Queensland Consolidated Acts

INFORMATION PRIVACY ACT 2009 - SECT 36

36 Bound contracted service provider to comply with privacy principles

(1) A bound contracted service provider under a service arrangement must comply with part 1 or 2 and part 3 in relation to the discharge of its obligations under the arrangement as if it were the entity that is the contracting agency.

(2) The requirement to comply under subsection (1) continues to apply to the bound contracted service provider in relation to personal information it continues to hold after its obligations under the service arrangement otherwise end.

(3) A bound contracted service provider’s compliance with part 1 or 2 and part 3 may be enforced under this Act as if it were an agency.

(4) Subsections (1) to (3) are not intended to prevent a service arrangement from including a requirement for the contracted service provider to comply with all or part of the privacy principles even though this part does not require that the service arrangement include the requirement.