Summary: Many Australian businesses must follow the Australian Privacy Principles. Here are the practical website implications.
The Privacy Act and the Australian Privacy Principles govern how many organisations handle personal information, and reforms continue to strengthen expectations. This is general guidance, not legal advice.
Who is covered
Many businesses above a revenue threshold are covered, along with some smaller businesses such as health service providers. Check whether it applies to you.
Website essentials
- A clear, accessible privacy policy
- Collection notices on forms
- Secure handling and storage of data
- A process for access and correction requests
Tracking and analytics
Explain your use of cookies and analytics, and review advertising pixels carefully.
Data breaches
Covered organisations must notify eligible data breaches. Have a response plan.
FAQs
Do we need a cookie banner in Australia?
Requirements differ from Europe, but transparency is still expected.
Is cloud hosting overseas allowed?
Yes, with appropriate safeguards and disclosure.
Who regulates privacy?
The Office of the Australian Information Commissioner (OAIC).
