Processes biometric data, in Australia

Privacy Act 1988 (Cth), No. 119, 1988, Schedule 1, Australian Privacy Principles 3 and 6, read with s. 6 · Read the law's page

• Do not collect personal information, including personal information scraped from a public website, unless it is reasonably necessary for one or more of the entity's functions or activities.
• Do not use or disclose personal information collected for one purpose for another purpose, including model training, unless the individual consented or an Australian Privacy Principle 6.2 exception applies.

Privacy Act 1988 (Cth), Schedule 1, Australian Privacy Principle 3, read with s. 6 · Read the law's page

• Do not collect sensitive information about an individual, including biometric information used for automated biometric verification or identification, or a biometric template, unless the individual consents and the collection is reasonably necessary for the entity's functions, or a listed exception in Australian Privacy Principle 3.4 applies.