The Privacy Act 1988 (Cth) allows organisations and industries to have and to enforce their own privacy codes that continue to uphold the privacy rights of individuals while allowing some flexibility of application for organisations. Under Section 18BB the Commissioner may approve a privacy code, provided certain criteria are met. See the following for further information:

• Guidelines on Privacy Code Development (September 2001)

• The Prescribed Standards in the Privacy (Private Sector) Regulations 2001

• Information Sheet 11 - 2001 Privacy Codes

Once a code has been approved, it will replace the National Privacy Principles under the Act for those organisations bound by the code. Codes must have a body established to oversee the operation of the code, called the code administrator. Each code administrator is required to keep a current record of code members, which are the organisations bound by the code. Mostly these are found on their website which we have linked below.