On 18 September 2025, Parliament adopted the Information Privacy Principle (IPP) 3A in the Privacy Amendment Bill, which introduces notification requirements for the indirect collection of personal information. The agency must take reasonable steps …