This information sheet assists organisations covered by the Privacy Act 1988 to address a privacy complaint by an individual. The Act requires that businesses (including non-profit organisations) with an annual turnover of more than $3 million, all private health service providers and some small businesses, comply with the National Privacy Principles (NPPs).