Not-For-Profit Donor Data & Privacy: Key Considerations from the Australian Perspective

Published at 04:34 on 08 Jun 2025

Fundraising is essential for the survival and impact of not-for-profit (NFP) organisations, but it must be done in a way that respects donor privacy, complies with laws and upholds public trust.

If you run a NFP organisation, it is crucial to understand the importance of strong privacy practices and the legal obligations that may apply under privacy laws.

The governing body of an NFP organisation – such as its board or management committee – is ultimately responsible for ensuring the organisation complies with all legal obligations related to the collection, storage and use of personal information. This includes understanding relevant privacy laws and implementing appropriate data management practices.

Beyond legal compliance, NFPs are also expected to meet broader community standards regarding the ethical handling of donor information. Failing to meet these expectations can undermine public confidence and damage an NFP’s reputation.

This guide outlines key compliance obligations and offers practical tips to help NFPs manage donor data responsibly and ethically. It covers: 

  • Risks with Managing Donor Data
  • Complying with Privacy Laws
  • Direct Marketing with Donor Data
  • Phone-Based Fundraising
  • Working with Third Parties
  • Buying, Renting or Selling Donor Lists
  • Data Retention and Deletion.

 

If you’re interested in getting your free copy of this guide, complete the below form to get the link to the materials and a copy by email.

NFP Donor Data eGuide Form

Name(Required)

We collect and handle all personal information in accordance with our Privacy Policy.

Siska is a data privacy, IT and corporate and commercial counsel with an extensive background working at the intersection of business strategy, technology, law and data across a range of industries.  She is also an Assistant Professor at Bond University’s School of Law. Prior to joining Privacy 108, Siska was the Global Head of Data Privacy Advisory & Engagement at global med-tech company.