"Agencies" that have to comply with the Privacy Act come in all shapes and sizes clubs, businesses and government departments alike. Even an individual can be an "agency". Almost everyone is covered if they hold personal information.
Our Data Safety Toolkit provides tips to help organisations prevent common mistakes that lead to data breaches, and advice on what to do when a breach happens.
We also have a page of specific Info for Employers.
Giving notice to website visitors about how you collect and use personal information is good privacy practice. Read our notes on how to approach the task of writing an effective website privacy notice or try our five minute privacy statement generator - Priv-o-Matic.
Check out our guidance on sharing personal information of families and vulnerable children.