Organisations to comply with Information Privacy Principles
20 Organisations to comply with Information Privacy Principles
An organisation must not do an act, or engage in a practice, that contravenes an Information Privacy Principle in respect of personal information collected, held, managed, used, disclosed or transferred by it.
A public sector agency or a Council must, in administering a public register, so far as is reasonably practicable, not do an act or engage in a practice that would contravene an Information Privacy Principle in respect of information collected, held, managed, used, disclosed or transferred by it in connection with the administration of the public register if that information were personal information.
Subsections (1) and (2) do not apply if the act or practice is permitted under—
a public interest determination; or
a temporary public interest determination; or
an approved information usage arrangement.
This Act’s bill:Explanatory memorandumSecond reading speech
The statute text is free to read above. View subscription options to unlock the case-law research tools for each provision.