Target entity may collect sensitive information for integrity purpose
86C Target entity may collect sensitive information for integrity purpose
A target entity may collect for an integrity purpose sensitive information that:
if the target entity is a Privacy Act agency—is reasonably necessary for, or directly related to, one or more of the entity’s functions or activities; or
if the target entity is a wholly‑owned Commonwealth company—is reasonably necessary for one or more of the entity’s functions or activities.
Subclause 3.3 of Australian Privacy Principle 3 limits the circumstances in which an APP entity may collect sensitive information. This section lets a target entity collect sensitive information for an integrity purpose in circumstances corresponding to those in which it may collect other personal information (see subclauses 3.1 and 3.2 of that Principle).
The statute text is free to read above. View subscription options to unlock the case-law research tools for each provision.