Privacy - Collection of information

IPPs 1, 10, 8 and 7.4 control the collection of personal information by NT government organisations.

What is collection?

Collection includes any way that an organisation obtains information. It includes information that is volunteered. It includes information that is obtained from another organisation.

What are the limits on collection?

An organisation must:

collect only information that is necessary for its functions or activities
collect information by lawful and fair means
not collect information in an unreasonably intrusive way.

For some types of information, there are more limits on collection. They are listed in the table below.

IPP	Limits on collection
IPP 10 Sensitive information	Sensitive information, including information about health, racial or ethnic origin, and criminal records, can only be collected if: the person consents collection is required by law collection is necessary to establish, exercise or defend a legal claim; the individual is incapable of giving consent, and collection is necessary to prevent or lessen a serious and imminent threat to life or health; or IPP 10.2 applies (it relates to targeted welfare and educational services).
IPP 8 Anonymity	An organisation must give a person entering into a transaction the option of not identifying himself or herself, unless: it is required by law; or it is not practicable that the person not be identified.
IPP 7.4 Unique identifiers	An organisation must not require a person to provide a code or number that identifies them (for example, a driver's licence number) unless: it is required or authorised by law; or it is in connection with the purpose for which the unique identifier was assigned or for a directly related purpose.

IPP

Limits on collection

IPP 10

Sensitive information

Sensitive information, including information about health, racial or ethnic origin, and criminal records, can only be collected if:

the person consents
collection is required by law
collection is necessary to establish, exercise or defend a legal claim;
the individual is incapable of giving consent, and collection is necessary to prevent or lessen a serious and imminent threat to life or health; or
IPP 10.2 applies (it relates to targeted welfare and educational services).

IPP 8

Anonymity

An organisation must give a person entering into a transaction the option of not identifying himself or herself, unless:

it is required by law; or
it is not practicable that the person not be identified.

IPP 7.4

Unique identifiers

An organisation must not require a person to provide a code or number that identifies them (for example, a driver's licence number) unless:

it is required or authorised by law; or
it is in connection with the purpose for which the unique identifier was assigned or for a directly related purpose.

What is sensitive information?

Sensitive information" means -

personal information about -
1. racial or ethnic origin;
2. political opinions;
3. membership of a political association;
4. religious beliefs or affiliations;
5. philosophical beliefs;
6. membership of a professional or trade association;
7. membership of a trade union;
8. sexual preferences or practices; or
9. a criminal record; or
health information.

Are there limits on who the organisation can collect information from?

An organisation must collect information about a person from that person, if it is reasonable and practicable to do so.

More information

Discussions of similar principles are available on the websites of Privacy Victoria and the Federal Privacy Commissioner.

Last Updated on
13 January, 2012

OFFICE OF THE INFORMATION COMMISSIONER Northern Territory