"Since December 2001, 'privacy law' in Australia has been almost synonymous with the National Privacy Principles, which regulate the handling of personal information by the private sector. This perspective has tended to ignore other sources of privacy obligations, including increasing privacy regulation by state and territory governments, and the binding nature of representations that organisations make in privacy policies and statements. Recent decisions by overseas courts point to yet another potential source of privacy obligations, should Australian courts decide to follow their lead." (Quoted from article)