Loading…
Gidgee Advice (annual turnover A$8m) holds health details that clients gave for life insurance applications. It plans to post a letter promoting a new insurance review only to clients with certain medical conditions, and to ask new clients whether they belong to a trade union. Under the Privacy Act, Gidgee … (i) may use the health details to choose who gets the letter only with those clients' consent. (ii) may collect union membership without consent, as it is not sensitive information.
Statement (i) is true: APP 7.4 in Schedule 1 to the Privacy Act 1988 (compilation 4 Jun 2026) allows an organisation to use sensitive information, such as health information, for direct marketing only with the individual's consent, and choosing recipients by medical condition is that use. Statement (ii) is false: s6 defines sensitive information to include membership of a trade union, so APP 3.3 allows Gidgee to collect it only with consent and only if it is reasonably necessary for its activities, which is doubtful for financial advice.
Sensitive information goes well beyond health: union membership, religion and political views are on the list too.
Practise more AML/CTF, privacy and tax (financial) advice questions
Exam-style questions with worked answers, then full timed mocks. Free to start.
Build a daily practice habit — a few exam-style questions a day, with worked answers. Free to start.
Start practising →Original practice material mapped to the learning outcomes in ASIC's exam guidance. Independent, not affiliated with or endorsed by ASIC. Verify figures and rules against current guidance before relying on them.