Question 1

APP1 and APP10 of the Privacy Act 1988 (Cth) set out the obligations of businesses with respect to the collection of personal and sensitive information.These rules do not provide that:

Accepted Answer

APP1 and APP10 do not allow businesses to collect personal information without making the individual aware of it. Transparency is a key principle in the collection of personal information under the Privacy Act 1988.

Question 2

If a business fails to take reasonable steps to protect any personal information it holds from misuse or unauthorised access, it is in breach of:

Accepted Answer

APP4 requires entities to take reasonable steps to protect personal information from misuse, interference, loss, unauthorized access, modification, or disclosure.

Question 3

A business can generally use personal information about an individual for marketing purposes under the Privacy Amendment (Enhancing Privacy Protection)Act 2012 (Cth) if:

Accepted Answer

Under the Privacy Amendment (Enhancing Privacy Protection) Act 2012, businesses can use personal information for marketing if it is impracticable to seek consent, provided the individual is informed they can opt out of further marketing.

Question 4

APP3 of the Privacy Amendment (Enhancing Privacy Protection)Act 2012 (Cth) concerns the security of personal or sensitive information held by a business about individuals.The obligation with respect to security does not extend to:

Accepted Answer

The obligation does not extend to strict liability for all unauthorized accessing of the information; businesses are required to take reasonable steps to protect information, but they are not held strictly liable for all breaches.

Question 5

According to APP2 of the Privacy Amendment (Enhancing Privacy Protection)Act 2012 (Cth), personal information a business has about an individual can generally only be used for the purpose:

Accepted Answer

APP2 states that personal information should only be used for the purpose for which it was collected, unless an exception applies.

Question 6

A business that fails to comply with its own privacy policy:

Accepted Answer

Failing to comply with its own privacy policy can be considered misleading or deceptive conduct, which can have legal implications under consumer protection laws.

Quiz 11: Consumer Protection and Privacy Law: Dealing With Customers

APP1 and APP10 of the Privacy Act 1988 (Cth) set out the obligations of businesses with respect to the collection of personal and sensitive information.These rules do not provide that:

If a business fails to take reasonable steps to protect any personal information it holds from misuse or unauthorised access, it is in breach of:

A business can generally use personal information about an individual for marketing purposes under the Privacy Amendment (Enhancing Privacy Protection) Act 2012 (Cth) if:

APP3 of the Privacy Amendment (Enhancing Privacy Protection) Act 2012 (Cth) concerns the security of personal or sensitive information held by a business about individuals.The obligation with respect to security does not extend to:

According to APP2 of the Privacy Amendment (Enhancing Privacy Protection) Act 2012 (Cth) , personal information a business has about an individual can generally only be used for the purpose:

A business that fails to comply with its own privacy policy: