
(4) If the Commissioner amends the complaint after starting to
investigate it, the Commissioner is taken to have satisfied
subsection 43(1A) in relation to the agency.
Section 52
Section 52
Section 53
Section 53A
Section 53B
Section 54
Division 3—Enforcement
54 Application of Division
(1) This Division applies to a determination made under section 52
after the commencement of this Division, except where the
determination applies in relation to an agency or the principal
executive of an agency.
(2) In this section:
agency does not include the nominated AGHS company or an
eligible hearing service provider.
Section 55B
Section 55B
Section 57
57 Application of Division
(1) This Division applies to a determination that is made under
section 52 and that applies in relation to an agency or the principal
executive of an agency.
(2) In this section:
agency does not include the nominated AGHS company or an
eligible hearing service provider.
58 Obligations of agencies
If this Division applies to a determination and the determination
applies in relation to an agency, the agency:
(a) must not repeat or continue conduct that is covered by a
declaration included in the determination under
subparagraph 52(1)(b)(i) or paragraph 52(1A)(a); and
(b) must take the steps that are specified in a declaration
included in the determination under
subparagraph 52(1)(b)(ia) or paragraph 52(1A)(b) within the
specified period; and
(c) must perform the act or course of conduct that is covered by
a declaration included in the determination under
subparagraph 52(1)(b)(ii) or paragraph 52(1A)(c).
Section 60
(a) that the terms of the determination are brought to the notice
of all members, officers and employees of the agency whose
duties are such that they may engage in conduct of the kind
to which the determination relates; and
(b) that no member, officer or employee of the agency repeats or
continues conduct that is covered by a declaration included in
the determination under subparagraph 52(1)(b)(i) or
paragraph 52(1A)(a); and
(ba) that the steps specified in a declaration included in the
determination under subparagraph 52(1)(b)(ia) or
paragraph 52(1A)(b) are taken within the specified period;
and
(c) the performance of any act or course of conduct that is
covered by a declaration included in the determination under
subparagraph 52(1)(b)(ii) or paragraph 52(1A)(c).
Section 62
62 Enforcement of determination against an agency
(1) If an agency fails to comply with section 58, an application may be
made to the Federal Court or the Federal Circuit Court for an order
directing the agency to comply.
(2) If the principal executive of an agency fails to comply with
section 59, an application may be made to the Federal Court or the
Federal Circuit Court for an order directing the principal executive
to comply.
(3) The application may be made by:
(a) if the determination was made under subsection 52(1)—the
complainant; or
(b) the Commissioner.
(4) On an application under this section, the court may make such
other orders as it thinks fit with a view to securing compliance by
the agency or principal executive.
(5) An application may not be made under this section in relation to a
determination under section 52 until:
(a) the time has expired for making an application under
section 96 for review of the determination; or
(b) if such an application is made, the decision of the
Administrative Appeals Tribunal on the application has come
into operation.
(6) In this section:
complainant, in relation to a representative complaint, means a
class member.
Section 63
Division 5—Miscellaneous
63 Legal assistance
(1) If:
(a) the Commissioner has dismissed a file number complaint;
and
(b) the respondent to the complaint is not an agency or the
principal executive of an agency;
the respondent may apply to the Attorney-General for assistance
under this section.
(2) A person who:
(a) has commenced or proposes to commence proceedings in the
Federal Court or the Federal Circuit Court under section 55;
or
(b) has engaged in conduct or is alleged to have engaged in
conduct in respect of which proceedings have been
commenced in the Federal Court or the Federal Circuit Court
under section 55;
may apply to the Attorney-General for the provision of assistance
under this section in respect of the proceedings.
(2A) Subsection (2) does not permit an application relating to
proceedings under section 55A to enforce a determination relating
to a code complaint or an APP complaint.
(3) If the Attorney-General is satisfied that in all the circumstances it
is reasonable to grant an application made under this section, he or
she may authorise the provision by the Commonwealth to the
applicant of:
(a) in the case of an application under subsection (1)—such
financial assistance in connection with the investigation of
the complaint as the Attorney-General determines; or
(b) in the case of an application under subsection (2)—such legal
or financial assistance in respect of the proceeding as the
Attorney-General determines.
Section 64
Section 66
Section 66
Section 66
Section 67
(11) Subsections (4), (7) and (10) do not apply where proceedings, in
respect of which giving information or producing a document
might tend to incriminate an individual or make an individual
liable to forfeiture or a penalty, have been commenced against the
individual and have not been finally dealt with by a court or
otherwise disposed of.
Section 68
(3) A person shall not enter under subsection (1) premises other than
premises that are occupied by an agency unless:
(a) the occupier of the premises has consented to the person
entering the premises; or
(b) the person is authorised, pursuant to a warrant issued under
subsection (4), to enter the premises.
(3A) Before obtaining the consent, the authorised person must inform
the occupier or person in charge that he or she may refuse to
consent.
(3B) An entry by an authorised person with the consent of the occupier
or person in charge is not lawful if the consent was not voluntary.
(3C) The authorised person may not enter premises (other than premises
occupied by an agency) if:
(a) the occupant or person in charge asks the authorised person
to produce his or her identity card; and
(b) the authorised person does not produce it.
(3D) If an authorised person is on premises with the consent of the
occupier or person in charge, the authorised person must leave the
premises if the occupier or person in charge asks the authorised
person to do so.
(4) If, on an application made by a person authorised by the
Commissioner under subsection (1), a Magistrate is satisfied, by
information on oath, that it is reasonably necessary, for the
purposes of the performance by the Commissioner of his or her
functions under this Act, that the person be empowered to enter the
premises, the Magistrate may issue a warrant authorising the
person, with such assistance as the person thinks necessary, to
enter the premises, if necessary by force, for the purpose of
exercising those powers.
(5) A warrant issued under subsection (4) shall state:
(a) whether entry is authorised to be made at any time of the day
or during specified hours of the day; and
Section 68A
(b) a day, not being later than one month after the day on which
the warrant was issued, at the end of which the warrant
ceases to have effect.
(6) Nothing in subsection (1) restricts the operation of any other
provision of this Part.
Section 70B
Section 70B
Section 71
71 Interpretation
For the purposes of this Part, a person is interested in an
application made under section 73 if, and only if, the
Commissioner is of the opinion that the person has a real and
substantial interest in the application.
Section 73
Section 74
75 Draft determination
(1) The Commissioner shall prepare a draft of his or her proposed
determination in relation to the application unless the
Commissioner dismisses the application under subsection 73(1A).
(2) If the applicant is an agency, the Commissioner must send to the
agency, and to each other person (if any) who is interested in the
application, a written invitation to notify the Commissioner, within
the period specified in the invitation, whether or not the agency or
other person wishes the Commissioner to hold a conference about
the draft determination.
(2A) If the applicant is an organisation, the Commissioner must:
(a) send a written invitation to the organisation to notify the
Commissioner, within the period specified in the invitation,
whether or not the organisation wishes the Commissioner to
hold a conference about the draft determination; and
(b) issue, in any way the Commissioner thinks appropriate, an
invitation in corresponding terms to the other persons (if any)
that the Commissioner thinks appropriate.
Section 76
76 Conference
(1) If an agency, organisation or person notifies the Commissioner,
within the period specified in an invitation sent to the agency,
organisation or person, that the agency, organisation or person
wishes a conference to be held about the draft determination, the
Commissioner shall hold such a conference.
(2) The Commissioner shall fix a day, time and place for the holding
of the conference.
(3) The day fixed shall not be more than 30 days after the latest day on
which a period specified in any of the invitations sent in relation to
the draft determination expires.
(4) The Commissioner shall give notice of the day, time and place of
the conference to the agency or organisation and to each person to
whom an invitation was sent.
77 Conduct of conference
(1) At the conference, the agency or organisation is entitled to be
represented by a person who is, or persons each of whom is, an
officer or employee of the agency or organisation.
(2) At the conference, a person to whom an invitation was sent, or any
other person who is interested in the application and whose
presence at the conference is considered by the Commissioner to
be appropriate, is entitled to attend and participate personally or, in
the case of a body corporate, to be represented by a person who is,
or persons each of whom is, a director, officer or employee of the
body corporate.
(3) The Commissioner may exclude from the conference a person
who:
Section 78
78 Determination of application
The Commissioner shall, after complying with this Part in relation
to the application, make:
(a) such determination under section 72 as he or she considers
appropriate; or
(b) a written determination dismissing the application.
79 Making of determination
(1) The Commissioner shall, in making a determination, take account
of all matters raised at the conference.
(2) The Commissioner shall, in making a determination, take account
of all submissions about the application that have been made,
whether at a conference or not, by the agency, organisation or any
other person.
Section 80A
Section 80D
Section 80E
Section 80F
80F Object
The object of this Part is to make special provision for the
collection, use and disclosure of personal information in
emergencies and disasters.
80G Interpretation
(1) In this Part:
duty of confidence means any duty or obligation arising under the
common law or at equity pursuant to which a person is obliged not
to disclose information, but does not include legal professional
privilege.
emergency declaration means a declaration under section 80J or
80K.
permanent resident means a person, other than an Australian
citizen:
(a) whose normal place of residence is situated in Australia; and
(b) whose presence in Australia is not subject to any limitation as
to time imposed by law; and
(c) who is not an illegal entrant within the meaning of the
Migration Act 1958.
secrecy provision means a provision of a law of the
Commonwealth (including a provision of this Act), or of a Norfolk
Island enactment, that prohibits or regulates the use or disclosure
of personal information, whether the provision relates to the use or
disclosure of personal information generally or in specified
circumstances.
Section 80H
Section 80J
Section 80L
Section 80P
Section 80P
Section 80P
Section 80Q
Section 80R
Section 80S
Section 80T
Section 80U
Section 80W
Section 80X
Section 80ZA
Note: In determining the pecuniary penalty, the court must take into account
all relevant matters including the matters mentioned in
subsection 80W(6).
80ZB Civil evidence and procedure rules for civil penalty orders
The Federal Court or Federal Circuit Court must apply the rules of
evidence and procedure for civil matters when hearing proceedings
for a civil penalty order.
Section 80ZD
Section 80ZG
Section 81
81 Interpretation
In this Part, unless the contrary intention appears:
Advisory Committee means the Privacy Advisory Committee
established by subsection 82(1).
member means a member of the Advisory Committee.
Section 83
83 Functions
The functions of the Advisory Committee are:
(a) on its own initiative, or when requested by the
Commissioner, to advise the Commissioner on matters
relevant to his or her functions;
(b) to recommend material to the Commissioner for inclusion in
rules or guidelines to be issued by the Commissioner
pursuant to his or her functions; and
Section 84
84 Leave of absence
The convenor may, on such terms and conditions as the convenor
thinks fit, grant to another member leave to be absent from a
meeting of the Advisory Committee.
Section 87
88 Travel allowance
An appointed member is entitled to be paid travelling allowance in
accordance with the regulations.
Section 89
90 Application of Part
(1) This Part applies where a person (in this Part called a confidant) is
subject to an obligation of confidence to another person (in this
Part called a confider) in respect of personal information, whether
the information relates to the confider or to a third person, being an
obligation in respect of a breach of which relief may be obtained
(whether in the exercise of a discretion or not) in legal proceedings.
(2) This Part does not apply where a criminal penalty only may be
imposed in respect of the breach.
Section 92
94 Jurisdiction of courts
(1) The jurisdiction of the courts of the Australian Capital Territory
extends to matters arising under this Part.
(2) Subsection (1) does not deprive a court of a State or of another
Territory of any jurisdiction that it has.
Section 95
Part IX—Miscellaneous
Overview
(1) This section allows the Commissioner to approve for the purposes
of the Australian Privacy Principles guidelines that are issued by
the CEO of the National Health and Medical Research Council or a
prescribed authority.
Section 95A
Revocation of approval
(6) The Commissioner may, by notice in the Gazette, revoke an
approval of guidelines under this section if he or she is no longer
Section 95AA
Overview
(1) This section allows the Commissioner to approve for the purposes
of the Australian Privacy Principles guidelines that are issued by
the National Health and Medical Research Council.
Section 95C
Section 98
98 Injunctions
(1) Where a person has engaged, is engaging or is proposing to engage
in any conduct that constituted or would constitute a contravention
of this Act, the Federal Court or the Federal Circuit Court may, on
the application of the Commissioner or any other person, grant an
injunction restraining the person from engaging in the conduct and,
if in the court’s opinion it is desirable to do so, requiring the person
to do any act or thing.
(2) Where:
(a) a person has refused or failed, or is refusing or failing, or is
proposing to refuse or fail, to do an act or thing; and
(b) the refusal or failure was, is, or would be a contravention of
this Act;
the Federal Court or the Federal Circuit Court may, on the
application of the Commissioner or any other person, grant an
injunction requiring the first-mentioned person to do that act or
thing.
(3) Where an application is made to the court for an injunction under
this section, the court may, if in the court’s opinion it is desirable
to do so, before considering the application, grant an interim
injunction restraining a person from engaging in conduct of the
kind referred to in that subsection pending the determination of the
application.
(4) The court may discharge or vary an injunction granted under this
section.
Section 98
Section 98A
Section 98C
Section 99A
Section 100
100 Regulations
(1) The Governor-General may make regulations, not inconsistent with
this Act, prescribing matters:
(a) required or permitted by this Act to be prescribed; or
(b) necessary or convenient to be prescribed for carrying out or
giving effect to this Act.
(2) Before the Governor-General makes regulations for the purposes of
Australian Privacy Principle 9.3 prescribing a government related
identifier, an organisation or a class of organisations, and
circumstances, the Minister must be satisfied that:
Section 100
Overview
Part 1 sets out principles that require APP entities to consider the
privacy of personal information, including ensuring that APP
entities manage personal information in an open and transparent
way.
Part 2 sets out principles that deal with the collection of personal
information including unsolicited personal information.
Part 3 sets out principles about how APP entities deal with
personal information and government related identifiers. The Part
includes principles about the use and disclosure of personal
information and those identifiers.
Part 5 sets out principles that deal with requests for access to, and
the correction of, personal information.
Clause 1
Clause 2
Clause 2
Clause 3
Sensitive information
3.3 An APP entity must not collect sensitive information about an
individual unless:
(a) the individual consents to the collection of the information
and:
(i) if the entity is an agency—the information is reasonably
necessary for, or directly related to, one or more of the
entity’s functions or activities; or
(ii) if the entity is an organisation—the information is
reasonably necessary for one or more of the entity’s
functions or activities; or
(b) subclause 3.4 applies in relation to the information.
3.4 This subclause applies in relation to sensitive information about an
individual if:
(a) the collection of the information is required or authorised by
or under an Australian law or a court/tribunal order; or
Clause 3
Means of collection
3.5 An APP entity must collect personal information only by lawful
and fair means.
3.6 An APP entity must collect personal information about an
individual only from the individual unless:
(a) if the entity is an agency:
(i) the individual consents to the collection of the
information from someone other than the individual; or
Clause 4
Clause 5
Clause 5
(g) that the APP privacy policy of the APP entity contains
information about how the individual may access the
personal information about the individual that is held by the
entity and seek the correction of such information;
(h) that the APP privacy policy of the APP entity contains
information about how the individual may complain about a
breach of the Australian Privacy Principles, or a registered
APP code (if any) that binds the entity, and how the entity
will deal with such a complaint;
(i) whether the APP entity is likely to disclose the personal
information to overseas recipients;
(j) if the APP entity is likely to disclose the personal information
to overseas recipients—the countries in which such recipients
are likely to be located if it is practicable to specify those
countries in the notification or to otherwise make the
individual aware of them.
Clause 6
Use or disclosure
6.1 If an APP entity holds personal information about an individual
that was collected for a particular purpose (the primary purpose),
the entity must not use or disclose the information for another
purpose (the secondary purpose) unless:
(a) the individual has consented to the use or disclosure of the
information; or
(b) subclause 6.2 or 6.3 applies in relation to the use or
disclosure of the information.
Note: Australian Privacy Principle 8 sets out requirements for the disclosure
of personal information to a person who is not in Australia or an
external Territory.
Clause 6
Clause 7
Exceptions
6.7 This principle does not apply to the use or disclosure by an
organisation of:
(a) personal information for the purpose of direct marketing; or
(b) government related identifiers.
Direct marketing
7.1 If an organisation holds personal information about an individual,
the organisation must not use or disclose the information for the
purpose of direct marketing.
Note: An act or practice of an agency may be treated as an act or practice of
an organisation, see section 7A.
Clause 7
Exception—sensitive information
7.4 Despite subclause 7.1, an organisation may use or disclose
sensitive information about an individual for the purpose of direct
marketing if the individual has consented to the use or disclosure
of the information for that purpose.
Clause 7
Clause 8
Clause 9
Clause 9
Clause 9
Clause 10
Clause 12
Access
12.1 If an APP entity holds personal information about an individual,
the entity must, on request by the individual, give the individual
access to the information.
Exception to access—agency
12.2 If:
(a) the APP entity is an agency; and
(b) the entity is required or authorised to refuse to give the
individual access to the personal information by or under:
(i) the Freedom of Information Act; or
(ii) any other Act of the Commonwealth, or a Norfolk
Island enactment, that provides for access by persons to
documents;
then, despite subclause 12.1, the entity is not required to give
access to the extent that the entity is required or authorised to
refuse to give access.
Exception to access—organisation
12.3 If the APP entity is an organisation then, despite subclause 12.1,
the entity is not required to give the individual access to the
personal information to the extent that:
(a) the entity reasonably believes that giving access would pose
a serious threat to the life, health or safety of any individual,
or to public health or public safety; or
(b) giving access would have an unreasonable impact on the
privacy of other individuals; or
Clause 12
Clause 12
Access charges
12.7 If the APP entity is an agency, the entity must not charge the
individual for the making of the request or for giving access to the
personal information.
12.8 If:
(a) the APP entity is an organisation; and
(b) the entity charges the individual for giving access to the
personal information;
the charge must not be excessive and must not apply to the making
of the request.
Clause 13
12.10 If the APP entity refuses to give access to the personal information
because of paragraph 12.3(j), the reasons for the refusal may
include an explanation for the commercially sensitive decision.
Correction
13.1 If:
(a) an APP entity holds personal information about an
individual; and
(b) either:
(i) the entity is satisfied that, having regard to a purpose for
which the information is held, the information is
inaccurate, out-of-date, incomplete, irrelevant or
misleading; or
(ii) the individual requests the entity to correct the
information;
the entity must take such steps (if any) as are reasonable in the
circumstances to correct that information to ensure that, having
regard to the purpose for which it is held, the information is
accurate, up-to-date, complete, relevant and not misleading.
Clause 13
Endnotes
Endnote 1—About the endnotes
The endnotes provide information about this compilation and the compiled law.
The following endnotes are included in every compilation:
Endnote 1—About the endnotes
Endnote 2—Abbreviation key
Endnote 3—Legislation history
Endnote 4—Amendment history
Endnotes about misdescribed amendments and other matters are included in a
compilation only as necessary.
Abbreviation key—Endnote 2
The abbreviation key sets out abbreviations that may be used in the endnotes.
Legislation history and amendment history—Endnotes 3 and 4
Amending laws are annotated in the legislation history and amendment history.
The legislation history in endnote 3 provides information about each law that
has amended (or will amend) the compiled law. The information includes
commencement details for amending laws and details of any application, saving
or transitional provisions that are not included in this compilation.
The amendment history in endnote 4 provides information about amendments at
the provision (generally section or equivalent) level. It also includes information
about any provision of the compiled law that has been repealed in accordance
with a provision of the law.
Misdescribed amendments
A misdescribed amendment is an amendment that does not accurately describe
the amendment to be made. If, despite the misdescription, the amendment can
be given effect as intended, the amendment is incorporated into the compiled
law and the abbreviation “(md)” added to the details of the amendment included
in the amendment history.
If a misdescribed amendment cannot be given effect as intended, the
amendment is set out in the endnotes.
Privacy Act 1988 119, 1988 14 Dec 1 Jan 1989 (see Gazette
1988 1988, No. S399)
Law and Justice 11, 1990 17 Jan 1990 Part 1 (ss. 1, 2) and —
Legislation Amendment Part 3 (ss. 6, 7): Royal
Act 1989 Assent
ss. 8–10: 17 July 1990
ss. 12, 13 and 51(1)(b),
(2): 17 Jan 1990 (see s.
2(5))
Remainder: 14 Feb 1990
Defence Legislation 75, 1990 22 Oct s. 5: Royal Assent (a) —
Amendment Act 1990 1990
Privacy Amendment Act 116, 1990 24 Dec 24 Sept 1991 s. 25 (ad. by 136,
1990 1990 1991, s. 21)
as amended by
Law and Justice 136, 1991 12 Sept Part 4 (s. 21): 24 Sept —
Legislation 1991 1991 (b)
Amendment Act 1991
Law and Justice 165, 1992 11 Dec s. 4: (c) —
Legislation 1992
Amendment Act
(No. 3) 1992
Data-matching Program 20, 1991 23 Jan 1991 23 Jan 1991 —
(Assistance and Tax) Act
1990
Crimes Legislation 28, 1991 4 Mar 1991 s. 74(1): Royal Assent —
Amendment Act 1991 (d)
Industrial Relations 122, 1991 27 June ss. 4(1), 10(b) and 15– s. 31(2)
Legislation Amendment 1991 20: 1 Dec 1988
Act 1991 ss. 28(b)–(e), 30 and 31:
10 Dec 1991 (see
Gazette 1991, No. S332)
Remainder: Royal
Assent
Law and Justice 136, 1991 12 Sept Part 3 (ss. 10–20): (e) —
Legislation Amendment 1991
Act 1991
Social Security 194, 1991 13 Dec Schedule 5 (Part 2): (f) —
Legislation Amendment 1991
Act (No. 4) 1991
Law and Justice 143, 1992 7 Dec 1992 7 Dec 1992 —
Legislation Amendment
Act (No. 4) 1992
National Health 28, 1993 9 June 1993 9 June 1993 —
Amendment Act 1993
Law and Justice 13, 1994 18 Jan 1994 s. 22: 13 Jan 1993 s. 16
Legislation Amendment Part 6 (ss. 27–41): 11
Act 1993 Apr 1994 (see Gazette
1994, No. S126)
Remainder: Royal
Assent
Law and Justice 84, 1994 23 June s. 71: Royal Assent (g) —
Legislation Amendment 1994
Act 1994
Australian Capital 92, 1994 29 June 1 July 1994 (see Gazette —
Territory Government 1994 1994, No. S256)
Service (Consequential
Provisions) Act 1994
Employment Services 177, 1994 19 Dec ss. 1, 2(1), (3) and Part 2 s. 19
(Consequential 1994 (ss. 3–8): 19 Dec 1994
Amendments) Act 1994 (see s. 2(1))
s. 2(2) and Div. 4 of
Part 6 (ss. 32–39): Royal
Assent
Remainder: 1 Jan 1995
(see s. 2(3) and Gazette
1994, No. S472)
Human Rights 59, 1995 28 June Schedule (item 25): 30 ss. 4 and 5
Legislation Amendment 1995 Oct 1992
Act 1995 Remainder: Royal
Assent
Statute Law Revision 43, 1996 25 Oct Schedule 4 (item 122): —
Act 1996 1996 Royal Assent (h)
Law and Justice 34, 1997 17 Apr Schedule 13: Royal —
Legislation Amendment 1997 Assent (i)
Act 1997
Hearing Services and 82, 1997 18 June Schedule 4 (items 1, 2, Sch. 4 (item 12)
AGHS Reform Act 1997 1997 4–12): Royal Assent (j)
Schedule 4 (item 3): (j)
as amended by
Statute Law Revision 100, 2005 6 July 2005 Schedule 2 (item 20): —
Act 2005 (ja)
Statute Law Revision 9, 2006 23 Mar Schedule 2 (item 19): —
Act 2006 2006 (see 9, 2006 below)
Financial Sector Reform 48, 1998 29 June Schedule 1 (item 133): —
(Consequential 1998 1 July 1998 (see Gazette
Amendments) Act 1998 1998, No. S316) (k)
Financial Sector Reform 44, 1999 17 June Schedule 7 (items 126– —
(Amendments and 1999 128): (l)
Transitional Provisions)
Act (No. 1) 1999
Corporations (Repeals, 55, 2001 28 June ss. 4–14 and Schedule 3 ss. 4–14
Consequentials and 2001 (item 437): 15 July 2001 s. 2(8) (am. by
Transitionals) Act 2001 (see Gazette 2001, No. 116, 2003, Sch. 4
S285) (p) [item 1])
Schedule 3 (item 438):
(p)
as amended by
Financial Sector 116, 2003 27 Nov Schedule 4 (item 1): (q) —
Legislation 2003
Amendment Act
(No. 1) 2003
National Crime 135, 2001 1 Oct 2001 Schedules 1–7 and 9–12: —
Authority Legislation 12 Oct 2001 (see Gazette
Amendment Act 2001 2001, No. S428)
Schedule 8: 13 Oct 2001
(see Gazette 2001, No.
S428)
Remainder: Royal
Assent
Abolition of Compulsory 159, 2001 1 Oct 2001 29 Oct 2001 Sch. 1 (item 97)
Age Retirement
(Statutory Officeholders)
Act 2001
Australian Crime 125, 2002 10 Dec Schedule 2 (items 99– —
Commission 2002 106): 1 Jan 2003
Establishment Act 2002
Defence Legislation 135, 2003 17 Dec Schedule 2 (item 39): —
Amendment Act 2003 2003 17 June 2004
Privacy Amendment Act 49, 2004 21 Apr 21 Apr 2004 Sch. 1 (items 3, 5)
2004 2004
as amended by
Statute Law Revision 9, 2006 23 Mar Schedule 2 (item 21): —
Act 2006 2006 (see 9, 2006 below)
Administrative Appeals 38, 2005 1 Apr 2005 Schedule 1 (item 229): —
Tribunal Amendment 16 May 2005
Act 2005
Statute Law Revision 100, 2005 6 July 2005 Schedule 1 (item 38): —
Act 2005 Royal Assent
Intelligence Services 128, 2005 4 Nov 2005 Schedules 1–8: 2 Dec —
Legislation Amendment 2005
Act 2005 Remainder: Royal
Assent
Statute Law Revision 9, 2006 23 Mar Schedule 1 (item 21) and —
Act 2006 2006 Schedule 2 (items 19,
21): (r)
Postal Industry 25, 2006 6 Apr 2006 Schedule 1 (items 17–19, Sch. 1
Ombudsman Act 2006 20(2)): 6 Oct 2006 (item 20(2))
as amended by
Statute Law Revision 73, 2008 3 July 2008 Schedule 2 (item 24): (s) —
Act 2008
National Health and 50, 2006 9 June 2006 Schedule 1: 1 July 2006 —
Medical Research Remainder: Royal
Council Amendment Act Assent
2006
Law Enforcement 86, 2006 30 June Schedule 1 (items 48– —
Integrity Commissioner 2006 53): 30 Dec 2006 (see s.
(Consequential 2(1))
Amendments) Act 2006
Privacy Legislation 99, 2006 14 Sept 14 Sept 2006 —
Amendment Act 2006 2006
Offshore Petroleum and 102, 2009 8 Oct 2009 Schedule 1 (items 62M, —
Greenhouse Gas Storage 62N): 9 Oct 2009
Legislation Amendment
Act 2009
Personal Property 131, 2009 14 Dec Schedule 5 (items 25– —
Securities 2009 30): 30 Jan 2012 (see
(Consequential F2011L02397)
Amendments) Act 2009
Crimes Legislation 4, 2010 19 Feb Schedule 10 (item 23): —
Amendment (Serious 2010 20 Feb 2010
and Organised Crime)
Act (No. 2) 2010
Statute Law Revision 8, 2010 1 Mar 2010 Schedule 5 (items 77, —
Act 2010 78): Royal Assent
Freedom of Information 51, 2010 31 May Schedule 3 (item 38), Sch. 7
Amendment (Reform) 2010 Schedule 5 (items 52–
Act 2010 58) and Schedule 7: (u)
Healthcare Identifiers 73, 2010 28 June Schedule 2 (items 1–7): —
(Consequential 2010 29 June 2010 (see s.
Amendments) Act 2010 2(1))
Schedule 2 (items 8–11):
(v)
Territories Law Reform 139, 2010 10 Dec Schedule 1 (item 76): 11 Sch. 1 (item 297)
Act 2010 2010 Dec 2010
Schedule 1 (items 244–
297): 1 Jan 2011
Tax Laws Amendment 145, 2010 16 Dec Schedule 2 (items 62, —
(Confidentiality of 2010 63): 17 Dec 2010
Taxpayer Information)
Act 2010
as amended by
Statute Law Revision 5, 2015 25 Feb Sch 2 (items 4, 5): 12 —
Act (No. 1) 2015 2015 Mar 2014 (s 2(1) item 6)
Public Service 2, 2013 14 Feb Sch 3 (items 14, 15): —
Amendment Act 2013 2013 1 July 2013 (s 2(1)
item 2)
Federal Circuit Court of 13, 2013 14 Mar Sch 1 (items 468, 469) —
Australia (Consequential 2013 and Sch 2 (item 1): 12
Amendments) Act 2013 Apr 2013 (s 2(1) items 2,
3)
Sch 3 (items 83–91): 12
Mar 2014 (s 2(1)
item 16)
National Security 108, 2014 2 Oct 2014 Sch 6 (items 26, 27): 30 Sch 7 (items 144,
Legislation Amendment Oct 2014 (s 2(1) item 2) 145)
Act (No. 1) 2014 Sch 7 (items 135–137,
144, 145): 3 Oct 2014
(s 2(1) item 5)
Statute Law Revision 5, 2015 25 Feb Sch 1 (item 35): 25 Mar —
Act (No. 1) 2015 2015 2015 (s 2(1) item 2)
Telecommunications 39, 2015 13 Apr Sch 1 (items 1H, 1J, 7): Sch 1 (item 7)
(Interception and 2015 13 Oct 2015 (s 2(1)
Access) Amendment item 2)
(Data Retention) Act
2015
Customs and Other 41, 2015 20 May Sch 5 (items 141, 142) Sch 5 (item 142)
Legislation Amendment 2015 and Sch 9: 1 July 2015 and Sch 9
(Australian Border (s 2(1) items 2, 7)
Force) Act 2015
Norfolk Island 59, 2015 26 May Sch 1 (items 150–175) Sch 1 (items 184–
Legislation Amendment 2015 and Sch 2 (items 356– 195, 197–203)
Act 2015 396): 18 June 2015 and Sch 2
(s 2(1) items 2, 6) (items 356–396)
Sch 1 (items 184–195,
197–203): 27 May 2015
(s 2(1) item 3)
Sch 2 (items 299–305):
1 July 2016 (s 2(1)
item 5)
Biosecurity 62, 2015 16 June Sch 2 (item 53) and Sch Sch 3 and Sch 4
(Consequential 2015 4 (items 1–12(1), 13– (items 1–12(1),
Amendments and 51(5), 52–56(5), 57– 13–51(5), 52–
Transitional Provisions) 61(1), 62–67, 69–83(2), 56(5), 57–61(1),
Act 2015 84): awaiting 62–67, 69–83(2),
commencement (s 2(1) 84)
items 2, 4)
Sch 3: 16 June 2015
(s 2(1) item 3)
(a) The Privacy Act 1988 was amended by section 5 only of the Defence
Legislation Amendment Act 1990, subsection 2(1) of which provides as
follows:
(1) Subject to this section, this Act commences on the day on which it
receives the Royal Assent.
(b) The Privacy Amendment Act 1990 was amended by Part 4 (section 21) only
of the Law and Justice Legislation Amendment Act 1991, subsection 2(3) of
which provides as follows:
(3) Part 4 commences on 24 September 1991.
(c) The Privacy Amendment Act 1990 was amended by section 4 only of the Law
and Justice Legislation Amendment Act (No. 3) 1992, subsection 2(6) of
which provides as follows:
(6) The amendment of the Privacy Amendment Act 1990 made by this Act is
taken to have commenced immediately after the commencement of
section 18 of that Act.
Section 18 commenced on 24 September 1991.
(d) The Privacy Act 1988 was amended by subsection 74(1) only of the Crimes
Legislation Amendment Act 1991, subsection 2(1) of which provides as
follows:
(1) Subject to this section, this Act commences on the day on which it
receives the Royal Assent.
(e) The Privacy Act 1988 was amended by Part 3 (sections 10–20) only of the
Law and Justice Legislation Amendment Act 1991, subsection 2(2) of which
provides as follows:
(2) Part 3 commences immediately after the commencement of the Privacy
Amendment Act 1990.
The Privacy Amendment Act 1990 came into operation on 24 September
1991.
(f) The Privacy Act 1988 was amended by Schedule 5 (Part 2) only of the Social
Security Legislation Amendment Act (No. 4) 1991, subsection 2(13) of which
provides as follows:
(13) Part 2 of Schedule 5 is taken to have commenced immediately after the
commencement of the Data-matching Program (Assistance and Tax) Act
1990.
The Data-matching Program (Assistance and Tax) Act 1990 came into
operation on 23 January 1991.
(g) The Privacy Act 1988 was amended by section 71 only of the Law and
Justice Legislation Amendment Act 1994, subsection 2(1) of which provides
as follows:
(1) Subject to this section, this Act commences on the day on which it
receives the Royal Assent.
(h) The Privacy Act 1988 was amended by Schedule 4 (item 122) only of the
Statute Law Revision Act 1996, subsection 2(1) of which provides as follows:
(1) Subject to subsections (2) and (3), this Act commences on the day on
which it receives the Royal Assent.
(i) The Privacy Act 1988 was amended by Schedule 13 only of the Law and
Justice Legislation Amendment Act 1997, subsection 2(1) of which provides
as follows:
(1) Subject to this section, this Act commences on the day on which it
receives the Royal Assent.
(j) The Privacy Act 1988 was amended by Schedule 4 (items 1–12) only of the
Hearing Services and AGHS Reform Act 1997, subsections 2(1) and (3) of
which provide as follows:
(1) Subject to this section, this Act commences on the day on which it
receives the Royal Assent.
(3) If Schedule 2 to the Reform of Employment Services (Consequential
Provisions) Act 1997 does not commence before the day on which this
Act receives the Royal Assent, the amendment of the definition of
eligible employment services provider in subsection 6(1) of the Privacy
Act 1988 made by this Act commences immediately after the
commencement of Schedule 2 to the Reform of Employment Services
(Consequential Provisions) Act 1997.
The Reform of Employment Services (Consequential Provisions) Bill was
never enacted. Therefore this amendment does not commence.
(ja) Subsection 2(1) (item 38) of the Statute Law Revision Act 2005 provides as
follows:
(1) Each provision of this Act specified in column 1 of the table commences,
or is taken to have commenced, in accordance with column 2 of the table.
Any other statement in column 2 has effect according to its terms.
Commencement information
Column 1 Column 2 Column 3
Provision(s) Commencement Date/Details
38. Schedule 2, Immediately after the time specified in the Hearing 18 June 1997
item 20 Services and AGHS Reform Act 1997 for the
commencement of item 6 of Schedule 4 to that
Act.
(k) The Privacy Act 1988 was amended by Schedule 1 (item 133) only of the
Financial Sector Reform (Consequential Amendments) Act 1998,
subsection 2(2) of which provides as follows:
(2) Subject to subsections (3) to (14), Schedules 1, 2 and 3 commence on the
commencement of the Australian Prudential Regulation Authority Act
1998.
(l) The Privacy Act 1988 was amended by Schedule 7 (items 126–128) only of
the Financial Sector Reform (Amendments and Transitional Provisions) Act
(No. 1) 1999, subsections 3(2)(e) and (16) of which provide as follows:
(2) The following provisions commence on the transfer date:
(e) subject to subsection (12), Schedule 7, other than items 43, 44, 118,
205 and 207 (the commencement of those items is covered by
subsections (10), (11) and (13)).
(16) The Governor-General may, by Proclamation published in the Gazette,
specify the date that is to be the transfer date for the purposes of this Act.
The transfer date was 1 July 1999 (see Gazette 1999, No. S283).
(m) The Privacy Act 1988 was amended by Schedule 1 (items 738–747) only of
the Public Employment (Consequential and Transitional) Amendment Act
1999, subsections 2(1) and (2) of which provide as follows:
(1) In this Act, commencing time means the time when the Public Service
Act 1999 commences.
(2) Subject to this section, this Act commences at the commencing time.
(n) The Privacy Act 1988 was amended by Schedule 3 (items 1 and 49) only of
the Australian Security Intelligence Organisation Legislation Amendment Act
1999, subsection 2(2) of which provides as follows:
(2) Subject to subsections (3) to (6), Schedule 3 commences immediately
after the commencement of the other Schedules to this Act.
The other Schedules commenced on Royal Assent.
(o) The Privacy Act 1988 was amended by Schedule 40 only of the Law and
Justice Legislation Amendment (Application of Criminal Code) Act 2001,
subsections 2(1)(a) and (7) of which provide as follows:
(1) Subject to this section, this Act commences at the later of the following
times:
(a) immediately after the commencement of item 15 of Schedule 1 to the
Criminal Code Amendment (Theft, Fraud, Bribery and Related
Offences) Act 2000;
(7) If item 106 of Schedule 1 to the Privacy Amendment (Private Sector) Act
2000 has not commenced before the commencement of section 1 of this
Act, item 10 of Schedule 40 to this Act commences immediately after the
commencement of the first-mentioned item.
Schedule 1 (item 15) commenced on 24 May 2001.
Schedule 1 (item 106) commenced on 21 December 2001.
(p) The Privacy Act 1988 was amended by Schedule 3 (items 437 and 438) only
of the Corporations (Repeals, Consequentials and Transitionals) Act 2001,
subsections 2(3) and (8) of which provide as follows:
(3) Subject to subsections (4) to (10), Schedule 3 commences, or is taken to
have commenced, at the same time as the Corporations Act 2001.
59. Schedule 2, Immediately after the time specified in the Postal 6 October 2006
item 24 Industry Ombudsman Act 2006 for the
commencement of item 18 of Schedule 1 to that
Act.
(t) Subsection 2(1) (item 39) of the Fair Work (State Referral and Consequential
and Other Amendments) Act 2009 provides as follows:
(1) Each provision of this Act specified in column 1 of the table commences,
or is taken to have commenced, in accordance with column 2 of the table.
Any other statement in column 2 has effect according to its terms.
39. Schedule 16 Immediately after the commencement of Part 2-4 1 July 2009
of the Fair Work Act 2009.
(u) Subsection 2(1) (items 6 and 7) of the Freedom of Information Amendment
(Reform) Act 2010 provides as follows:
(1) Each provision of this Act specified in column 1 of the table commences,
or is taken to have commenced, in accordance with column 2 of the table.
Any other statement in column 2 has effect according to its terms.
(1) Each provision of this Act specified in column 1 of the table commences,
or is taken to have commenced, in accordance with column 2 of the table.
Any other statement in column 2 has effect according to its terms.
Preamble ........................................
am No 70, 2009
Part I
s 2A................................................
ad No 197, 2012
s 3 ..................................................
am No 116, 1990; No 155, 2000; No 197, 2012
s 3A................................................
ad No 24, 2001
s 4 ..................................................
am No 92, 1994; No 59, 2015
s 5 ..................................................
rep No 197, 2012
s 5A................................................
ad No 116, 1990
s 5B ................................................
ad No 155, 2000
am No 49, 2004; No 197, 2012
Part II
Division 1
Division 1 heading .........................
ad No 197, 2012
s 6 ..................................................
am Nos 11 and 116, 1990; Nos 28 and 136, 1991; No 143, 1992; Nos 13,
92 and 177, 1994; Nos 34 and 82, 1997; No 48, 1998; Nos 44, 146 and
161, 1999; No 155, 2000; No 55, 2001; No 125, 2002; No 135, 2003;
No 100, 2005; Nos 86 and 99, 2006; No 158, 2007; Nos 113 and 144,
2008; Nos 33, 54 and 102, 2009; Nos 51, 73 and 139, 2010; Nos 3 and
60, 2011; No 74 and 197, 2012; No 13, 2013; No 39, 2015; No 41, 2015;
No 59, 2015 (Sch 2 items 301–303); No 62, 2015
s 6AA .............................................
ad No 197, 2012
s 6A................................................
ad No 155, 2000
am No 113, 2008; No 197, 2012
s 6B ................................................
ad No 155, 2000
am No 113, 2008; No 197, 2012
s 6BA .............................................
ad No 197, 2012
s 6C ................................................
ad No 155, 2000
am No 139, 2010; No 46, 2011; No 197, 2012; No 39, 2015; No 59, 2015
s 6D................................................
ad No 155, 2000
am No 197, 2012
s 6DA.............................................
ad No 155, 2000
s 6E ................................................
ad No 155, 2000
am No 170, 2006; No 54, 2009; Nos 46 and 60, 2011
s 6EA .............................................
ad No 155, 2000
am No 197, 2012
s 6F ................................................
ad No 155, 2000
am No 46, 2011; No 197, 2012
Division 2
Division 2 ......................................
ad No 197, 2012
Subdivision A
s 6G................................................
ad No 197, 2012
s 6H................................................
ad No 197, 2012
s 6J .................................................
ad No 197, 2012
s 6K................................................
ad No 197, 2012
Subdivision B
s 6L ................................................
ad No 197, 2012
s 6M ...............................................
ad No 197, 2012
s 6N................................................
ad No 197, 2012
s 6P ................................................
ad No 197, 2012
s 6Q................................................
ad No 197, 2012
s 6R ................................................
ad No 197, 2012
s 6S ................................................
ad No 197, 2012
s 6T ................................................
ad No 197, 2012
s 6U................................................
ad No 197, 2012
s 6V................................................
ad No 197, 2012
Division 3
Division 3 heading .........................
ad No 197, 2012
s 7 ..................................................
am Nos 75 and 116, 1990; Nos 13, 84, 92 and 177, 1994; No 82, 1997 (as
am by No 100, 2005 and No 9, 2006); No 155, 2000; No 125, 2002;
No 128, 2005; No 86, 2006; No 158, 2007; No 102, 2009; No 139, 2010;
No 197, 2012; No 108, 2014; No 59, 2015
s 7A................................................
ad No 155, 2000
am No 46, 2011
s 7B ................................................
ad No 155, 2000
am No 197, 2012
s 7C ................................................
ad No 155, 2000
s 8 ..................................................
am No 116, 1990; No 28, 1991; No 155, 2000; No 139, 2010; No 197,
2012
s 9 ..................................................
am No 28, 1991; No 139, 2010
rep No 197, 2012
s 10 ................................................
am No 28, 1991; No 113, 2008; No 139, 2010; No 197, 2012
s 11 ................................................
am No 28, 1991; No 139, 2010
s 11A..............................................
ad No 116, 1990
rep No 197, 2012
s 11B ..............................................
ad No 116, 1990
am No 136, 1991; No 143, 1992; No 34, 1997; No 44, 1999
rep No 197, 2012
s 12 ................................................
rep No 197, 2012
s 12A..............................................
ad No 116, 1990
s 12B ..............................................
ad No 155, 2000
am No 8, 2010; No 197, 2012
Part III
Division 1
Division 1 heading .........................
ad No 155, 2000
s 13 ................................................
am No 116, 1990; Nos 20 and 194, 1991; No 28, 1993; No 155, 2000;
No 131, 2009; No 73, 2010; No 60, 2011
rs No 197, 2012
s 13A..............................................
ad No 155, 2000; No 60, 2011
rep No 197, 2012
s 13B ..............................................
ad No 155, 2000
am No 197, 2012
s 13C ..............................................
ad No 155, 2000
am No 197, 2012
s 13D..............................................
ad No 155, 2000
am No 197, 2012
s 13E ..............................................
ad No 155, 2000
rs No 197, 2012
s 13F ..............................................
ad No 155, 2000
rs No 197, 2012
s 13G..............................................
ad No 197, 2012
Division 2
Division 2 heading .........................
ad No 155, 2000
rs No 197, 2012
Division 2 ......................................
rs No 197, 2012
s 14 ................................................
rs No 197, 2012
s 15 ................................................
am No 139, 2010
rs No 197, 2012
s 15B ..............................................
ad No 139, 2010
rep No 197, 2012
s 16 ................................................
rs No 197, 2012
s 16A..............................................
ad No 155, 2000
rs No 197, 2012
s 16B ..............................................
ad No 155, 2000
rs No 197, 2012
s 16C ..............................................
ad No 155, 2000
rs No 197, 2012
Division 3 ......................................
ad No 155, 2000
rep No 197, 2012
s 16D–16F .....................................
ad No 155, 2000
rep No 197, 2012
Division 4
Division 4 heading .........................
ad No 155, 2000
s 17 ................................................
am No 116, 1990; No 145, 2010; No 5, 2011
rs No 197, 2012
s 18 ................................................
am No 197, 2012
Division 5 heading .........................
ad No 155, 2000
rep No 197, 2012
Division 5 .....................................
rep No 197, 2012
s 18A..............................................
ad No 116, 1990
am No 155, 2000
rep No 197, 2012
s 18B ..............................................
ad No 116, 1990
rep No 197, 2012
Part IIIAA ......................................
ad No 155, 2000
rep No 197, 2012
s 18BA ...........................................
ad No 155, 2000
rep No 197, 2012
s 18BAA ........................................
ad No 49, 2004
rep No 197, 2012
s 18BB–18BI .................................
ad No 155, 2000
rep No 197, 2012
Part IIIA
Part IIIA .........................................
ad No 116, 1990
rs No 197, 2012
Div 1
s 18C, 18D .....................................
ad No 116, 1990
am No 24, 2001
rep No 197, 2012
s 18E, 18F ......................................
ad No 116, 1990
am No 143, 1992; No 34, 1997
rep No 197, 2012
s 18G..............................................
ad No 116, 1990
rep No 197, 2012
s 18H..............................................
ad No 116, 1990
am No 136, 1991
rep No 197, 2012
s 18J ...............................................
ad No 116, 1990
rep No 197, 2012
s 18K..............................................
ad No 116, 1990
am No 136, 1991; No 143, 1992; No 24, 2001; No 125, 2002; No 135,
2001; No 86, 2006; No 24, 2012
rep No 197, 2012
s 18L ..............................................
ad No 116, 1990
am No 136, 1991; No 143, 1992; No 24, 2001
rep No 197, 2012
s 18M .............................................
ad No 116, 1990
rs No 136, 1991
am No 143, 1992
rep No 197, 2012
s 18N..............................................
ad No 116, 1990
am No 136, 1991; No 143, 1992; No 13, 1994; No 24, 2001
rep No 197, 2012
s 18NA ...........................................
ad No 34, 1997
rep No 197, 2012
s 18P ..............................................
ad No 116, 1990
am No 136, 1991; No 143, 1992
rep No 197, 2012
s 18Q..............................................
ad No 116, 1990
am No 136, 1991; No 143, 1992; No 24, 2001
rep No 197, 2012
s 18R, 18S ......................................
ad No 116, 1990
am No 24, 2001
s 20L ..............................................
ad No 197, 2012
s 20M .............................................
ad No 197, 2012
Subdivision E
s 20N..............................................
ad No 197, 2012
s 20P ..............................................
ad No 197, 2012
s 20Q..............................................
ad No 197, 2012
Subdivision F
s 20R ..............................................
ad No 197, 2012
s 20S ..............................................
ad No 197, 2012
s 20T ..............................................
ad No 197, 2012
s 20U..............................................
ad No 197, 2012
Subdivision G
s 20V..............................................
ad No 197, 2012
s 20W.............................................
ad No 197, 2012
s 20X..............................................
ad No 197, 2012
s 20Y..............................................
ad No 197, 2012
s 20Z ..............................................
ad No 197, 2012
s 20ZA ...........................................
ad No 197, 2012
Division 3
Subdivision A
s 21 ................................................
am No 59, 1995
rep No 51, 2010
ad No 197, 2012
s 21A..............................................
ad No 197, 2012
Subdivision B
s 21B ..............................................
ad No 197, 2012
Subdivision C
s 21C ..............................................
ad No 197, 2012
s 21D..............................................
ad No 197, 2012
s 21E ..............................................
ad No 197, 2012
s 21F ..............................................
ad No 197, 2012
Subdivision D
s 21G..............................................
ad No 197, 2012
s 21H..............................................
ad No 197, 2012
s 21J ...............................................
ad No 197, 2012
s 21K..............................................
ad No 197, 2012
s 21L ..............................................
ad No 197, 2012
s 21M .............................................
ad No 197, 2012
s 21N..............................................
ad No 197, 2012
s 21NA ...........................................
ad No 197, 2012
s 21P ..............................................
ad No 197, 2012
Subdivision E
s 21Q..............................................
ad No 197, 2012
s 21R ..............................................
ad No 197, 2012
s 21S ..............................................
ad No 197, 2012
Subdivision F
s 21T ..............................................
ad No 197, 2012
s 21U..............................................
ad No 197, 2012
s 21V..............................................
ad No 197, 2012
s 21W.............................................
ad No 197, 2012
Division 4
s 22 ................................................
rs No 122, 1991
am No 146, 1999
rep No 51, 2010
ad No 197, 2012
Subdivision A
s 22A..............................................
ad No 197, 2012
Subdivision B
s 22B ..............................................
ad No 197, 2012
s 22C ..............................................
ad No 197, 2012
s 22D..............................................
ad No 197, 2012
s 22E ..............................................
ad No 197, 2012
s 22F ..............................................
ad No 197, 2012
Division 5
s 23 ................................................
rep No 51, 2010
ad No 197, 2012
s 23A..............................................
ad No 197, 2012
s 23B ..............................................
ad No 197, 2012
s 23C ..............................................
ad No 197, 2012
Division 6
s 24 ................................................
rep No 51, 2010
ad No 197, 2012
s 24A..............................................
ad No 197, 2012
Division 7
s 25 ................................................
am No 122, 1991
rep No 51, 2010
ad No 197, 2012
am No 13, 2013
s 25A..............................................
ad No 197, 2012
am No 13, 2013
Pt IIIB
Pt IIIB ............................................
ad No 197, 2012
Division 1
s 26 ................................................
rep No 51, 2010
ad No 197, 2012
Division 2
Subdivision A
s 26A..............................................
ad No 2, 2000
am No 146, 1999
rep No 51, 2010
ad No 197, 2012
s 26B ..............................................
ad No 197, 2012
s 26C ..............................................
ad No 197, 2012
s 26D..............................................
ad No 197, 2012
Subdivision B
s 26E ..............................................
ad No 197, 2012
s 26F ..............................................
ad No 197, 2012
s 26G..............................................
ad No 197, 2012
s 26H..............................................
ad No 197, 2012
Subdivision C
s 26J ...............................................
ad No 197, 2012
s 26K..............................................
ad No 197, 2012
Division 3
Subdivision A
s 26L ..............................................
ad No 197, 2012
s 26M .............................................
ad No 197, 2012
s 26N..............................................
ad No 197, 2012
Subdivision B
s 26P ..............................................
ad No 197, 2012
s 26Q..............................................
ad No 197, 2012
s 26R ..............................................
ad No 197, 2012
s 26S ..............................................
ad No 197, 2012
Subdivision C
s 26T ..............................................
ad No 197, 2012
Division 4
s 26U..............................................
ad No 197, 2012
s 26V..............................................
ad No 197, 2012
s 26W.............................................
ad No 197, 2012
Part IV
Part IV heading ..............................
rs No 2, 2000; No 51, 2010
Division heading ............................
rs No 2, 2000
rep No 51, 2010
Division 1 ......................................
rep No 51, 2010
Division 2
s 27 ................................................
am No 20, 1991; No 28, 1993; No 155, 2000; No 49, 2004; No 139, 2010
rs No 197, 2012
s 27A..............................................
ad No 73, 2010
am No 73, 2010
rep No 197, 2012
s 28 ................................................
am No 116, 1990; No 131, 2009; No 73, 2010
rs No 197, 2012
s 28A..............................................
ad No 116, 1990
am No 131, 2009; No 73, 2010
rs No 197, 2012
am No 59, 2015
s 28B ..............................................
ad No 131, 2009
am No 73, 2010
rs No 197, 2012
am No 59, 2015
s 29 ................................................
am No 116, 1990; No 155, 2000
rs No 197, 2012
Division 3
s 30 ................................................
am No 116, 1990; No 155, 2000; No 139, 2010; No 197, 2012; No 59,
2015
s 31 ................................................
am No 20, 1991; No 155, 2000; No 51, 2010; No 197, 2012
s 32 ................................................
am No 116, 1990 (as am by No 165, 1992); No 20, 1991; No 49, 2004 (as
am by No 9, 2006); No 51, 2010; No 197, 2012
s 33 ................................................
am No 92, 1994; No 139, 2010
s 33B ..............................................
ad No 139, 2010
rep No 59, 2015
Division 3A
Division 3A....................................
ad No 197, 2012
s 33C ..............................................
ad No 197, 2012
s 33D..............................................
ad No 197, 2012
Division 3B
Division 3B ....................................
ad No 197, 2012
s 33E ..............................................
ad No 197, 2012
s 33F ..............................................
ad No 197, 2012
am No 13, 2013
Division 4
s 34 ................................................
am Nos 51 and 139, 2010; No 177 and 197, 2012; No 59, 2015
s 35A..............................................
ad No 197, 2012
Part V
Part V heading ...............................
rs No 197, 2012
Division 1A
Division 1A....................................
ad No 197, 2012
s 36A..............................................
ad No 197, 2012
Division 1
s 36 ................................................
am No 11, 1990; No 13, 1994; Nos 2 and 155, 2000; No 51, 2010; No
197, 2012
s 37 ................................................
am Nos 92 and 177, 1994; No 82, 1997; No 155, 2000; No 139, 2010; No
197, 2012; No 59, 2015 (Sch 2 item 305)
s 38 ................................................
rs No 13, 1994
am No 155, 2000; No 197, 2012
s 38A..............................................
ad No 13, 1994
s 38B ..............................................
ad No 13, 1994
am No 197, 2012
s 38C ..............................................
ad No 13, 1994
s 39 ................................................
rs No 13, 1994
s 40 ................................................
am No 155, 2000; No 197, 2012
s 40A..............................................
ad No 155, 2000
rs No 197, 2012
s 41 ................................................
am No 155, 2000; No 49, 2004; No 197, 2012
s 42 ................................................
am No 155, 2000; No 197, 2012
s 43 ................................................
am No 155, 2000; No 139, 2010; No 197, 2012; No 59, 2015
s 43A..............................................
ad No 197, 2012
s 44 ................................................
am No 34, 1997; No 197, 2012
s 46 ................................................
am No 155, 2000; No 24, 2001; No 197, 2012
s 48 ................................................
am No 155, 2000
s 49 ................................................
am No 116, 1990; No 24, 2001; No 73, 2010; No 60, 2011; No 197, 2012
s 49A..............................................
ad No 131, 2009
s 50 ................................................
am No 146, 1999; No 25, 2006 (as am by No 73, 2008); No 70, 2009;
No 139, 2010; No 11, 2011; No 197, 2012 (as am by No 5, 2015); No 2,
2013; No 5, 2015; No 59, 2015
s 50A..............................................
ad No 155, 2000
am No 197, 2012
Division 2
s 52 ................................................
am No 116, 1990; No 13, 1994; No 155, 2000; No 197, 2012
s 53 ................................................
rs No 13, 1994
s 53A..............................................
ad No 155, 2000
am No 197, 2012
s 53B ..............................................
ad No 155, 2000
am No 197, 2012
Note to s 53B(2).............................
am No 197, 2012
Division 3
Division 3 heading .........................
rs No 155, 2000
Division 3 ......................................
rs No 13, 1994; No 59, 1995
s 54 ................................................
rs No 13, 1994
am No 177, 1994
rs No 59, 1995
am No 82, 1997; No 155, 2000; No 9, 2006; No 197, 2012
s 55 ................................................
rs No 13, 1994; No 59, 1995; No 155, 2000; No 197, 2012
s 55A..............................................
ad No 155, 2000
am No 197, 2012; No 13, 2013
s 55B ..............................................
ad No 155, 2000
am No 197, 2012
s 56 ................................................
rs No 13, 1994
rep No 59, 1995
Division 4
Division 4 heading .........................
am No 116, 1990
rs No 13, 1994
Division 4 ......................................
rs No 13, 1994
s 57 ................................................
rs No 13, 1994
am No 177, 1994; No 82, 1997; No 197, 2012
s 58 ................................................
rs No 13, 1994; No 197, 2012
s 59 ................................................
rs No 13, 1994
am No 197, 2012
s 60 ................................................
am No 116, 1990
rs No 13, 1994
am No 139, 2010; No 197, 2012
s 61 ................................................
rs No 13, 1994
am No 38, 2005
rep No 197, 2012
s 62 ................................................
rs No 13, 1994
am No 155, 2000; No 197, 2012; No 13, 2013
Division 5
s 63 ................................................
rs No 13, 1994
am No 59, 1995; No 155, 2000; No 197, 2012; No 13, 2013
s 64 ................................................
am No 155, 2000; No 197, 2012
s 65 ................................................
am No 24, 2001
s 66 ................................................
am No 155, 2000; No 24, 2001; No 139, 2010; No 59, 2015
s 67 ................................................
am No 155, 2000; No 197, 2012
s 68 ................................................
am No 116, 1990; No 155, 2000; No 139, 2010; No 197, 2012; No 59,
2015
s 68A..............................................
ad No 155, 2000
s 69 ................................................
am No 155, 2000
rep No 197, 2012
s 70 ................................................
am No 125, 2002; No 86, 2006; No 139, 2010; No 59, 2015
s 70A..............................................
ad No 155, 2000
rep No 197, 2012
s 70B ..............................................
ad No 155, 2000
Part VI
Part VI heading ..............................
rs No 155, 2000
Division 1
Division 1 heading .........................
ad No 155, 2000
s 72 ................................................
am No 155, 2000; No 197, 2012
s 73 ................................................
am No 155, 2000; No 50, 2006; No 197, 2012
s 74 ................................................
am No 197, 2012
s 75 ................................................
am No 155, 2000; No 197, 2012
s 76 ................................................
am No 155, 2000
s 77 ................................................
am No 155, 2000
s 79 ................................................
am No 155, 2000; No 197, 2012
s 80 ................................................
am No 5, 2011
rep No 197, 2012
Division 2
Division 2 heading .........................
ad No 155, 2000
s 80A..............................................
ad No 155, 2000
am No 197, 2012
s 80B ..............................................
ad No 155, 2000
am No 197, 2012
s 80C ..............................................
ad No 155, 2000
rep No 197, 2012
s 80D..............................................
ad No 155, 2000
am No 197, 2012
Division 3
Division 3 heading .........................
ad No 155, 2000
s 80E ..............................................
ad No 155, 2000
Part VIA
Part VIA.........................................
ad No 148, 2006
Division 1
s 80F ..............................................
ad No 148, 2006
s 80G..............................................
ad No 148, 2006
am No 139, 2010; No 46, 2011
s 80H..............................................
ad No 148, 2006
am No 197, 2012
Division 2
ss 80J, 80K.....................................
ad No 148, 2006
s 80L ..............................................
ad No 148, 2006
am No 8, 2010
ss 80M, 80N...................................
ad No 148, 2006
Division 3
s 80P ..............................................
ad No 148, 2006
am No 197, 2012; No 108, 2014
Division 4
s 80Q..............................................
ad No 148, 2006
am No 197, 2012
s 80R ..............................................
ad No 148, 2006
am No 139, 2010
ss 80S, 80T ....................................
ad No 148, 2006
Part VIB
Part VIB .........................................
ad No 197, 2012
Division 1
s 80U..............................................
ad No 197, 2012
s 80V..............................................
ad No 197, 2012
Division 2
s 80W.............................................
ad No 197, 2012
am No 13, 2013
s 80X..............................................
ad No 197, 2012
s 80Y..............................................
ad No 197, 2012
s 80Z ..............................................
ad No 197, 2012
am No 13, 2013
s 80ZA ...........................................
ad No 197, 2012
am No 13, 2013
s 80ZB ...........................................
ad No 197, 2012
am No 13, 2013
s 80ZC ...........................................
ad No 197, 2012
Division 3
s 80ZD ...........................................
ad No 197, 2012
am No 13, 2013
s 80ZE............................................
ad No 197, 2012
s 80ZF ............................................
ad No 197, 2012
s 80ZG ...........................................
ad No 197, 2012
Part VII
s 82 ................................................
am No 159, 2001; No 197, 2012
s 83 ................................................
am No 2, 2000; No 197, 2012
Part VIII
s 89 ................................................
am No 139, 2010
Part IX
s 95 ................................................
am No 50, 2006; No 197, 2012
s 95A..............................................
ad No 155, 2000
am No 50, 2006; No 197, 2012
s 95AA ...........................................
ad No 99, 2006
am No 197, 2012
s 95B ..............................................
ad No 155, 2000
am No 197, 2012
s 95C ..............................................
ad No 155, 2000
am No 197, 2012
s 96 ................................................
am No 2, 2000
rep No 51, 2010
ad No 197, 2012
s 97 ................................................
am No 155, 2000
rep No 51, 2010
s 98 ................................................
am No 155, 2000; No 13, 2013
s 98A..............................................
ad No 197, 2012
s 98B ..............................................
ad No 197, 2012
s 98C ..............................................
ad No 197, 2012
s 99 ................................................
am No 11, 1990; No 2, 2000
rep No 51, 2010
s 99A..............................................
ad No 116, 1990
am No 155, 2000; No 24, 2001; No 4, 2010; No 197, 2012
s 100 ..............................................
am No 155, 2000; No 49, 2004; No 197, 2012
Part X.............................................
rep No 197, 2012
s 101 ..............................................
rep No 197, 2012
Schedule 1
Schedule 1......................................
rs No 197, 2012
Part 1
c 1 ..................................................
ad No 197, 2012
c 2 ..................................................
ad No 197, 2012
Part 2
c 3 ..................................................
ad No 197, 2012
c 4 ..................................................
ad No 197, 2012
c 5 ..................................................
ad No 197, 2012
Part 3
c 6 ..................................................
ad No 197, 2012
c 7 ..................................................
ad No 197, 2012
c 8 ..................................................
ad No 197, 2012
c 9 ..................................................
ad No 197, 2012
Part 4
c 10 ................................................
ad No 197, 2012
c 11 ................................................
ad No 197, 2012
Part 5
c 12 ................................................
ad No 197, 2012
c 13 ................................................
ad No 197, 2012
Schedule 2......................................
rep No 145, 2010
Introduction ...................................
am No 51, 2010
rep No 145, 2010
c 1–5 ..............................................
rep No 145, 2010
c 6 ..................................................
am No 51, 2010
rep No 145, 2010
c 7 ..................................................
rep No 145, 2010
Schedule 3......................................
ad No 155, 2000
rep No 197, 2012
c 1 ..................................................
ad No 155, 2000
rep No 197, 2012
c 2 ..................................................
ad No 155, 2000
am No 99, 2006; No 144, 2008
rep No 197, 2012
c 3–6 ..............................................
ad No 155, 2000
rep No 197, 2012
c 7 ..................................................
ad No 155, 2000
am No 49, 2004
rep No 197, 2012
c 8, 9 ..............................................
ad No 155, 2000
rep No 197, 2012
c 10 ................................................
ad No 155, 2000
am No 99, 2006
rep No 197, 2012