Privacy Act Reform — information controllers regime (proposed Tranche 2)
Tranche 2 reforms in scoping — information controllers + processors regime.
highupcomingongoing
Who must comply
TBC.
What triggers it
Pending.
When due
TBC.
Evidence required
Pending.
Max penalty
—
Summary
Tranche 2 Privacy Act reforms under government consideration — controller/processor regime modelled on GDPR. Currently exposure-draft pending; in-force date TBC.
Enforced by
Source legislation
Topics
privacydata-governance
Related obligations
- CWLTHData Availability and Transparency Act 2022Commonwealth data sharing regime — accredited users + entities.
- CWLTHNotifiable Data Breach (NDB) schemeUnder the NDB scheme, APP entities must notify the OAIC and affected individuals of an eligible data breach likely to cause serious harm — assessed within 30 days.
- CWLTHAutomated Decision-Making transparency under Privacy Act (phased)From a phased commencement, APP entities using ADM must disclose in Privacy Policy.
- CWLTHAPP 3 collection of sensitive informationAPP 3 bars collecting sensitive information — health, race, religion, sexual orientation and more — without consent. What counts as sensitive, the exceptions and penalties.
- CWLTHPrepare for the proposed removal of the small business exemptionRemoving the Privacy Act small business exemption (<$3M turnover) is proposed for a future reform tranche — agreed in principle, not yet law.
- CWLTHPublish a Privacy Policy compliant with APP 1Every APP entity needs a clearly-expressed Privacy Policy covering APP 1.4 requirements.
Frequently asked questions
- Who must comply with Privacy Act Reform — information controllers regime (proposed Tranche 2)?
- TBC.
- What triggers Privacy Act Reform — information controllers regime (proposed Tranche 2)?
- Pending.
- When is Privacy Act Reform — information controllers regime (proposed Tranche 2) due?
- TBC.
- What evidence is required for Privacy Act Reform — information controllers regime (proposed Tranche 2)?
- Pending.
Source: https://www.ag.gov.au/rights-and-protections/privacy. Rules Mate is not a law firm. Always verify against the live regulator source before acting.