The ten National Privacy Principles (NPPs) contained in schedule 3 of the Privacy Act 1988 regulated how large businesses, all health service providers and some small businesses and non-government organisations handle individuals' personal information. The NPPs covered the collection, use, disclosure and storage of personal information. They also allowed individuals to access that information and have it corrected if it was wrong.
The NPPs generally applied to private sector organisations with an annual turnover of $3 million or more. In addition, in some instances the NPPs applied to private sector organisations with an annual turnover of less than $3 million.