Privacy Training: Understanding APP 6 — Use or Disclosure of Personal Information
The Australian Privacy Principles (APPs) set clear rules for how organisations and government agencies handle personal information. APP 6 explains when and how that information can be used or disclosed. Knowing these rules is essential for healthcare providers, businesses, and any organisation working with personal data.
📌 Important: This page gives an overview of the course.
To complete the full training and receive your Certificate of Completion, please enrol here.
Why This Course Matters
Understanding APP 6 helps you:
- Use personal data only for the right reasons.
- Avoid sharing information without proper consent.
- Build trust with patients, clients, and the public.
By following APP 6, you show your commitment to privacy and compliance, which strengthens your organisation’s reputation.
Course Delivery
- Micro-Course: Short, practical training you can finish in one sitting.
- Certificate: Earned instantly upon course completion, ideal for accreditation evidence.
- Fully Online: Access the material anytime, from any internet-connected device.
Module 1: What is APP 6?
Key Learning Objectives:
- Learn the main purpose of APP 6.
- Understand the difference between primary and secondary purposes.
- Recognise when you can legally disclose personal information.
Summary:
APP 6 says an APP entity (organisation or agency) must only use or disclose personal information for the primary purpose it was collected—unless a valid exception applies. This protects individuals from having their information used in ways they didn’t agree to or expect.
Key Terms:
- Holds: An entity has possession or control of personal data, whether physical or electronic.
- Use: Handling or processing the data within the organisation, such as searching or making decisions based on it.
- Disclose: Making information available outside the organisation, intentionally or not.
- Primary Purpose: The original reason for collecting the data (for example, providing medical treatment).
- Secondary Purpose: Any other use beyond the original intent, only allowed under specific conditions.
Module 2: Primary vs. Secondary Purpose
Primary Purpose Examples:
- A GP collects patient details to diagnose and treat illness.
- A retailer gathers customer information to process an order.
Secondary Purpose Exceptions:
- Consent: The individual has agreed to the additional use.
- Reasonable Expectation: The secondary use is related to the original reason and is something the person would expect.
Healthcare Examples:
- Giving reception staff the details needed for billing.
- Allowing IT staff limited system access for maintenance.
- Sharing records with other clinicians directly involved in care.
What’s Not Allowed:
- Using patient information for marketing without clear consent.
Case Studies
Case Study 1: Primary purpose — Patient treatment.
Case Study 2: Secondary purpose — Medicare billing.
Case Study 3: Secondary purpose — IT maintenance.
Case Study 4: Unauthorised use — Providing patient details to a marketing company without consent.
📌 Need the certificate? Enrol here for the Privacy Training course.
Frequently Asked Questions
Is this course free?
Yes.
Do I need a login?
Yes — you must enrol to access all training materials and get your certificate.
How long does it take?
Most people finish in under one hour.
Who should take it?
Healthcare workers, administrators, and anyone responsible for handling personal data.
Compliance and Accreditation
Completing this course helps you meet requirements under:
- Privacy Act 1988 (Cth)
- Australian Privacy Principles
- RACGP Standards for General Practices
Enrol Today
Advance your skills, protect patient rights, and keep your practice compliant.