Checkpoint 13.3 - Core

The collection of personal information by government and industry is covered in Victoria by the Information Privacy Act 2000 (IPA 2000). This type of information is lawfully able to be collected, stored and used as long as it is done so under the requirements of the IPA 2000. One of the constraints imposed on the collecting body is that only those pieces of information that are required for function or activities are within the scope of information allowed to be collected, stored and used. If information is not to be used, then it is not to be collected.

Requirement

Ensure that all personal information collected by the website is necessary for the function of the target task or activity and that no personal information is collected simply in an ambit fashion.

Checking Tool

In a browser view all form fields in the forms, or the components of a request for personal information via an email, to ensure that each piece of personal information collected is required for the task and that the task would be incomplete if this information were not supplied.

Information Source

The original source of this information is located in the Website Privacy Guidelines for the Victorian Public Sector May 2004 (PDF - 280KB)  (www.privacy.vic.gov.au/dir100/priweb.nsf/download/7072F7C2ADDDE8E8CA256EA9000708DD/$FILE/Website_guidelines.pdf)