Commonwealth Consolidated Acts Commonwealth Consolidated ActsA target entity may collect for an integrity purpose sensitive information that:
(a) if the target entity is a Privacy Act agency--is reasonably necessary for, or directly related to, one or more of the entity's functions or activities; or
(b) if the target entity is a wholly - owned Commonwealth company--is reasonably necessary for one or more of the entity's functions or activities.
Note: Subclause 3.3 of Australian Privacy Principle 3 limits the circumstances in which an APP entity may collect sensitive information. This section lets a target entity collect sensitive information for an integrity purpose in circumstances corresponding to those in which it may collect other personal information (see subclauses 3.1 and 3.2 of that Principle).