22.1 This chapter discusses issues concerning the handling of sensitive information and, in particular, the collection of sensitive information. It focuses on three main issues. The first is whether the restrictions currently imposed on organisations by the National Privacy Principles (NPPs) concerning the collection of sensitive information also should be imposed on agencies. Secondly, it considers whether specific current exceptions to the general prohibition against the collection of sensitive information are in need of reform. Finally, it considers whether the Privacy Act 1988 (Cth) should regulate aspects of the handling of sensitive information in addition to collection. This could include the use, disclosure, storage, access, retention and disposal of sensitive information.