The Privacy Act covers some small businesses with a turnover of $3 million or less and includes:
- private sector health service providers. Organisations providing a health service including traditional health service providers, naturopaths and chiropractor, gyms and weight loss clinic, child care centres, private schools and private tertiary educational institutions;
- businesses that sell or purchase personal information;
- credit reporting bodies;
- contracted service providers for a Commonwealth contract;
- employee associations registered or recognised under the Fair Work (Registered Organisations) Act 2009;
- businesses that have opted-in to the Privacy Act;
- businesses that are related to a business that is covered by the Privacy Act; and
- businesses prescribed by the Privacy Regulation 2013.
Key principles include:
- the types of information you will collect;
- allowing your customers the option to communicate anonymously with you where possible;
- how and why personal information is collected;
- use and disclosure of personal information;
- cookies and web tracking tools;
- marketing activities;
- access to and correction of personal information; and
- how to make a complaint.
Not always because most business will collect and disclose information differently.
As with all legal documents for your startup, they should work for your specific circumstances. If you need help customising your legal documents, contact a good lawyer for startups.