What is the intersection of data with Privacy law?

If data contains information or an opinion about an identified individual or an individual who is reasonably identifiable, then such data will be personal information for the purposes of the Privacy Act. Accordingly, organisations handling such data must do so in accordance with the Privacy Act.

Under the Privacy Act, individuals have the right to know why their personal information is being collected, how it will be used and who it will be disclosed to.  Individuals also have the right to remain anonymous, access their personal information being collected, stop receiving unwanted direct marketing, ask for their personal information to be corrected if incorrect and to make a complaint about an entity covered by the Privacy Act if they have mishandled their personal data. For more information on Privacy, see the Privacy section.