The Privacy Act 1988 (Cth) ('Privacy
Act') requires all businesses to have a privacy policy in
place, if that business is an Australian Privacy Principles entity
('APP entity').
What is a privacy policy?
A privacy policy is a document that sets out how a business
collects, holds, uses, and discloses personal information.
Personal information is information that identifies a person,
irrespective of whether the information is true or not. This
information can include a person's name, physical or email
address, photograph, telephone number, or their payment
details.
There are several ways that a business can collect personal
information. The collection of personal information can take place
through online or physical forms, or customer databases (such as a
phonebook). It is important to note that personal information can
include the data collected from individuals who access a
business' website.
