Are small businesses covered by Australia's Privacy Act?

Many are not. The Privacy Act generally applies to organisations with at least 3 million Australian dollars in annual turnover, plus certain others, so a number of small businesses are currently exempt.

What are the maximum penalties in Australia?

After reforms following major breaches, penalties for serious or repeated breaches rose to up to 50 million Australian dollars or 30 percent of adjusted turnover, whichever is higher.

Asia-Pacifico

Consenso ai cookie in Australia

Consenso e privacy in Australia

Australia's Privacy Act 1988 is built around 13 Australian Privacy Principles and enforced by the OAIC. It applies to organisations with at least 3 million Australian dollars in turnover plus certain others, so many small businesses are exempt, a notable difference from the GDPR. Consent is required mainly for sensitive information, while much processing relies on notice and reasonable expectation. After major breaches, penalties were sharply increased to up to 50 million Australian dollars or 30 percent of adjusted turnover. A multi-stage reform is underway to modernise the law, including a fair and reasonable test and stronger individual rights. Cookies that identify users are personal information.

Autorità

Office of the Australian Information Commissioner (OAIC)

Stato

Privacy Act 1988 with the Australian Privacy Principles, under active reform

Legge principale

Privacy Act

Lingue

English

Chi deve conformarsi

The Privacy Act applies to Australian Government agencies and many private-sector organizations that handle personal information.

Sanzioni

Up to 50 million Australian dollars or 30 percent of adjusted turnover for serious breaches

Obblighi principali

Open and transparent privacy management
Privacy policies
Collection notices
Purpose limitation
Data minimization
Sensitive information
Consent where required
Direct marketing
Third-party disclosures
Overseas disclosures
Data security
Data quality
Access and correction
Eligible data breach response
Privacy complaints
Data retention and destruction
Automated decision-making transparency
Privacy governance and accountability

Indicazioni locali

Apply the 13 Australian Privacy Principles
Obtain consent mainly for sensitive information
Check whether the small business exemption applies
Track the ongoing Privacy Act reform

Come ti aiuta ConsentX

Consent Management: Configure consent experiences for processing activities where consent is required.
Collection Notice: Use configurable consent interfaces to provide relevant information about website data collection and processing.
Direct-Marketing Preferences: Maintain user choices and opt-out preferences relevant to marketing activities.
DSAR Workflow: Support workflows for access, correction, deletion, and other privacy requests where applicable.

Inizia gratis

yoursite.com

Australia

Teniamo alla tua privacy

Ti chiediamo il consenso prima di qualsiasi cookie non essenziale, secondo le regole che si applicano nella tua regione.

Accetta tuttoRifiuta i non essenzialiGestisci preferenze

Consenso registrato

sha256 · chain ok

Questa pagina è stata tradotta automaticamente e può contenere errori. Fai verificare i dettagli legali a un legale locale qualificato prima di farvi affidamento.

Prepara Australia con ConsentX

Banner per regione, blocco preventivo degli script, DSAR e prove a prova di manomissione.

Inizia gratis Prenota una demo

Come conformarsi a Australia con ConsentX

1
Analizza il tuo sito
Esegui una scansione gratuita per trovare ogni cookie e tracker del tuo sito, così sai esattamente cosa richiede il consenso secondo Australia.
2
Mostra un banner adattato alla regione
Aggiungi il banner ConsentX. Rileva la regione di ogni visitatore e mostra automaticamente l esperienza di consenso richiesta da Australia.
3
Blocca i tracker fino al consenso
Mantieni bloccati i cookie e i tracker non essenziali finché la persona non acconsente, così nulla si attiva prima del consenso.
4
Registra prove a prova di manomissione
Ogni scelta viene conservata come ricevuta di consenso a prova di manomissione, da esibire in un audit Australia.
5
Gestisci le richieste nei tempi previsti
Usa il flusso DSAR integrato con timer SLA per rispondere alle richieste di accesso, cancellazione e opposizione entro il termine di legge.