National Privacy Principles

Separate rules apply for health agencies and their contracted service providers under the National Privacy Principles (NPPs). These rules set out how personal information must be collected and managed in the public health sector environment.

The individual privacy principles for health reflect in part the unique nature of personal information in the health context and provides greater consistency across the Australian health sector.

In summary, the NPPs cover:

  • collection of personal information (NPP 1)
  • limits on use or disclosure of personal information (NPP 2)
  • quality of personal information (NPP 3)
  • security of personal information (NPP 4)
  • information about personal information holdings (NPP 5)
  • access and amendment of personal information (NPP 6, NPP 7)
  • anonymity (NPP 8)
  • collection and handling of sensitive personal information (NPP 9)

Read the full text of the NPPs.