Public sector agencies in NSW need not identify express legislative authorisation for the collection of personal information under s 8(1)(a) of the PPIP Act; it suffices that the purpose is not forbidden by law. However, agencies must carefully distinguish the purpose of collection from the function or activity to which it relates, and must identify purposes with sufficient specificity to comply with ss 10 and 12.
The full text is available to signed-in members, including the 1 later case that cites this judgment.