Skip to content

Can I collect, use and store personal information for direct marketing?

The Australian Privacy Principles (APPs) contained within the Privacy Act 1988 (Cth) (Privacy Act) sets out how businesses in Australia are to collect, use, disclose and store personal information, and under what circumstances it can be used for direct marketing.

Under the requirements of the APPs, if your business collects personal information from customers, you are required to tell your customers that you are collecting it and what you will be doing with it. You must only use personal information for the purpose for which it was obtained.

Direct marketing

According to APP 7, businesses that collect personal information from individuals must not use or disclosure information for the purpose of direct marketing.

There are, however, several exceptions to this rule.

Your business is able to use and disclose personal information (other than information that is classified as sensitive information) for the purpose of direct marketing if:

  • you collected the information directly from your customer;
  • your customer would expect you to use or disclose the information for marketing purposes;
  • you provide a means for your customer to request not to receive direct marketing from your business; and
  • your customer has not made a request to not receive direct marketing from you.

Your business is also able to use and disclose personal information (other than information that is classified as sensitive information) for the purpose of direct marketing if:

  • your business is a contracted service provider under a Commonwealth contract;
  • your business collected personal information for the purpose of being able to meet (either directly or indirectly) an obligation under the Commonwealth contract; and
  • the use or disclosure of the information is necessary to meet such an obligation.

Requests to not receive direct marketing

If you have used or disclosed the personal information of a customer for the purposes of direct marketing, and the customer returns with a request not to receive any further direct marketing communications from your business, you must give effect to the customer’s request within a reasonable period of time after the request is made.

Continue reading this article below the form
Loading form

Conclusion

It is important that you comply with the requirements of the Privacy Act. Failure to comply with the Privacy Act may result in a fine of up to $1.7 million for companies and $340,000 for entities that are not companies (including individuals) for any serious or repeated breaches of the Privacy Act.

If you are unsure whether your business is collecting, using, disclosing and/or storing personal information in a manner which is compliant with the APPs, contact one of our lawyers today.

Register for our free webinars

ACCC Merger Reforms: Key Takeaways for Executives and Legal Counsel

Online
Understand how the ACCC’s merger reforms impact your legal strategy. Register for our free webinar.
Register Now

Ask an Employment Lawyer: Contracts, Performance and Navigating Dismissals

Online
Ask an employment lawyer your contract, performance and dismissal questions in our free webinar. Register today.
Register Now

Stop Chasing Unpaid Invoices: Payment Terms That Actually Work

Online
Stop chasing late payments with stronger terms and protections. Register for our free webinar.
Register Now

Managing Psychosocial Risks: Employer and Legal Counsel Responsibilities

Online
Protect your business by managing workplace psychosocial risks. Register for our free webinar.
Register Now
See more webinars >
Priscilla Ng

Priscilla Ng

Read all articles by Priscilla

About LegalVision

LegalVision is an innovative commercial law firm that provides businesses with affordable, unlimited and ongoing legal assistance through our membership. We operate in Australia, the United Kingdom and New Zealand.

Learn more

We’re an award-winning law firm

  • Award

    2025 Future of Legal Services Innovation Finalist - Legal Innovation Awards

  • Award

    2025 Employer of Choice - Australasian Lawyer

  • Award

    2024 Law Company of the Year Finalist - The Lawyer Awards

  • Award

    2024 Law Firm of the Year Finalist - Modern Law Private Client Awards

  • Award

    2022 Law Firm of the Year - Australasian Law Awards