Per Information Privacy Principles (IPPs) 1-4 of Privacy Act 2020: collection principles. Requirements include (a) IPP 1 - Personal Information must be collected for a lawful purpose connected to the function or activity of the agency + must be necessary for that purpose + (b) IPP 2 - Source of Personal Information should be the individual concerned unless an exception applies + (c) IPP 3 - Collection of Information from Subject - take reasonable steps to ensure individual is aware of the fact + purpose + intended recipients + name + address of agency + consequences of not providing + right to access + correct + (d) IPP 4 - Manner of Collection must not be unlawful + unfair + unreasonably intrusive + (e) document collection sources + purposes + (f) integrate with privacy policy.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.