The relevant use principle of the Privacy Act 1988 (Cwlth) says that:

(a) information shall only be used for the purpose for which it was gathered.

(b) information can only be gathered in lawful ways.

(c) information being used must be accurate.

(d) information shall not be disclosed unless consent is obtained.