Cybersecurity Policy Report, Updated Guidance on Privacy Principle Published in Australia, (May 13, 2026)
The Office of the Australian Information Commissioner (OAIC) has updated its guidance on compliance with Australian Privacy Principle (APP) 3 regarding the collection of solicited information.
APP 3 deals with the collection of personal information, and the updated guidance recommends that an organization should only solicit and collect personal information that is reasonably necessary for, or directly related to, one or more of its functions or activities.
In addition, organizations may solicit and collect sensitive information only if the individual consents to the sensitive information being collected, unless an exception applies, the OAIC said.
The OAIC explained that the updates expand on the existing requirements and reflect recent determinations and key positions from other OAIC guidance.
News: InternationalLegislation DataPrivacy