---
title: "Use or disclosure of personal information under APP 6"
url: "https://ailawframework.com/precedents/privacy-data-protection-and-cyber/app-6-secondary-use"
type: "precedent"
site: "AI Law Framework"
id: "a25-app-6-secondary-use"
area_id: "A25"
kind: "checklist"
ai_level: "yellow"
version: 1
task_ids: ["A25-T1-R1"]
law_stated_as_at: "2026-10-22"
---

# Use or disclosure of personal information under APP 6

> Checklist of the APP 6 primary-purpose rule and the secondary-purpose exceptions set out in the OAIC chapter 6 webpage.

Canonical page: https://ailawframework.com/precedents/privacy-data-protection-and-cyber/app-6-secondary-use  
Law stated as at: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

- Kind: Checklist. Steps or checks to work through and tick off.
- Practice area: [Privacy, Data Protection & Cyber](https://ailawframework.com/precedents/privacy-data-protection-and-cyber.md)
- Jurisdictions: Australia, Commonwealth
- AI level: Yellow. You and the tool draft together, with you directing. You check every statement you rely on.
- Law stated as at: 2026-10-22
- Status: Maintained. Checked on 2026-10-22 against the authority it cites, for Australia and Commonwealth.

## When to use it

Use when an APP entity proposes to use or disclose personal information it holds for a purpose that may not be the purpose for which it was collected.

## Used for these tasks

- [Build a privacy-law gap table against the principles that apply](https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-privacy-law-gap-table-against-the-principles-that-apply.md)

## How AI may be used

AI may record the collection purpose and the proposed purpose from the file and name the exception the party asks about, and the lawyer decides whether APP 6 allows the use or disclosure.

**AI may:**

- Enter the purpose stated in the collection notice and the purpose now proposed
- Note whether the information is described on the file as sensitive information
- Record any consent, law or order the party points to, including its date

**AI must not:**

- Must not decide that a secondary purpose is related, or directly related
- Must not decide that consent is valid
- Must not draft a consent, a use notice, or a disclosure

**The lawyer checks:**

- The primary purpose is identified from the collection, not from the later use
- If a secondary purpose is relied on, the exception in paragraph 6.2 that is relied on is made out
- Direct marketing and government related identifiers are checked against APP 7 and APP 9, which this chapter says APP 6 does not cover
- A written note is made if APP 6.2(e) is used, as paragraph 6.65 requires

## Authorities

- [OAIC, APP Guidelines, Chapter 6: APP 6 Use or disclosure of personal information, webpage read 22 October 2026](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-6-app-6-use-or-disclosure-of-personal-information)

## Full text and drafting notes

The full text and the drafting notes are not part of this public page. Signed-in firm accounts can read them at https://ailawframework.com/precedents/privacy-data-protection-and-cyber/app-6-secondary-use and through the signed-in MCP connector https://ailawframework.com/mcp/firm.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*