The Swimming Pool and Spa Association of NSW & ACT (SPASA), promotes the adoption of world's best privacy practice by all holders of personal data, thereby promoting an increased level of trust in the community, especially between people and the Association. The Privacy and Personal Information Protection Act 1998, prohibits disclosures of personal information by officers which are not done in accordance with the performance of their official duties. These provisions are primarily directed against corrupt or irregular disclosure of personal information staff may have access to at work and not to inadvertent failure to follow policies and guidelines. In the Protected Disclosures Act 1994: the definition of personal information under the Privacy and Personal Information Protection Act excludes information contained in a protected disclosure. This means that a person cannot seek review of the use or disclosure of a protected disclosure or be prosecuted for unauthorised disclosure of protected disclosure information under the Privacy and Personal Information Protection Act. However, a Privacy Management Plan is still able to address strategies for the protection of personal information disclosed under the Protected Disclosures Act.