Children's Online Privacy Code 2026
OAIC developing mandatory children's online privacy code (in force December 2026).
highupcomingongoing
Who must comply
Online services likely to be accessed by children.
What triggers it
Online service availability to children.
When due
From 10 December 2026.
Evidence required
Age verification + default privacy + parental consent records.
Max penalty
—
Effective from
10 December 2026
Summary
Privacy and Other Legislation Amendment Act 2024 mandates OAIC develop a binding Code addressing children's privacy online. Public consultation 2025; in force from 10 December 2026.
Enforced by
Source legislation
Topics
privacychild-safetyonline
Related obligations
- CWLTHNotifiable Data Breach (NDB) schemeUnder the NDB scheme, APP entities must notify the OAIC and affected individuals of an eligible data breach likely to cause serious harm — assessed within 30 days.
- CWLTHAutomated Decision-Making transparency under Privacy Act (phased)From a phased commencement, APP entities using ADM must disclose in Privacy Policy.
- CWLTHAPP 3 collection of sensitive informationAPP 3 bars collecting sensitive information — health, race, religion, sexual orientation and more — without consent. What counts as sensitive, the exceptions and penalties.
- CWLTHPrepare for the proposed removal of the small business exemptionRemoving the Privacy Act small business exemption (<$3M turnover) is proposed for a future reform tranche — agreed in principle, not yet law.
- CWLTHPrivacy Act Reform — information controllers regime (proposed Tranche 2)Tranche 2 reforms in scoping — information controllers + processors regime.
- CWLTHPublish a Privacy Policy compliant with APP 1Every APP entity needs a clearly-expressed Privacy Policy covering APP 1.4 requirements.
Frequently asked questions
- Who must comply with Children's Online Privacy Code 2026?
- Online services likely to be accessed by children.
- What triggers Children's Online Privacy Code 2026?
- Online service availability to children.
- When is Children's Online Privacy Code 2026 due?
- From 10 December 2026.
- What evidence is required for Children's Online Privacy Code 2026?
- Age verification + default privacy + parental consent records.
Source: https://oaic.gov.au/privacy/the-privacy-act/changes-to-the-privacy-act. Rules Mate is not a law firm. Always verify against the live regulator source before acting.