CRIMES ACT 1914
A target entity may collect for an integrity purpose sensitive information that:
(a) if the target entity is a Privacy Act agency - is reasonably necessary for, or directly related to, one or more of the entity ' s functions or activities; or
(b) if the target entity is a wholly owned Commonwealth company - is reasonably necessary for one or more of the entity ' s functions or activities.
Note: Subclause 3.3 of Australian Privacy Principle 3 limits the circumstances in which an APP entity may collect sensitive information. This section lets a target entity collect sensitive information for an integrity purpose in circumstances corresponding to those in which it may collect other personal information (see subclauses 3.1 and 3.2 of that Principle).