We are also required to comply with any applicable registered APP code and with other legislation relating to privacy, such as the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth).
The Act covers ‘personal information’ and ‘sensitive information’. Personal information is information or an opinion (whether true or not) about an identified individual (or an individual who is reasonably identifiable) whether the information or opinion is recorded in a material form or not.
Sensitive information includes personal information about an individual’s racial or ethnic origin, political opinions, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices and criminal record and also health and genetic information about an individual. 2. What kinds of information do we collect and hold?