When agencies collect personal information (IPPs 1 – 3)

Public sector agencies do not necessarily need your permission to collect your personal information, but when they do collect personal information, it must be for a legitimate purpose. The agency should tell you why they are collecting your information and what will happen to it.

Information Privacy Principle (IPP) 1, IPP 2 and IPP 3 require that agencies:

• only ask for as much personal information as they need to fulfill the intended purpose
• only collect personal information by lawful and fair means
• tell people why they are collecting personal information, what it will be used for and whether it will be given to anyone outside the agency
• do not intrude unreasonably into the private lives of individuals.