Information Privacy Principle (IPP) 1 of the Privacy Act 1988 (Reproduced at Attachment A) imposes obligations on Commonwealth agencies relating to the collection of personal information. Collection must be fair and lawful. The information collected must be for a lawful purpose that is directly related to the function or activity of the agency and the collection of information must be necessary for, or directly related to, that purpose.

An application for approval to conduct covert surveillance must be in writing on the Application for Surveillance on page 39.