Do I need permission from an individual to share their personal information?

It is best practice to get authorisation or consent to share an individual's personal information, so that individuals aren't taken by surprise, although authorisation is not always required.

IPP11 of the Privacy Act says you cannot disclose an individual's information unless one of the listed exceptions apply (consent is one exception) or if there is another law which permits or requires disclosure. One of those exceptions is where an individual authorises you to disclose the information.

Updated October 2025