Skip to content
In force2020 Revised Edition

Part 1 · Preliminary

3. Purpose

Feedback & support

The purpose of this Act is to govern the collection, use and disclosure of personal data by organisations in a manner that recognises both the right of individuals to protect their personal data and the need of organisations to collect, use or disclose personal data for purposes that a reasonable person would consider appropriate in the circumstances.

Report

Part 2

Personal Data Protection Commission and Administration

Part 3

General Rules with Respect to Protection of and Accountability for Personal Data

Part 4

Collection, Use and Disclosure of Personal Data

Part 5

Access to and Correction of Personal Data

Part 6

Care of Personal Data

Part 6A

Notification of Data Breaches

Part 7

Part 8

Part 9

Do Not Call Registry

Part 9A

Dictionary Attacks and Address‑Harvesting Software

Part 9B

Offences Affecting Personal Data and Anonymised Information

Part 9C

Enforcement

Part 9D

Appeals

Part 10

General

Schedules