Your new Privacy Policy – what needs to go in it

The excitement here at Marque is reaching fever pitch. The changes to the Privacy Act 1988 (Cth) come into effect in just over six months. So many privacy policies to review, so little time.

The amended Privacy Act requires you to have a Privacy Policy if your annual turnover is more than $3 million. The requirements have changed, and you need to make sure yours complies before 12 March 2014. Here's a summary of what it needs to do:

The Content

Your Privacy Policy must contain the following information:

1. the kinds of personal information that you collect and hold;
2. how you collect and hold personal information;
3. the purposes for which you collect, hold, use and disclose personal information;