Joseph is concerned about the record-keeping system that he is utilising for his employees.

He has several employees at his business, and his profits have skyrocketed to over $4 million per year. He keeps his employee's records on a personal computer at his home office. To save money, he uses the public,

unsecured Wi-Fi of a neighbouring restaurant when working on his home computer, and he does not believe

in protecting his personal or work files with passwords of any kind. Joseph happens to talk with another

business owner who was under investigation by the Privacy Commissioner for violation of the Privacy Act, and

now Joseph is wondering if that Act applies to him, and if he is compliance with it. He asks you to advise him

on the Privacy Act, and advise him on whether or not he may be in violation of the Act.

What is the appropriate law(s) and/or rule(s) that apply to the situation?