Commonwealth Consolidated Acts Commonwealth Consolidated ActsCollection, use and disclosure of personal information other than identity verification information
(1) The collection, use and disclosure of personal information (other than identity verification information) about an individual is taken to be authorised by this Act for the purposes of the Privacy Act 1988 if:
(aa) the collection, use or disclosure is for the purposes of, or for purposes directly relating to, determining whether a background check under the AusCheck scheme is required or permitted to be conducted in respect of a particular individual; or
(a) the collection, use or disclosure is for the purposes of, or for purposes directly relating to, conducting a background check or advising on the outcome of a background check in respect of the individual under the AusCheck scheme; or
(b) the collection, use or disclosure is for the purposes of updating information held by the Secretary in respect of an individual in respect of whom a background check has been conducted under the AusCheck scheme; or
(c) the collection, use or disclosure is for the purposes of providing an online verification service that will enable verification:
(i) that an ASIC or MSIC has been issued to a particular individual and is in effect at a particular time; or
(ii) that an individual who is in possession of an ASIC or MSIC is the person to whom the card was issued; or
(iii) that a national security background check has been conducted under the AusCheck scheme in relation to a particular individual; or
(iv) that an individual who is in possession of a card, licence, permit or other authorisation in relation to which a national security background check has been conducted under the AusCheck scheme is the individual to whom the card, licence, permit or authorisation was issued.
Collection, use and disclosure of identity verification information
(2) The collection, use and disclosure of identity verification information about an individual is taken to be authorised by this Act for the purposes of the Privacy Act 1988 if:
(a) the collection, use or disclosure is directly necessary for the purpose of verifying the identity of an individual in respect of whom a background check is being or has been conducted under the AusCheck scheme; and
(b) for a use or disclosure--the information is only used or disclosed to the extent necessary for the purpose mentioned in paragraph (a).