16.08.2010
23.3 Currently, the requirements relating to notification are dealt with in the Information Privacy Principles (IPPs) and National Privacy Principles (NPPs) that deal with the collection of personal information. IPP 2 provides that where an agency solicits personal information directly from the individual concerned for inclusion in a record or in a generally available publication, it must take reasonable steps to ensure that, before or as soon as practicable after the information is collected, the individual is generally aware of:
the purpose for which the information is being collected;
if applicable, the fact that the collection is authorised or required by law; and
to whom it is the agency’s usual practice to disclose or pass on personal information of the kind collected.
23.4 Similarly, NPP 1.3 provides that an organisation only may collect personal information from an individual after taking reasonable steps to ensure the individual is aware of: the organisation’s identity and contact details; the fact that he or she can access the information; the purposes of collection; the organisationsto whom the organisation usually discloses information of that kind; any law requiring the particular information to be collected; and the main consequences for the individual if the information is not provided. When an organisation collects personal information from someone other than the individual, NPP 1.5 imposes an obligation to ensure that the individual to whom the information relates is aware of the matters mentioned in NPP 1.3.