← VCE Software Development U3O2

APP 3: collecting only what is reasonably necessary

Australian Privacy Principle 3: only collect personal information that is reasonably necessary for your functions, and collect it lawfully and fairly. Take extra care with sensitive information.

Part of: VCE Software Development - U3O2 - Analysis and Design — Module 60, VCE Data Analytics - U3O2 - Analysis and Design — Module 91, VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 97, 9-10 Digital Technologies: Data privacy and the Australian Privacy Principles — Module 9, ACARA Digital Technologies Years 7–8 — Digital Footprints and Data Minimisation — Module 31, ACARA Digital Technologies Years 9–10 — Privacy Principles and Digital Footprints — Module 18, QCE Digital Solutions Unit 4 — Digital Methods for Exchanging Data — Module 69, QCE Digital Solutions Unit 4 — Complex Digital Data Exchange Problems and Solution Requirements — Module 41, WA Computer Science ATAR Year 11 — Data Management — Module 95, WA Computer Science ATAR Year 11 — Cyber Security — Module 153

Understanding APP 3: collecting only what is reasonably necessary in VCE Software Development U3O2

What it does: Collecting only the necessary fields, and leaving out sensitive information that is not needed, follows APP 3. Name and ID are needed to record loans. Religion and family income are not needed to borrow books, so APP 3 says not to collect them. APP 3 is about necessity. 'It might be handy later' is a nice to have, not reasonably necessary. If the club really needs to contact members, the email is linked to a real function. That makes it reasonably necessary. Lawful and fair means no deception, pressure or hidden collection. An open form is fair. Secret tracking is not.

Common mistakes: APP 3 says to collect only information that is reasonably necessary for your purpose. The test should be is_necessary(field, purpose), not whether the data is interesting to the organisation. APP 3 requires collection to be lawful and fair. Collecting data secretly is unfair, so the collection must be done openly: openly ← true.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add APP 3: collecting only what is reasonably necessary to a class →

This module's key terms are also in a printable crossword (Modules 52–71) and word search (Modules 52–85).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
A school library app lets students borrow books. Which data is reasonably necessary under APP 3?
Student name and student IDStudent's religion and family income
Matches
signup_form: name, email, birthday, home address, parents' jobs // for a quiz app
↓
The quiz app collects data it does not need, like home address and parents' jobs. These are nice to have, not reasonably necessary.
Applying
Meanings
Term
APP 3
Meaning
Australian Privacy Principle 3: only collect personal information that is reasonably necessary for your functions, and collect it lawfully and fairly. Take extra care with sensitive information.
Practice
FOR EACH field IN signup_form
Testing
Gaps
APP : collect only necessary information
Check Answer
Spots
1purpose ← "borrow books"
2if is_interesting(field)

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Butterfly' badge — Branch Hopper, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. A school library app lets students borrow books. Which data is reasonably necessary under APP 3?
A. Student name and student ID ✓
B. Student's religion and family income
Name and ID are needed to record loans. Religion and family income are not needed to borrow books, so APP 3 says not to collect them.
2. APP 3 says an organisation may collect personal information that is...
A. possibly useful one day
B. reasonably necessary for its functions ✓
APP 3 is about necessity. 'It might be handy later' is a nice to have, not reasonably necessary.
3. A gaming club sign-up form asks for your email so it can send event details. Is the email necessary or nice to have?
A. Necessary for sending event details ✓
B. Nice to have, so it should not be asked
If the club really needs to contact members, the email is linked to a real function. That makes it reasonably necessary.
4. A shoe shop asks every online customer for their health history 'just in case'. What is the problem?
A. It is sensitive information that is not necessary for selling shoes ✓
B. Nothing, because customers can just skip the question
Health information is sensitive information and needs extra care. A shoe shop has no reasonable need for it, so collecting it breaks APP 3.
5. Which method of collecting personal information meets the 'lawful and fair' part of APP 3?
A. Secretly tracking users without telling them
B. Asking users openly through a clear form ✓
Lawful and fair means no deception, pressure or hidden collection. An open form is fair. Secret tracking is not.

Match the Pairs

APP 3 → The principle that says an organisation may only collect personal information that is reasonably necessary for its functions
reasonably necessary → The test for whether a piece of data is really needed for the organisation's work, not just nice to have
A school library app only needs a student's name and ID to lend books, so it does not ask for their religion → collect(name, studentID) // no religion
Sensitive information such as health details needs extra care, so collect it only when it is truly needed and with consent → if needed AND consent: collect(health)
signup_form: name, email, birthday, home address, parents' jobs // for a quiz app → The quiz app collects data it does not need, like home address and parents' jobs. These are nice to have, not reasonably necessary.
collect(location) secretly, without telling users → The data is collected in a sneaky and unfair way. APP 3 says collection must be lawful and fair, not hidden or deceptive.

Key Term

APP 3
Australian Privacy Principle 3: only collect personal information that is reasonably necessary for your functions, and collect it lawfully and fairly. Take extra care with sensitive information.

Fill in the Blanks

1. APP 3: collect only necessary information
Hint: Type the number of the Australian Privacy Principle about collecting personal information.
2. IF field is necessary THEN collect it
Hint: Type the word for data that is reasonably needed for the organisation's functions.
3. method ← lawful AND fair
Hint: Type the word that must go with lawful to describe how data is collected.
4. IF data is sensitive THEN get consent
Hint: Type what the person usually has to give before sensitive information is collected.
5. IF needed = FALSE THEN do not collect
Hint: Type the Boolean value that means the data is only nice to have, not needed.

Spot the Error

Question 1
A purpose ← "borrow books"
B if is_interesting(field)
C collect(field)
Line B — APP 3 says to collect only information that is reasonably necessary for your purpose. The test should be is_necessary(field, purpose), not whether the data is interesting to the organisation.
Question 2
A method ← "sign-up form"
B openly ← false
C collect(email, method, openly)
Line B — APP 3 requires collection to be lawful and fair. Collecting data secretly is unfair, so the collection must be done openly: openly ← true.
Question 3
A for field in all_fields:
B ask(field)
C save(answers)
Line A — The loop should only go through the fields that are reasonably necessary. Looping through all_fields would also collect nice-to-have data. It should be needed_fields.
Question 4
A for field in form_fields:
B if is_necessary(field):
C ignore(field)
D else:
E skip(field)
Line C — If a field is necessary, the program should collect it. Ignoring it means the necessary data is never collected, so the line should be collect(field).
Question 5
A data ← "health condition"
B sensitive ← true
C if not sensitive: extra_care()
Line C — APP 3 asks for extra care with sensitive information. The extra care step should run when sensitive is true, so the condition should be if sensitive, not if not sensitive.

Student with a class code? Join your class →