Microsoft proposed rewriting the OECD's "Collection Limitation Principle," from:
"There should be limits to the collection of personal data and any such data should be obtained by lawful and fair means and, where appropriate, with the knowledge or consent of the data subject."
"Data should be obtained by lawful and fair means and in a transparent manner. Data should not be collected in a manner likely to cause unjustified harm to the individual unless required by law. “Harm” may include more than physical injury."
The OAIC is concerned that Microsoft's version would allow considerably broader re-use of data than that allowed by the original OECD version and indeed by Australia’s Privacy Act 1988."