Which organisations are covered?
	Ø Small businesses (<$3m turnover) out unless o it provides a health service and holds health records [Dec 01] o it trades in personal information [Dec 02] o it is related to a non-small business [Dec 02] o it is a contracted service provider for a Commonwealth contract [Dec 02]