The Privacy Act 1988 (Cth) requires all businesses to have a privacy policy in place, if that business is an Australian Privacy Principles entity (‘APP entity’).

A privacy policy is a document that sets out how a business collects, holds, uses, and discloses personal information.

Personal information is information that identifies a person, irrespective of whether the information is true or not. This information can include a person’s name, physical or email address, photograph, telephone number, or their payment details.