INFORMATION PRIVACY ACT 2009 - SECT 27 Agencies to comply with IPPs

INFORMATION PRIVACY ACT 2009 - SECT 27

27 Agencies to comply with IPPs

(1) An agency, other than health agencies, must comply with the IPPs.

Note—

Under section 18 , an agency includes a Minister, a department, a local government or a public authority. However, section 20 provides that for the application of this Act, other than chapter 3 , or this Act other than for the purposes of chapter 3 , to a Minister, the Act applies only for acts done, or practices engaged in, as the case may be, in the Minister’s capacity as a Minister in relation to the affairs of an agency administered by the Minister.

(2) Without limiting subsection (1) , the agency—

(a) must not do an act, or engage in a practice, that contravenes, or is otherwise inconsistent with a requirement of, an IPP; and

(b) must not fail to do an act, or fail to engage in a practice, if the failure contravenes, or is otherwise inconsistent with a requirement of, an IPP.

(3) An act or practice mentioned in subsection (2) includes any act or practice relating to the agency’s collection, storage, handling, accessing, amendment, management, transfer, use or disclosure of personal information.