On 21 December 2001 legislation came into force applying the Privacy Act to certain parts of the private sector. A series of national privacy principles (NPPs) sets legally binding standards within which organisations must operate.