The {{http://www.austlii.edu.au/au/legis/nsw/consol_act/papipa1998464/|Privacy and Personal Information Protection Act 1998}} requires organisations to treat information about known individuals with special care. The Act has requirements in relation to the collection, storage, use and disclosure of such personal information.
The Act acknowledges that particular agencies will have important roles to carry out on behalf of the public that may require these restrictions on personal information to be departed from or modified. In such cases, a Privacy Code of Practice can modify the Act to allow the agency to carry out its function.
SAAS has in place a Privacy Code of Practice which covers the following domains:
http://www.saas.nsw.edu.au/