Following a complaint filed against major retailers for their use of facial recognition by Australian consumer advocacy group CHOICE, there has been confusion about data collection rules for personal information. Salinger Privacy Director and Principal Anna Johnston, CIPP/E, CIPM, FIP, wrote an eight-step guide to show how businesses and organizations can legally collect personal information under Australia’s Privacy Act 1988.