The Privacy Act1988 (Cth), as amended by the Privacy Amendment (Private Sector) Act2000 (Cth), regulates how private sector organisations (including insurers) handle "personal information" relating to policyholders. Organisations are required to comply with the 10 National Privacy Principles, which set minimum standards for collection, storage, use, security and disposal of personal information.

The Office of the Federal Privacy Commissioner has released guidelines to assist insurers and policyholders with their privacy concerns. For more information on privacy issues, see:Chapter 21*5 Privacy Rights.