Commonwealth Consolidated Acts Commonwealth Consolidated Acts(1) An approved course provider must comply with the Australian Privacy Principles in relation to personal information obtained for the purposes of this Act.
(2) A failure to comply with subsection (1) constitutes an act or practice involving an interference with the privacy of the individual concerned for the purposes of section 13 of the Privacy Act 1988 .
Note: The act or practice may be the subject of a complaint under section 36 of that Act.
(3) The provider must have a procedure under which a student enrolled with the provider may apply to the provider for, and receive, a copy of personal information that the provider holds in relation to the student.
(4) The provider must comply with any requirements set out in the rules relating to the management of personal information.