Top operational impacts of reforms to Australia's Privacy Act


Contributors:
Aly Apacible-Bernardo
CIPM
Privacy and Data Policy Associate
Meta
Australia's Privacy Act has senior status among national privacy laws. Enacted in 1988, the law has seen many amendments through the years. While there were talks of fundamentally updating the law in past years, 2023 saw these talks turn into action.
The Privacy Act Review Report of 2023
In February 2023, the Privacy Act Review Report was released by the Attorney-General's department. This report proposed 116 recommendations that emerged from input collected from stakeholders since 2020. Key among these was an acknowledgment that Australia's digital economy led to innovation and increased productivity but also to new risks from data breaches and privacy harms.
In September 2023, the government either agreed or agreed in principle with many of the reforms proposed in the report. However, it required further consultation and impact analysis before legislating some proposals.
Privacy and Other Legislation Amendment Bill 2024
On 12 Sept. 2024, the government introduced the first tranche of reforms to the Australian Federal Parliament in the form of the Privacy and Other Legislation Amendment Bill 2024. If passed, the bill would implement 23 of the report's 25 legislative proposals that were agreed to by the government, noting other agreed-upon proposals would be actioned by the development of guidance.
Top operational impacts of the first tranche of reforms
The proposed changes included in the first tranche of reform reflect the government's current priorities, such as ensuring Australia has a powerful privacy regulator in the wake of major data breaches from 2022 and 2023, children's online safety, doxxing and the impact of artificial intelligence on the lives of Australians.
This first tranche of reforms includes numerous enhancements to the current law that businesses and individuals should note.
Multitiered civil penalty system and infringement notice powers
Contributors:
Aly Apacible-Bernardo
CIPM
Privacy and Data Policy Associate
Meta