Australia’s Privacy Act reforms: fundamental changes proposed in new exposure draft

On 31 August 2026, the Attorney-General released exposure draft legislation for the second, and most substantive, tranche of reforms to Australia’s Privacy Act.

Digital regulation in Australia: how new regulations converge and intersect

We map out where Online Safety obligations meet Privacy Act reforms, and the timeline and convergence of Australia's digital regulatory landscape.

Digital duty of care: what the exposure draft means for your business

The Australian Government’s exposure draft proposes to introduce a proactive, systems-based digital duty of care for every person 'responsible for' an 'online service'.

Five decisions that will define Australia’s AI future

Prime Minister Albanese’s speech on 15 July 2026 marked a decisive shift in Australia’s approach to artificial intelligence, from voluntary guidance to mandatory national regulation.

Automated decision-making: preparing for the new transparency obligation

With transparency obligations set to commence on 10 December 2026 and broader reforms on the horizon, organisations captured by the Privacy Act and the Australian Privacy Principles need to understand where automation influences key decisions and ensure they are ready to comply.

OAIC's Children's Online Privacy exposure draft: from consultation to code

Proposed Privacy (Children's Online Privacy) Code 2026 would represent a significant shift in the Australian regulatory landscape for any organisation whose digital products and services involve the collection, use or disclosure of children’s personal information.

Social media use in Australia to be restricted for under 16s

Australia has introduced a world-first social media ban for under 16-year olds. Certain social media platforms are required to take reasonable steps to prevent Australian children under the age of 16 from having accounts on their platform.

The new statutory tort for serious invasions of privacy

The proposed statutory tort, part of the federal government’s Privacy Act reforms, brings with it new risks for businesses, who may be liable directly, or in certain circumstances vicariously liable through the conduct of their employees or agents.

Privacy Act reforms: work to be done, but more to come

The first tranche of the Privacy Act reforms included the introduction of a Children’s Online Privacy Code and a statutory tort for serious invasions of privacy, as well as the creation of new penalties for less serious infringements of the Privacy Act.