What should an organisation tell me when it is collecting personal information about me?

Question: What should an organisation tell me when it is collecting personal information about me?

Answer: Organisations might collect personal information from you in a number of ways, such as in person, over the phone or over the Internet. Whatever method is used to collect the information, the organisation needs to take reasonable steps, at the time, or as soon as practicable afterwards, to make you aware of a number of things including:

its name and how you can contact them;
why they are collecting the information;
any consequences if you do not provide the information;
what other organisations your information might usually be given to; and
that you can access personal information held about you by the organisation.

If this information is obvious (eg/ on a form that is given to you to complete) or you are aware of the information already, the organisation doesn’t need to tell you these things again specifically.

The things an organisation needs to tell individuals when their personal information is being collected are fully set out in National Privacy Principle (NPP) 1.3.

For more general information about what the Privacy Act means for you go to My Privacy, My Choice - Your New Privacy Rights.

Return