Use or disclosure

6.1 If an organisation has possession or control over personal information about an individual that was collected for a particular purpose (aka the primary purpose), the entity must not use or disclose the information for another purpose (aka the secondary purpose).


Exceptions to the above include where:
  • 6.1 The individual has consented expressly or impliedly to the use or disclosure of the information (See section 6(1)).

  • 6.2 The individual would reasonably expect the organisation to use or disclose the information for a secondary purpose which is related to the primary purpose. (Sensitive information requires a direct relationship to the primary purpose)....




Reasonable expectation

The OAIC characterises reasonable expectation as based on what a reasonable person, if properly informed, would expect in the circumstances. It exemplifies a reasonable expectation as where the individual makes a complaint in the media about the organisation, giving rise to a right for the organisation to defend itself by releasing certain personal information....




Related bodies corporate

6.6 If the organisation is a corporation and collects information from a related corporation, then the primary purpose for the original collection still applies.

Privacy Law

Australian Privacy Principle 6 - Use or Disclosure of Personal Information