This Division sets out rules that apply to affected information recipients in relation to their handling of their regulated information.

If an affected information recipient is an APP entity, the rules apply in relation to the regulated information of the recipient in addition to, or instead of, any relevant Australian Privacy Principles.