Skip to main content
Rules Mate

Do aged care providers need to provide an APP 5 collection notice at or before collection?

A computed answer from the Rules Mate applicability engine, with the exact condition, the outcome for every structure and size, and the primary source.

Short answer: Yes

Yes. This obligation applies to aged care providers whatever their structure or size. The deciding fact: Provides a health service and holds health information — not covered by the small business exemption (Privacy Act s 6D(4)(b)).

The obligation in brief

Provide an APP 5 collection notice at or before collection. APP 5 requires APP entities to take reasonable steps to notify individuals (or otherwise make information available) when collecting personal information. Mandatory matters: entity identity, purpose of collection, kinds of recipients, that the Privacy Policy contains information about access/correction, and consequences of not providing the info.

Trigger: Collecting personal information.

Why aged care providers get a different answer

Rules Mate runs its applicability engine across 9 business structures and 6 size bands for each of the 35 industries it maps. For 24 of those industries the answer for "Provide an APP 5 collection notice at or before collection" is it depends on structure or size. Aged care providers is one of the 11 where the answer is different: yes.

The deciding fact for aged care providers: Provides a health service and holds health information — not covered by the small business exemption (Privacy Act s 6D(4)(b))

About the industry: Residential and home-care providers under the new Aged Care Act 2024 (in force 1 November 2025).

Compare a professional services (general) business with 6–19 employees structured as a Pty Ltd company: the obligation does not apply (Requires APP-entity status (turnover > $3M or a s 6D(4) carve-out)).

Answer by business structure and size

Each cell is the engine's outcome for a business in aged care providers with that structure and size, assuming it sells to consumers and small businesses and holds customer contact details. "Check" means the obligation turns on a fact the industry does not settle.

"Provide an APP 5 collection notice at or before collection": outcome for aged care providers by structure and size
StructureNo employees1–5 employees6–19 employees20–99 employees100–499 employees500+ employees
Sole traderYesYesYesYesYesYes
PartnershipYesYesYesYesYesYes
TrustYesYesYesYesYesYes
Pty Ltd companyYesYesYesYesYesYes
Public companyYesYesYesYesYesYes
Not-for-profit (unregistered)YesYesYesYesYesYes
Registered charityYesYesYesYesYesYes
Super fundYesYesYesYesYesYes
Foreign companyYesYesYesYesYesYes

What the obligation requires

When due
At or before collection (or as soon as practicable thereafter).
Evidence to keep
Collection notices, signup flows, consent dashboards.
Maximum penalty
Same penalty regime as broader Privacy Act breaches (up to $50M / 30% turnover)
Regulator
OAIC
Jurisdiction
Commonwealth (national)

Other obligations where aged care providers differ from the norm

Other industries with a non-default answer

Questions

Do aged care providers need to provide an APP 5 collection notice at or before collection?
Yes. This obligation applies to aged care providers whatever their structure or size. The deciding fact: Provides a health service and holds health information — not covered by the small business exemption (Privacy Act s 6D(4)(b)).
Is the answer the same for every industry?
No. For 24 of the 35 industries Rules Mate maps, the answer is it depends on structure or size. Aged care providers is one of 11 industries with a different answer.

Related

Sources

Computed by the Rules Mate applicability engine from the published obligation corpus; facts last checked 3 October 2026. Rules Mate is not a law firm and this is general information, not legal advice. Confirm your position with the regulator source or a qualified adviser before acting.