Should Your Business Keep Customer Data?

Table of Contents

Share at:

The law in Australia requires businesses to keep records that relate to how the business operates. This includes the money your business makes, who you hire and the location of your business. There is however no legal requirement for your business to keep customer data. Many businesses, however, keep customer data for efficiency and marketing reasons. This then begs the question, how should we handle this data?

What Counts as Customer Data?

Any information that can identify who someone is will fall under the category of customer data. Some examples are customers’ name, address, phone number, date of birth and bank account details. It is important to protect your customers’ details not only for their security, but also to build their trust in your business. It’s important to let customers know how your business handles their data by having an accessible Privacy Policy. If your business has a presence in the EU, you will need a GDPR Privacy Policy.

The Australian Privacy Principles (APPs) in the Privacy Act

The APPs provide guidelines on how businesses should handle customers’ personal information. In addition to the examples of customer data above, the APPs impose stricter obligations on businesses that handle sensitive information which includes information about someone’s:

  • race or ethnicity
  • political opinions
  • religion
  • philosophical beliefs
  • membership of a union
  • sexual preference
  • criminal record
  • health information
  • genetic information
  • biometric information.

The APPs do not usually apply to small businesses which have an annual turnover of less than $3 million, however certain businesses will be required to comply in accordance with this checklist. In addition to these guidelines, the Privacy Act also covers specific matters such as the handling of customers’ credit information.

Although the law does not require businesses to keep customer data, there are guidelines as to the way we should handle this information. Customers can complain if they think a business has breached the Privacy Act, so to make sure your business is covered get in touch with a Privacy Lawyer today.

Have more questions? Contact a LawPath consultant on 1800 529 728 to learn more about customising legal documents and obtaining a fixed-fee quote from Australia’s largest legal marketplace.

Share at:

Simplify creating legal documents today

Browse through Lawpath's AI tools which can be used to draft, review and refine legal documents today!

Related Articles

Disposing Of Shares – An Explainer For Shareholders

Disposing of shares can occur through share sales or transfers, but the process differs between public and private companies. Find out more here.

A Guide to Directors’ Duties in Australia: The 6 Duties You Need to Know (2026 Update)

Understand your core directors’ duties in Australia. These are not optional - they are essential legal obligations. Ensure compliance with our full guide.

The Difference Between Promissory Notes & Loan Agreements

A promissory note and a loan agreement both outline arrangements for repaying borrowed money, however their legal connotations differ.

Discretionary Trusts vs Unit Trusts (2026 Update)

When establishing a trust, it's important to know the different types. Find out how discretionary and unit trusts work here.

Competition Permits in Australia: A State-by-State Breakdown

Do you know when competition permits are required in Australia? Read this article to find out when they’re required in every state.

Casual Loading: When Do Employers Pay It?

Employers should be aware of when they need to pay their employees casual loading. Keep reading to find out when this applies.