ANALYSISMEMBER

Top operational impacts of reforms to Australia's Privacy Act

Published
Subscribe to IAPP Newsletters

Contributors:

Aly Apacible-Bernardo

CIPM

Privacy and Data Policy Associate

Meta

Australia's Privacy Act has senior status among national privacy laws. Enacted in 1988, the law has seen many amendments through the years. While there were talks of fundamentally updating the law in past years, 2023 saw these talks turn into action.

The Privacy Act Review Report of 2023

In February 2023, the Privacy Act Review Report was released by the Attorney-General's department. This report proposed 116 recommendations that emerged from input collected from stakeholders since 2020. Key among these was an acknowledgment that Australia's digital economy led to innovation and increased productivity but also to new risks from data breaches and privacy harms.

In September 2023, the government either agreed or agreed in principle with many of the reforms proposed in the report. However, it required further consultation and impact analysis before legislating some proposals.

Privacy and Other Legislation Amendment Bill 2024

On 12 Sept. 2024, the government introduced the first tranche of reforms to the Australian Federal Parliament in the form of the Privacy and Other Legislation Amendment Bill 2024. If passed, the bill would implement 23 of the report's 25 legislative proposals that were agreed to by the government, noting other agreed-upon proposals would be actioned by the development of guidance.

Top operational impacts of the first tranche of reforms

The proposed changes included in the first tranche of reform reflect the government's current priorities, such as ensuring Australia has a powerful privacy regulator in the wake of major data breaches from 2022 and 2023, children's online safety, doxxing and the impact of artificial intelligence on the lives of Australians.

This first tranche of reforms includes numerous enhancements to the current law that businesses and individuals should note.

Multitiered civil penalty system and infringement notice powers

Contributors:

Aly Apacible-Bernardo

CIPM

Privacy and Data Policy Associate

Meta

MEMBER

Unlock this exclusive content and more

Join the IAPPAlready a member? Sign in

Membership opens up a world of resources

In-depth knowledge

From original research reports and daily news coverage to legislative trackers and infographics, we have the information you need to stay ahead of change.

A global network

Make valuable professional connections through more than 160 local IAPP KnowledgeNet chapters in 70 countries.

Access to the experts

Connect with top thinkers in privacy, AI governance and cybersecurity for fresh ideas and insights.

Learn what you get from membership