Document ID: chunk:federal_register_of_legislation:C2025C00055:section:26c
Version: federal_register_of_legislation:C2025C00055
Segment Type: section
Provision Reference: s 26C
Character Range: 284628–286338

26C  What is an APP code
 (1) An APP code is a written code of practice about information privacy.
 (2) An APP code must:
 (a) set out how one or more of the Australian Privacy Principles are to be applied or complied with; and
 (b) specify the APP entities that are bound by the code, or a way of determining the APP entities that are bound by the code; and
 (c) set out the period during which the code is in force (which must not start before the day the code is registered under section 26H).
 (3) An APP code may do one or more of the following:
 (a) impose additional requirements to those imposed by one or more of the Australian Privacy Principles, so long as the additional requirements are not contrary to, or inconsistent with, those principles;
 (b) cover an act or practice that is exempt within the meaning of subsection 7B(1), (2) or (3);
 (c) deal with the internal handling of complaints;
 (d) provide for the reporting to the Commissioner about complaints;
 (e) deal with any other relevant matters.
 (4) An APP code may be expressed to apply to any one or more of the following:
 (a) all personal information or a specified type of personal information;
 (b) a specified activity, or a specified class of activities, of an APP entity;
 (c) a specified industry sector or profession, or a specified class of industry sectors or professions;
 (d) APP entities that use technology of a specified kind.
 (4A) Without limiting subsection 33(3A) of the Acts Interpretation Act 1901, an APP code may provide differently for different:
 (a) classes of entities; and
 (b) classes of personal information; and
 (c) classes of activities of entities.
 (5) An APP code is not a legislative instrument.