There are 13 Australian Privacy Principles and they govern standards, rights and obligations around:

• the collection, use and disclosure of personal information
• an organisation or agency’s governance and accountability
• integrity and correction of personal information
• the rights of individuals to access their personal information.

The Australian Privacy Principles are principles-based law. This gives an organisation or agency flexibility to tailor their personal information handling practices to their business models and the diverse needs of individuals. They are also technology neutral, which allows them to adapt to changing technologies.

A breach of an Australian Privacy Principle is an ‘interference with the privacy of an individual’ and can lead to regulatory action and penalties.