National Privacy Principle (NPP) 1.3 requires an organisation collecting personal information about an individual directly from that individual to 'take reasonable steps to ensure that the individual is aware of:

  • the identity of the organisation and how to contact it; and
  • the fact that he or she is able to gain access to the information; and
  • the purposes for which the information is collected; and
  • the organisations (or the types of organisations) to which the organisation usually discloses information of that kind; and
  • any law that requires the particular information to be collected; and
  • the main consequences (if any) for the individual if all or part of the information is not provided.


Related Information: