Implement privacy policies aligned with the Privacy Act 1988, especially if handling personal customer data.