Tasmania Act

Personal Information Protection Act 2004 (Tas)

The Personal Information Protection Act 2004 sets Tasmania's local personal-information rules.

In forceTasmania4 practical checks

Plain-English explainers, not legal advice. Check the linked official source before you rely on a specific section, and get advice for your situation.

Get legal help

Start here

Quick read

The Personal Information Protection Act 2004 is Tasmania's local personal-information law.
For many private businesses, the Commonwealth Privacy Act will be the first privacy question.

Likely relevant if

Tasmanian businesses handling personal information
Businesses contracting with Tasmanian public sector bodies
Health, education, community, technology and service providers handling sensitive records

Check first

Identify whether the business is covered directly or through a public-sector contract.
Collect personal information only where needed and explain the purpose clearly.
Keep information secure and limit use or disclosure to authorised purposes.

What happens if you get it wrong

Penalties & enforcement

Privacy failures can lead to complaints, investigations, contract issues, reputational damage and, where other privacy laws also apply, regulatory action.

Enforced by Tasmanian Ombudsman and relevant Tasmanian agencies

When this shows up in real life

1
Working with a Tasmanian agency
Check contract privacy clauses and whether the business must follow Tasmanian privacy principles for the project.
2
Building a customer database
Use clear collection notices, keep access limited and avoid collecting information that is not needed.

Plain-English glossary

Personal information: Information or opinion about an individual whose identity is apparent or can reasonably be ascertained.
Personal information custodian: A covered organisation or body that holds personal information under the Tasmanian regime.

Common questions

Is this the same as the Privacy Act 1988?

No. The Commonwealth Privacy Act is separate. Businesses should check both regimes where Tasmanian public-sector or local coverage issues arise.

What should a small business check?

Work out whether the Act applies, then review collection notices, consent, storage, access, correction and complaint handling.

How Sprintlaw can help

Start here

Quick read

The Personal Information Protection Act 2004 is Tasmania's local personal-information law.
For many private businesses, the Commonwealth Privacy Act will be the first privacy question.

Likely relevant if

Tasmanian businesses handling personal information
Businesses contracting with Tasmanian public sector bodies
Health, education, community, technology and service providers handling sensitive records

Check first

Identify whether the business is covered directly or through a public-sector contract.
Collect personal information only where needed and explain the purpose clearly.
Keep information secure and limit use or disclosure to authorised purposes.

Common questions

Is this the same as the Privacy Act 1988?

No. The Commonwealth Privacy Act is separate. Businesses should check both regimes where Tasmanian public-sector or local coverage issues arise.

What should a small business check?

Work out whether the Act applies, then review collection notices, consent, storage, access, correction and complaint handling.

Personal Information Protection Act 2004 (Tas)

Start here

What happens if you get it wrong

When this shows up in real life

Plain-English glossary

Common questions

Related topics

How Sprintlaw can help

Personal Information Protection Act 2004 (Tas)

Start here

What happens if you get it wrong

When this shows up in real life

Plain-English glossary

Common questions

Related topics

How Sprintlaw can help