Are small businesses covered by Australia's Privacy Act?

Many are not. The Privacy Act generally applies to organisations with at least 3 million Australian dollars in annual turnover, plus certain others, so a number of small businesses are currently exempt.

What are the maximum penalties in Australia?

After reforms following major breaches, penalties for serious or repeated breaches rose to up to 50 million Australian dollars or 30 percent of adjusted turnover, whichever is higher.

Asia-Pasifik

Persetujuan cookie di Australia

Persetujuan dan hukum privasi di Australia

Australia's Privacy Act 1988 is built around 13 Australian Privacy Principles and enforced by the OAIC. It applies to organisations with at least 3 million Australian dollars in turnover plus certain others, so many small businesses are exempt, a notable difference from the GDPR. Consent is required mainly for sensitive information, while much processing relies on notice and reasonable expectation. After major breaches, penalties were sharply increased to up to 50 million Australian dollars or 30 percent of adjusted turnover. A multi-stage reform is underway to modernise the law, including a fair and reasonable test and stronger individual rights. Cookies that identify users are personal information.

Otoritas

Office of the Australian Information Commissioner (OAIC)

Status

Privacy Act 1988 with the Australian Privacy Principles, under active reform

Undang-undang utama

Privacy Act

Bahasa

English

Siapa yang wajib mematuhi

The Privacy Act applies to Australian Government agencies and many private-sector organizations that handle personal information.

Sanksi

Up to 50 million Australian dollars or 30 percent of adjusted turnover for serious breaches

Kewajiban utama

Open and transparent privacy management
Privacy policies
Collection notices
Purpose limitation
Data minimization
Sensitive information
Consent where required
Direct marketing
Third-party disclosures
Overseas disclosures
Data security
Data quality
Access and correction
Eligible data breach response
Privacy complaints
Data retention and destruction
Automated decision-making transparency
Privacy governance and accountability

Panduan lokal

Apply the 13 Australian Privacy Principles
Obtain consent mainly for sensitive information
Check whether the small business exemption applies
Track the ongoing Privacy Act reform

Bagaimana ConsentX membantu

Consent Management: Configure consent experiences for processing activities where consent is required.
Collection Notice: Use configurable consent interfaces to provide relevant information about website data collection and processing.
Direct-Marketing Preferences: Maintain user choices and opt-out preferences relevant to marketing activities.
DSAR Workflow: Support workflows for access, correction, deletion, and other privacy requests where applicable.

Mulai gratis

yoursite.com

Australia

Kami menghargai privasi Anda

Kami meminta persetujuan Anda sebelum cookie non-esensial apa pun, sesuai aturan yang berlaku di wilayah Anda.

Izinkan semuaTolak yang non-esensialKelola preferensi

Persetujuan tercatat

sha256 · chain ok

Halaman ini diterjemahkan mesin dan mungkin mengandung kesalahan. Tinjau detail hukumnya bersama penasihat hukum lokal yang kompeten sebelum mengandalkannya.

Siapkan Australia dengan ConsentX

Banner sesuai wilayah, pemblokiran skrip lebih awal, DSAR, dan bukti antimanipulasi.

Mulai gratis Pesan demo

Cara mematuhi Australia dengan ConsentX

1
Pindai situs Anda
Jalankan pemindaian gratis untuk menemukan setiap cookie dan pelacak di situs Anda, sehingga Anda tahu persis apa yang memerlukan persetujuan menurut Australia.
2
Tampilkan banner persetujuan sesuai wilayah
Tambahkan banner ConsentX. Banner mendeteksi wilayah setiap pengunjung dan otomatis menampilkan alur persetujuan yang diwajibkan Australia.
3
Blokir pelacak sampai ada persetujuan
Biarkan cookie dan pelacak non-esensial tetap diblokir sampai pengunjung menyetujui, sehingga tidak ada yang berjalan sebelum persetujuan.
4
Rekam bukti antimanipulasi
Setiap pilihan disimpan sebagai tanda terima persetujuan antimanipulasi yang dapat Anda tunjukkan dalam audit Australia.
5
Tangani permintaan data tepat waktu
Gunakan alur DSAR bawaan dengan pengatur waktu SLA untuk menjawab permintaan akses, penghapusan, dan penolakan dalam tenggat hukum.