← VCE Cyber Security

Information Privacy Principle 2

Requires personal information to be used or shared only for the purpose it was originally collected for, unless consent or an exception applies.

Part of: VCE Applied Computing - U2O2 - Cyber Security — Module 72, VCE Software Development - U3O2 - Analysis and Design — Module 67, VCE Software Development - U4O2 - Cyber Security: secure software development practices — Module 107, VCE Data Analytics - U3O2 - Analysis and Design — Module 102, VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 106

Understanding Information Privacy Principle 2 in VCE Cyber Security

What it does: Exceptions are specific situations where a different use is still allowed without consent. Going beyond the original purpose is only allowed with consent or a valid exception. Sticking to the original purpose is the core requirement of Principle 2. Principle 2 ties information use back to the purpose it was originally collected for. A new use needs either consent or a recognised exception, not an automatic assumption.

Common mistakes: Line 1 says to use it for any purpose, but Principle 2 requires using information only for its original purpose. Line 2 says to share freely with no consent, but a new use usually requires consent unless an exception applies.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Information Privacy Principle 2 to a class →

This module's key terms are also in a printable crossword (Modules 61–74) and word search (Modules 41–74).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
Should personal information only be used for the purpose it was originally collected for?
YesNo
Matches
Sharing personal information for any purpose freely
↓
This breaks the principle - purpose and consent matter
Applying
Meanings
Term
Information Privacy Principle 2
Meaning
Requires personal information to be used or shared only for the purpose it was originally collected for, unless consent or an exception applies.
Practice
original_purpose = "issue permit"
Testing
Gaps
and .
Check Answer
Spots
1Use for any purpose
2Use for original purpose

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Octopus' badge — Multi-Tasker, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Should personal information only be used for the purpose it was originally collected for?
A. No
B. Yes ✓
Sticking to the original purpose is the core requirement of Principle 2.
2. Is consent usually needed to use information for a different purpose?
A. No
B. Yes ✓
Using information beyond its original purpose usually requires consent.
3. Do some exceptions allow information to be used a different way without consent?
A. Yes ✓
B. No
Certain exceptions exist that allow a different use even without direct consent.
4. Is it acceptable to share personal information for any purpose without limits?
A. No ✓
B. Yes
Sharing is limited to the original purpose unless consent or an exception applies.
5. Does using information beyond its original purpose break Principle 2?
A. Yes ✓
B. No
Going beyond the original purpose without consent or an exception breaks the principle.

Match the Pairs

Use information for its original purpose → Follows the requirement in Principle 2
Get consent before a new use → Allows information to be used a different way
Some exceptions allow a different use → Cases where consent isn't strictly required
Sharing information beyond its purpose breaks the principle → Requires consent or an exception first
Sharing personal information for any purpose freely → This breaks the principle - purpose and consent matter
Assuming a new use is fine without checking consent → This breaks the principle - consent or an exception is needed

Key Term

Information Privacy Principle 2
Requires personal information to be used or shared only for the purpose it was originally collected for, unless consent or an exception applies.

Fill in the Blanks

1. Principle 2 controls how information is used and shared.
Hint: Type the word for passing information on to someone else.
2. Information should match its original collection purpose.
Hint: Type the word for the original reason the information was collected.
3. A new use of the data usually needs consent.
Hint: Type the word for the permission needed to use data a new way.
4. Some exceptions allow a different use.
Hint: Type the word for the special cases where a different use is allowed.
5. Sharing beyond the purpose breaks the principle.
Hint: Type the word for going past what the information was originally collected for.

Spot the Error

Question 1
A Use for any purpose
B Use for original purpose
C Get consent for new use
Line A — Line 1 says to use it for any purpose, but Principle 2 requires using information only for its original purpose.
Question 2
A Use for original purpose
B Share freely, no consent
C Check for exceptions
Line B — Line 2 says to share freely with no consent, but a new use usually requires consent unless an exception applies.
Question 3
A Use for original purpose
B Get consent for new use
C Exceptions never apply
Line C — Line 3 says exceptions never apply, but the principle does allow some exceptions for a different use.
Question 4
A Original purpose only
B Consent for new use
C Some exceptions apply
D Any new use is fine
Line D — Line 4 says any new use is fine, but a new use needs consent or an exception, not automatic permission.
Question 5
A Use for original purpose
B Get consent for new use
C Exceptions can apply
D Follow Principle 2
E New use needs no consent
Line E — Line 5 says a new use needs no consent, but a new use usually requires consent.

Student with a class code? Join your class →