Australia Privacy Act Compliance
Meet the Australian Privacy Principles
The Privacy Act 1988 is Australia's federal privacy law, built on 13 Australian Privacy Principles (APPs) and enforced by the OAIC. It applies to government agencies and organisations with turnover above A$3 million, with penalties for serious breaches reaching the greater of A$50 million, three times the benefit gained, or 30% of adjusted turnover.
What is the Australian Privacy Act?
and organisations with an annual turnover above $3 million (plus some
smaller entities) handle personal information, built around 13
Australian Privacy Principles (APPs) and enforced by the Office of the
Australian Information Commissioner (OAIC).
Who needs to comply with the Australian Privacy Act?
sector organisations meeting the turnover threshold, plus health
service providers and certain other entities regardless of size.
What are the key requirements
of the Australian Privacy Act?
Complying with all 13 Australian Privacy Principles, covering collection, use, disclosure, and security
Maintaining a clear, up-to-date privacy policy
Participating in the Notifiable Data Breaches (NDB) scheme for eligible breaches
Meeting cross-border disclosure obligations when sending data overseas
Preparing for expanded obligations under the ongoing Privacy Act reform process
What are the penalties for the Australian Privacy Act non-compliance?
Serious or repeated interferences with privacy can attract penalties of up to the greater of A$50 million, three times the benefit obtained, or 30% of adjusted turnover during the breach period.
KontaktA$50m
Fine per violationx3
The benefit obtained30%
Of adjusted turnover during the breachHow does GDPRLocal help with the Australian Privacy Act?
GDPRLocal supports you with everything the Australian Privacy Act requires: alignment with all 13 APPs, Notifiable Data Breach management, cross-border disclosure guidance, and ongoing support as Australia's privacy reform agenda continues to evolve.
Kostenloser Einstieg