E-commerce & online retail compliance in New South Wales

Notify the OAIC and affected individuals of eligible data breaches

Eligible data breaches must be notified to OAIC and affected individuals 'as soon as practicable'.

Avoid unfair contract terms in standard form consumer & small business contracts

From November 2023, unfair contract terms carry pecuniary penalties — up to $100M per term (from 28 March 2026).

Honour consumer guarantees under the Australian Consumer Law

Goods and services supplied to consumers come with automatic statutory guarantees that cannot be excluded.

Notify ACCC of a voluntary recall within 2 days

Suppliers must notify the ACCC within 2 days of initiating a voluntary consumer product recall.

Comply with the Spam Act 2003 (consent, identify, unsubscribe)

All commercial electronic messages must have consent, identify the sender, and offer a working unsubscribe.

Wash outbound marketing lists against the Do Not Call Register

Lists must be washed within 30 days of the call/SMS unless valid consent.

Publish a Privacy Policy compliant with APP 1

Every APP entity needs a clearly-expressed Privacy Policy covering APP 1.4 requirements.