Privacy Compliance for Collections Checklist

Before you start

Debt collection routinely involves names, contact details, financial information and sometimes sensitive details, all of which are personal information. Before you tighten your chasing process, understand the privacy obligations that may apply under the Privacy Act and any relevant credit-reporting rules, and review what you actually hold.

• List the categories of personal information you hold on debtors.
• Identify where it is stored and who has access.
• Check whether your privacy policy and collection notices reflect how you use it.
• Note whether any credit-reporting obligations apply to you.

This is general information only and not legal advice. Privacy obligations are detailed and depend on your circumstances — get professional advice to confirm what applies to your business.

Handle data the right way

1. Collect only the personal information you genuinely need to pursue the debt.
2. Use and disclose it for purposes connected to the debt, consistent with your notices.
3. Be careful with sensitive information and any health or hardship details disclosed.
4. Keep records accurate so you are not chasing the wrong person or amount.
5. Avoid disclosing a debt to people who have no proper reason to know.

Discretion matters as much as paperwork. Disclosing someone's debt to their employer, family or unrelated third parties without a proper basis can create both privacy and reputational problems, so keep communications targeted to the debtor.

Secure data and use third parties carefully

1. Store debtor information securely and restrict access to those who need it.
2. When engaging a collection partner, check how they will handle the data.
3. Ensure any disclosure to a recovery agency is for a proper, connected purpose.
4. Destroy or de-identify information you no longer need, consistent with retention rules.
5. Have a plan for responding to a data breach involving debtor information.

Using a reputable recovery partner that takes privacy seriously reduces your exposure. A free debt appraisal is a low-commitment way to engage with specialists who understand these obligations.

Common mistakes

• Collecting more personal information than the debt actually requires.
• Disclosing a debt to third parties who have no proper reason to know.
• Storing debtor data insecurely or letting too many staff access it.
• Ignoring a customer's request to access or correct their information.
• Passing data to a collection partner without checking how they handle it.

If you are unsure how the Privacy Act applies to your collections, get professional advice. Our main site also covers practical, privacy-aware ways to chase invoices.