OAIC, Trading in personal information: selling or licensing personal information brings a business under the Act (Office of the Australian Information Commissioner, Trading in personal information)
A holder that is paid for a licence of records containing personal information is trading in it and must comply with the APPs, whatever its size, unless it has the consent of all the individuals concerned or is authorised or required by law.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“A business is 'trading' in personal information if they collect or disclose an individual's personal information to someone else for a benefit, service or advantage. ... If a business trades in personal information they have to comply with the Australian Privacy Principles in the Privacy Act 1988. ... A business is not trading in personal information if they give or receive personal information for a benefit, service or advantage and they: have the consent of all the individuals concerned, or only do so when authorised or required by law.”
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide