In Australia, there are strict obligations when it comes to sensitive information. ‘Sensitive information’ is defined in the Privacy Act 1988 (Cth) to mean information or an opinion about an individual’s:
- racial or ethnic origin
- political opinions
- membership of a political association
- religious beliefs or affiliations
- philosophical beliefs
- membership of a professional or trade association
- membership of a trade union
- sexual preferences or practices
- criminal record
- health, genetic or biometric information
This is because disclosure of this sensitive information may have a significant impact on a person’s life.
The nature of sensitive information means that if a business inappropriately handles that information, the person affected might suffer discrimination, mistreatment, humiliation or embarrassment.
Companies that deal with sensitive information must take extra care.