Cybersecurity Policy Report, Privacy Act Reform Package Released by Australian Government, (Aug 31, 2026)
By Tony Foley
The Australian government has released a consultation paper and draft legislation regarding proposed amendments to the country’s privacy law designed to modernize and strengthen privacy protections and tackle risks from emerging technologies.
The consultation page notes that the measures in the draft bill would better protect Australians while supporting innovation and providing greater certainty for regulated entities. The bill was developed in response to feedback received during extensive consultation over several years, including comments received through the Privacy Act review process and the 2024 reforms to the Privacy Act.
According to the government’s consultation paper, which may be downloaded from the consultation page along with the draft bill, the legislative package includes roughly 40 proposals, more than half of which are suggested provisions to strengthen privacy protections. The bill also includes proposals to clarify and simplify organizational obligations and add measures to improve the efficiency of Australia’s data protection authority, the Office of the Australian Information Commissioner.
Specific topics covered in the draft bill include the following:
Modernizing and clarifying core definitions under the Privacy Act;
Simplifying and strengthening requirements for the handling of personal information;
Strengthening and clarifying requirements for data security and minimization and responses to data breaches;
Introducing a right for individuals to request erasure of their personal information held by large digital platforms (with exceptions where compliance is technically impossible or infeasible);
Supporting research and innovation through simplified research exceptions and facilitating the handling of personal information for ethically approved human research; and
Reducing unnecessary and confusing obligations for personal information processors.
Stakeholders are invited to provide written submissions on the exposure draft bill, including comments on practical implementation issues. Submissions must be submitted by Sept. 18.
News: InternationalLegislation DataSecurity DataBreach DataPrivacy