I am concerned at how much information this organisation is collecting.

Organisations should only collect as much personal information as is necessary for them to carry out the lawful business of that organisation.They should only collect identifying information about you (e.g. name, address, date of birth, passport or driver license details) if necessary for carrying out a lawful purpose. If you are concerned about the amount of information being collected, or don’t understand why certain types of information are being collected, you can ask the agency to explain why that collection is necessary.

The organisation also needs to be clear with you about what it plans to do with the information, and what will happen if you refuse to provide it. If you are unhappy with their response, you can make a complaint to us. Note, the Privacy Commissioner can investigate whether the collection of personal information complies with the Privacy Act. This could include systemic issues, such as over collection of unnecessary information or the unnecessary collection of identifying information.