Organisations

If the Privacy Act 1988 covers your organisation, you need to understand your obligations when handling personal information. The Privacy Act covers organisations with an annual turnover of more than $3 million and some other organisations.

A small business or not-for-profit not covered by the Privacy Act may choose to opt-in to the Privacy Act, see those that have on our Privacy opt-in register.

Credit reporting

Find out if you have consumer credit reporting obligations

Direct marketing

Defines direct marketing; explains when it's allowed and what laws apply

Employee records exemption

Which employee records aren't covered by the Privacy Act

ID scanners

An organisation must comply with the Australian Privacy Principles when scanning any identification

Opting in to the Privacy Act

A small business or not-for-profit may choose to be covered by the Privacy Act

Planning

Privacy management plan template

How an organisation can meet ongoing compliance obligations under the Australian Privacy Principles

Selling a business

Privacy issues a vendor or potential purchaser should know

Tips for good privacy practice

Ways an organisation can uphold good privacy practice, with links to resources

Obligations for specific organisations

Privacy for not-for-profits, including charities

Explains how not-for-profits must comply with the Privacy Act

Small business

Explains which small businesses must comply with the Privacy Act

Sporting clubs

Explains which sporting clubs must comply with Privacy Act

Start-ups

Get privacy right from the ground up

Trading in personal information

The Privacy Act applies if you trade in personal information