If you are an entity that is regulated by the Privacy Act
1988 (Cth) ("Privacy Act") then you need to ensure
you continue to comply with your privacy obligations even when
dealing with employee and consumer information in relation to the
COVID-19 pandemic.
Entities should be taking reasonable steps to ensure that they
keep the personal information of employees and consumers secure by
only collecting, using and disclosing personal information
regarding COVID-19 if it is absolutely necessary to prevent and
manage COVID-19 within the workplace.
If you or your business is collecting, using or disclosing
personal information in relation to COVID-19 then you need to
either gain the individual's consent to use their information
or ensure that the collection, use or disclosure is
reasonably necessary to prevent and manage COVID-19 in the
workplace.
