Information Privacy Act 2009

This section applies if—

before the commencement, an agency had done an act or engaged in a practice in contravention of a requirement to comply with the privacy principles under the former IP Act;

immediately before the commencement the information commissioner had not yet given a compliance notice to the agency under section 158 in relation to the act or practice;

the act or practice also constitutes a contravention of the privacy principle requirements.

The information commissioner may give the agency a compliance notice under section 158 in relation to the act or practice.