IAPP ANZ Summit 2025: Privacy | AI governance | Cybersecurity law
SYDNEY
2-5 December
Personal Data in Plain Sight: Consent, Individuation and Effective Data Opt-outs
Wednesday, 3 Dec.
13:30 - 14:30 AEDT
Grand Ballroom, Level 2
Intermediate level
Chris Brinkworth, Managing Partner, Civic Data
Natalie Le, Director, Investigations, Regulatory Action Division, Office of the Australian Information Commissioner
Tim de Sousa, AIGP, CIPP/E, CIPM, FIP, Managing Director, Technology, Privacy, Information Governance and Tech Ethics, FTI Consulting
Sarah Waladan, Head of Regulatory and Advocacy, ADMA
Discover how you can align digital platforms, marketing teams, publishers and marketing agencies with Australian privacy lawn in an ecosystem where major advertising and media holding companies acquire data assets and platforms. Meanwhile digital platform giants face international legal scrutiny for deploying the very same methodologies and technologies currently in use in Australia.
In ANZ, entities invest billions in marketing and advertising technology, often guided by the same providers who also own key data platforms — thereby expanding data collection. Many vendors, however, appear to also be ‘making hay’ until Tranche 2 clarifies technical definitions, overlooking that Tranche 1 already allows the OAIC to demand technical logs, halt non-compliant tracking, and issue penalties.
In this learning forum, the OAIC, ADMA and technical specialists will provide practical discussions and strategies to distinguish operational methods that ensure compliant data use while preserving privacy and business continuity, especially as AI-driven identifiers, targeting and measurement tools accelerate.
What you will learn:
- How to evaluate privacy and consent measures that genuinely align with Australian enforcement realities—particularly under Tranche 1 powers and impending Tranche 2 reforms when it comes to digital data collection and usage.
- Concrete methodologies for integrating meaningful consent into marketing tech, mitigating individuated data and building robust opt-out processes that meet requirements such as APP 2 and 7.
- Guidance on balancing revenue-generating data uses with the OAIC’s heightened scrutiny.