The NDCO program is required to comply with the Privacy Act 1988 (Privacy Act).  This  is an Australian law which regulates the handling of personal information about individuals. This includes the collection, use, storage and disclosure of personal information, and access to and correction of that information.


http://www.oaic.gov.au/privacy/privacy-act/the-privacy-act