IAPP ANZ Summit 2025: Privacy | AI governance | Cybersecurity law

SYDNEY

2-5 December

Back to conference agenda

Personal Data in Plain Sight: Consent, Individuation and Effective Data Opt-outs

Wednesday, 3 Dec.

13:30 - 14:30 AEDT

Grand Ballroom, Level 2

Intermediate level

BREAKOUT SESSIONPRIVACYENFORCEMENTPROGRAM MANAGEMENT
Download the presentation slides

Chris Brinkworth, Managing Partner, Civic Data 

Natalie Le, Director, Investigations, Regulatory Action Division, Office of the Australian Information Commissioner

Tim de Sousa, AIGP, CIPP/E, CIPM, FIP, Managing Director, Technology, Privacy, Information Governance and Tech Ethics, FTI Consulting

Sarah Waladan, Head of Regulatory and Advocacy, ADMA

Discover how you can align digital platforms, marketing teams, publishers and marketing agencies with Australian privacy lawn in an ecosystem where major advertising and media holding companies acquire data assets and platforms. Meanwhile digital platform giants face international legal scrutiny for deploying the very same methodologies and technologies currently in use in Australia.

In ANZ, entities invest billions in marketing and advertising technology, often guided by the same providers who also own key data platforms — thereby expanding data collection. Many vendors, however, appear to also be ‘making hay’ until Tranche 2 clarifies technical definitions, overlooking that Tranche 1 already allows the OAIC to demand technical logs, halt non-compliant tracking, and issue penalties.

In this learning forum, the OAIC, ADMA and technical specialists will provide practical discussions and strategies to distinguish operational methods that ensure compliant data use while preserving privacy and business continuity, especially as AI-driven identifiers, targeting and measurement tools accelerate.

What you will learn:

  • How to evaluate privacy and consent measures that genuinely align with Australian enforcement realities—particularly under Tranche 1 powers and impending Tranche 2 reforms when it comes to digital data collection and usage.
  • Concrete methodologies for integrating meaningful consent into marketing tech, mitigating individuated data and building robust opt-out processes that meet requirements such as APP 2 and 7.
  • Guidance on balancing revenue-generating data uses with the OAIC’s heightened scrutiny.