Organisations

If the Privacy Act 1988 covers your organisation, you need to understand your obligations when handling personal information. The Privacy Act covers organisations with an annual turnover of more than $3 million and some other organisations.

A small business or not-for-profit not covered by the Privacy Act may choose to opt-in to the Privacy Act, see those that have on our Privacy opt-in register.

Tracking pixels and privacy obligations

This guidance sets out general considerations for private sector organisations that use third-party tracking pixels on their websites

Credit reporting

Find out if you have consumer credit reporting obligations

Direct marketing

Defines direct marketing; explains when it's allowed and what laws apply

Employee records exemption

Which employee records aren't covered by the Privacy Act

ID scanners

An organisation must comply with the Australian Privacy Principles when scanning any identification

Opting in to the Privacy Act

A small business or not-for-profit may choose to be covered by the Privacy Act

Guidance for EDR schemes when handling complaints about notifiable data breaches

Provide EDR schemes with practical guidance on handling privacy-related complaints about a notifiable data breach, which the members of an EDR scheme may experience.