Cybersecurity Policy Report, Updated Privacy Law Enacted in Australia, (Dec 2, 2024)
Australian lawmakers have passed the Privacy and Other Legislation Amendment Bill 2024, which updates the country’s 1988 Privacy Act to offer stronger privacy protections and to prohibit the practice of doxxing, or the malicious release of personal data. The Office of the Australian Information Commissioner (OAIC) announced the legislation’s passing and provided a summary of its important measures.
The legislation creates a statutory tort for serious invasions of privacy and gives individuals affected by privacy harms a way to seek redress in court, the OAIC explained. It expands the OAIC’s enforcement and investigation powers by creating new tiers of civil penalties, as well as the ability to issue infringement notices.
The legislation also directs OAIC to develop a children’s online privacy code, covering social media platforms and any online services likely to be accessed by children, the office said.
To facilitate cross-border data transfers, the legislation creates a new mechanism to prescribe a “white list” of countries and create binding agreements incorporating adequate privacy protections, it noted.
Finally, the legislation requires that privacy policies contain information about automated decisions that significantly affect individuals’ rights or interests, including the kinds of decisions and personal information used.
“These powers and functions come at a critical time, as privacy harms increase and the Australian community demands more power over their personal information,” Australian Privacy Commissioner Carly Kind said. “The reforms are an important first step. More needs to be done of course, and we appreciate the government’s commitment to further action.”
News: InternationalLegislation DataPrivacy