Page 182 - DCAP309_INFORMATION_SECURITY_AND_PRIVACY

Information Security and Privacy

Notes requirements to change. This procedure may need the balancing of privacy with challenging
interest and governmental needs.
The Northern Territory IPPs have their genesis in the privacy rules produced by the Organization
for Economic Cooperation (OECD).

Did u know? Australia accepted the OECD Guidelines in 1984 and underpin the National
Privacy Principles managed by the Federal Privacy Commissioner.

12.9.1 IPP 1: Collection

Gather only personal information that is essential for the performance of an agency’s purposes
or activities. The personal information must be composed lawfully, moderately and not
intrusively. If possible, information should be composed from the person concerned. This
principle includes the following:
1. An agency must not gather personal information unless the information is essential for
one or more of its functions or activities.
2. An agency must gather personal information only by legalized and fair means and not in
an irrationally intrusive manner.
3. At or before the time (or, if that is not feasible, as soon as workable after) an agency
gathers personal information regarding an individual from the individual, the agency
must take sensible steps to make certain that the individual is conscious of all of the
following:
(a) the identity of the organisation and how to contact it

(b) the fact that the individual is able to have access to the information
(c) the purpose for which the information is collected
(d) the persons or bodies, or classes of persons or bodies, to which the agency usually
discloses information of the same kind
(e) any law that requires the particular information to be collected
(f) the main consequences (if any) for the individual if all, or part ,of the information is
not provided.
If it is sensible and practicable to do so, an agency must gather personal information
regarding an individual only from the individual.

4. If an agency gathers personal information about an person from another person, it must
take rational steps to make certain that the individual is or has been made attentive of the
matters listed above that the person must be made aware of, except for to the extent that
making the individual aware of the matters would front a serious threat to the life or
health of the person or another person.

Notes This principle is an imperative principle. If an agency fulfils the needs of this
principle it will be simpler to fulfill the other nine IPPs.

176 LOVELY PROFESSIONAL UNIVERSITY