Privacy Act
Privacy Act 1988 (with 2024 reforms)
Australia
In force since 1988, reformed from 2024
Asia & Africa
Who must comply
Australian Government agencies and private-sector organizations with over AU$3 million annual turnover, plus some smaller businesses, that handle personal information of people in Australia.
Penalties
Civil penalties for serious or repeated interferences with privacy up to the greater of AU$50 million, three times the benefit, or 30% of adjusted turnover.
Key obligations
- Comply with the Australian Privacy Principles
- Obtain consent for collecting sensitive information
- Provide a clear privacy policy and collection notice
- Give individuals access to and correction of their data
- Notify eligible data breaches to the regulator and affected individuals
How ConsentX helps
Consent capture for sensitive information
Direct-marketing opt-out controls
Collection notice in the banner
Access and correction request workflow
Region rule engine tuned for Australia
Get Privacy Act ready with ConsentX
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.
How to comply with Privacy Act using ConsentX
- 1
Scan your website
Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under Privacy Act.
- 2
Show a geo-aware consent banner
Add the ConsentX banner. It detects each visitor region and shows the consent experience that Privacy Act requires, automatically.
- 3
Block trackers until consent
Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.
- 4
Record tamper-evident proof
Every choice is stored as a tamper-evident consent receipt you can produce in a Privacy Act audit.
- 5
Handle data requests on time
Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.
Frequently asked questions
Does Australia require consent for cookies?+
There is no blanket cookie consent rule, but consent is required for sensitive information and often underpins lawful direct marketing.
Who enforces Australia's Privacy Act?+
The Office of the Australian Information Commissioner, the OAIC, regulates and enforces the Act.