Collection of Information

IPPs 1, 10, 8 and 7.4 control the collection of personal information by NT government organisations.

  • Collection includes any way that an organisation obtains information. It includes information that is volunteered. It includes information that is obtained from another organisation.

  • An organisation must:

    • collect only information that is necessary for its functions or activities
    • collect information by lawful and fair means
    • not collect information in an unreasonably intrusive way.

    For some types of information, there are more limits on collection. They are listed in the table below.

    IPPLimits of Collection

     

     IPP10

    Sensitive information

    Sensitive information, including information about health, racial or ethnic origin, and criminal records, can only be collected if:

    • the person consents
    • collection is required by law
    • collection is necessary to establish, exercise or defend a legal claim;
    • the individual is incapable of giving consent, and collection is necessary to prevent or lessen a serious and imminent threat to life or health; or
    • IPP 10.2 applies (it relates to targeted welfare and educational services).

    IPP 8

    Anonymity

    An organisation must give a person entering into a transaction the option of not identifying himself or herself, unless:

    • it is required by law; or
    • it is not practicable that the person not be identified.

    IPP 7.4

    Unique identifiers

    An organisation must not require a person to provide a code or number that identifies them (for example, a driver's licence number) unless:

    • it is required or authorised by law; or
    • it is in connection with the purpose for which the unique identifier was assigned or for a directly related purpose.

  • Sensitive information" means -

    • personal information about -
      • racial or ethnic origin;
      • political opinions;
      • membership of a political association;
      • religious beliefs or affiliations;
      • philosophical beliefs;
      • membership of a professional or trade association;
      • membership of a trade union;
      • sexual preferences or practices; or
      • a criminal record; or
    • health information.

  • An organisation must collect information about a person from that person, if it is reasonable and practicable to do so.