These principles apply to Australian Government and Australian Capital Territory agencies or private sector organizations contracted to these governments, organizations and small businesses who provide a health service, as well as to private organisations with an annual turnover exceeding AUD$3M (with some specific exceptions). The principles govern when and how personal information can be collected by these entities. Information can only be collected if it is relevant to the agencies' functions.
These guidelines are applicable to Australian Government bodies, Australian Capital Territory agencies, private sector organizations working with these governments or their clients, health service providers, and businesses with annual revenues over AUD$3M (with certain exclusions). The principles specify when and how personal information can be collected by these entities. Information can only be gathered if it is relevant to the agencies' functions.