Commonwealth Consolidated Acts

PRIVACY ACT 1988 - SECT 16F

             (1)  This section limits the use and disclosure of personal information collected:

                     (a)  for the purpose of meeting (directly or indirectly) an obligation under a Commonwealth contract; and

                     (b)  by an organisation that is a contracted service provider for the contract.

Note:          An organisation may be a contracted service provider for a Commonwealth contract whether or not the organisation is a party to the contract.

             (2)  An organisation that is a contracted service provider for the contract must not use or disclose the personal information for direct marketing, unless the use or disclosure is necessary to meet (directly or indirectly) an obligation under the contract.

             (3)  Subsection (2) has effect despite:

                     (a)  an approved privacy code (if any) binding the organisation in relation to the personal information; and

                     (b)  the National Privacy Principles.