(1) The Privacy Act 1988 applies in relation to a service provider, as if the service provider were an organisation within the meaning of that Act, to the extent that the activities of the service provider relate to retained data.
(2) Information that is kept under this Part, or information that is in a document kept under this Part is taken, for the purposes of the Privacy Act 1988 , to be personal information about an individual if the information relates to:
(a) the individual; or
(b) a communication to which the individual is a party.