What is a privacy policy? (2024)

A privacy policy is a statement that explains in simple language how an organisation or agency handles your personal information.

Any organisation or agency the Privacy Act 1988 covers must have a privacy policy.

The Privacy Act covers organisations with an annual turnover more than $3 million and operating in Australia, and some other organisations.A number of factors go into deciding if an organisation operates in Australia, including if they have a presence in Australia or carry on a business in Australia.

A privacy policy may be printed on paper, available on a website or displayed on a mobile device’s screen. If you don’t have access to the internet, you can phone the organisation or agency and ask for a paper copy.

What must be included

An organisation or agency’s privacy policy must tell you:

  • their name and contact details
  • what kinds of personal information they collect and store
  • how they collect personal information and where it is stored
  • the reasons why they need to collect personal information
  • how they’ll use and disclose personal information
  • how you can access your personal information, or ask for a correction
  • how to lodge a complaint if you think your information has mishandled, and how they’ll handle your complaint
  • if they are likely to disclose your information outside Australia and, if practical, which countries they are likely to disclose the information to.

If an organisation or agency’s privacy policy says that your personal information is likely to be sent overseas, if something goes wrong then they may be legally responsible.

A privacy policy may also include other information. For example, how long your personal information is kept and if it must be scanned.

If information handling practices change

An organisation or agency must update their privacy policy when their information handling practices change. They must publicise the updated privacy policy, for example on their website and through email or postal lists.

If you can’t understand an organisation or agency’s privacy policy, ask them to explain it.

What is a privacy policy? (2024)

FAQs

What is the purpose of a privacy policy? ›

A privacy policy is a thorough explanation of how you plan to use any personal information that you collect through your mobile app or website. These policies are sometimes called privacy statements or privacy notices. They serve as legal documents meant to protect both company and consumers.

What happens if you don't have a privacy policy? ›

Businesses that do not have a Privacy Policy are at risk of being fined by government agencies. Additionally, customers who feel their privacy rights have been violated can sue your company.

What is a quest consumer? ›

Quest Consumer Inc. is a separate company (owned by Quest Diagnostics) that operates the questhealth.com website and brings together healthcare services and providers, such as Quest Diagnostics and PWNHealth, so that home collection kits and laboratory tests can be purchased by people like you with no doctor visit ...

Do I need a privacy policy on my website? ›

You need to establish user privacy policies if you collect personal data through your website, mobile app, email newsletter, social media platform or account, TV app, ecommerce platform, smart home device or online marketplace.

What does a privacy policy include? ›

A privacy policy outlines how personal data is collected, processed, disclosed, and protected and is legally required under most privacy laws worldwide. Privacy policies are aimed at increasing transparency, trustworthiness and accountability in handling personal data.

What does a privacy policy need to cover? ›

A privacy policy on a website is a statement explaining how you collect and use your web visitors' data. It should lay out what type of information you collect from users or visitors, your reasons for doing so, and what use you put it to. Your privacy policy should also explain the methods you use to collect data.

Do you have to accept privacy policy? ›

A privacy policy is there to tell you that a company can or may share your data. It is not required to ask if you're cool with that.

Can you opt out of a privacy policy? ›

You may request that businesses stop selling or sharing your personal information (“opt-out”).

Does my small business need a privacy policy? ›

Do small businesses need a privacy policy? Yes! You need to have a privacy policy along with other policies for your small business. After all, you collect customer information just like bigger companies do.

What is considered a Quest? ›

A quest is a journey toward a specific mission or a goal. It serves as a plot device in mythology and fiction: a difficult journey towards a goal, often symbolic or allegorical. Tales of quests figure prominently in the folklore of every nation and ethnic culture.

What does Quest do? ›

Today, we're leading the way in advanced gene-based and molecular testing, healthcare IT and data analytics, lab services and lab operations, and wellness and population health.

What does the company Quest do? ›

Quest Diagnostics Inc (Quest Diagnostics) is a provider of diagnostic information services to patients and physicians through a network of laboratories and company-owned patient service centers.

How much does a privacy policy cost? ›

Q: How much does a privacy policy cost? A: A privacy policy costs anywhere between $500 to $3,000 if you're using an attorney. If, however, you're using a privacy policy generator online, expect to pay only a fraction of that. For example, a basic privacy policy created using TermsFeed can cost only $30-$70.

Can I write my own privacy policy? ›

Yes, you can write your own privacy policy. You don't need to hire a lawyer to write a policy for your website or app — using a privacy policy template will help you include all the clauses necessary to explain your data-handling practices to users.

Do I need a privacy policy if I don't collect data? ›

If you don't actually collect any personal information, you might not need a Privacy Policy. However, many third parties and app stores require one.

Can you sue for lack of privacy? ›

You can also sue another person if they invade your privacy. Here, you would be suing for dignitary torts, or civil wrongs that harm someone's dignity. As dignitary torts, both invasion of privacy and emotional distress claims have high hurdles a plaintiff must clear to be successful in their case.

Do I need a privacy policy if I don't collect any data? ›

If you don't actually collect any personal information, you might not need a Privacy Policy. However, many third parties and app stores require one.

Top Articles
Latest Posts
Article information

Author: Ms. Lucile Johns

Last Updated:

Views: 6421

Rating: 4 / 5 (61 voted)

Reviews: 84% of readers found this page helpful

Author information

Name: Ms. Lucile Johns

Birthday: 1999-11-16

Address: Suite 237 56046 Walsh Coves, West Enid, VT 46557

Phone: +59115435987187

Job: Education Supervisor

Hobby: Genealogy, Stone skipping, Skydiving, Nordic skating, Couponing, Coloring, Gardening

Introduction: My name is Ms. Lucile Johns, I am a successful, friendly, friendly, homely, adventurous, handsome, delightful person who loves writing and wants to share my knowledge and understanding with you.