Should Your Business Keep Customer Data?

Table of Contents

Share at:

The law in Australia requires businesses to keep records that relate to how the business operates. This includes the money your business makes, who you hire and the location of your business. There is however no legal requirement for your business to keep customer data. Many businesses, however, keep customer data for efficiency and marketing reasons. This then begs the question, how should we handle this data?

What Counts as Customer Data?

Any information that can identify who someone is will fall under the category of customer data. Some examples are customers’ name, address, phone number, date of birth and bank account details. It is important to protect your customers’ details not only for their security, but also to build their trust in your business. It’s important to let customers know how your business handles their data by having an accessible Privacy Policy. If your business has a presence in the EU, you will need a GDPR Privacy Policy.

The Australian Privacy Principles (APPs) in the Privacy Act

The APPs provide guidelines on how businesses should handle customers’ personal information. In addition to the examples of customer data above, the APPs impose stricter obligations on businesses that handle sensitive information which includes information about someone’s:

  • race or ethnicity
  • political opinions
  • religion
  • philosophical beliefs
  • membership of a union
  • sexual preference
  • criminal record
  • health information
  • genetic information
  • biometric information.

The APPs do not usually apply to small businesses which have an annual turnover of less than $3 million, however certain businesses will be required to comply in accordance with this checklist. In addition to these guidelines, the Privacy Act also covers specific matters such as the handling of customers’ credit information.

Although the law does not require businesses to keep customer data, there are guidelines as to the way we should handle this information. Customers can complain if they think a business has breached the Privacy Act, so to make sure your business is covered get in touch with a Privacy Lawyer today.

Have more questions? Contact a LawPath consultant on 1800 529 728 to learn more about customising legal documents and obtaining a fixed-fee quote from Australia’s largest legal marketplace.

Share at:

Simplify creating legal documents today

Browse through Lawpath's AI tools which can be used to draft, review and refine legal documents today!

Related Articles

Should I Use A Deed Of Release When Employees Leave The Job?

A deed or release can be a crucial document for both employers and employees. Here is what it covers, what to look for, and how to ensure your legal protections.

What is Genuine Redundancy? (2026 Update)

No longer require an employee to do their job? Learn about genuine redundancy, your employees’ rights, and your business's obligations in this situation.

Is a DIY Will in Australia Enough? What a Basic Will Template Does and Doesn’t Cover

DIY Will Australia: Is a template enough? Learn what a basic Will covers, what it doesn’t, and when you may need extra estate planning.

What’s The Difference Between A Corporation And A Company?

Understand the definitions of corporation vs company under Australian law and choose the right business structure for you.

How to Get Out of a Gym Membership

Learn how to cancel a gym membership in Australia and the legal rights you have under Australian Consumer Law.

What is the Difference Between a Public and Private Company?

Which business structure is right for you: public vs private company? In Australia, this depends on several factors. Read our guide to learn more.