An agency 1 may request personal information from an individual or from a third party provided the following criteria are met:
There are a number of obligations that an agency has to meet when lawfully collecting personal information. The agency must:
Before collection or as soon as practicable afterwards, agencies are required to inform the individual from whom personal information is collected of:
This 'collection notice' sets out what the agency will do with the information and to whom the personal information will be given. For example, an agency may want to publish personal information in a publicly available document or disclose it to a third party.
The collection notice can be provided verbally as well as in writing. If you are unsure of the intended meaning of the collection notice, you should contact the agency for further information.
Although an agency has to take all reasonable steps to provide a collection notice prior to collecting an individual's personal information, in certain circumstances this will not be possible. An agency is not required to provide a collection notice when collecting personal information in the context of the delivery of an emergency service, and:
It is up to the agency to satisfy itself that the specific purpose for which the personal information is collected relates to the functions of the agency. The agency must ensure that they collect relevant personal information relating to the agency’s stated function and not more information than is necessary.
For example, in a survey about your domestic water use, it would be unlawful for an agency to collect personal information about your sexual orientation. Collection methods must not unreasonably intrude on the personal affairs of individuals.
Current as at: January 10, 2012