What businesses are covered by Privacy Regulation 2013

The Privacy Regulation 2013 applies to more than just large corporations. 

Here's a breakdown of the types of businesses covered:

All Businesses Handling Health Information

This includes traditional healthcare providers like hospitals, doctors, and therapists, but also extends to child care centres, private schools, and even complementary therapists.

Businesses Trading in Personal Information

This applies to companies that buy and sell personal information as part of their core business.

Government Contractors

If your small business works under a contract with the Commonwealth government, you're covered by the regulation.

Residential Tenancy Database Operators

This includes any business that manages a database containing information on tenants and landlords.

Credit Reporting Bodies

This refers to companies that collect and share credit information, like credit bureaus.

Anti-Money Laundering Reporting Entities

Businesses that report under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 are also covered.

Important Note for Small Businesses: Even if your business doesn't fall under any of these categories and has a turnover under $3 million, there are exceptions. It's still recommended to check the Privacy Act guidelines for small businesses to be sure