Privacy Amendment changes proposed for further personal data protection
The Australian Government released Exposure Draft of the Privacy Amendment (Personal Data Protection) Bill 2026 (the Bill), which proposes roughly 40 measures designed to strengthen privacy protections for individuals while providing greater regulatory certainty for businesses.
Key changes proposed in include:
- a new "fair and reasonable" framework governing the collection, use and disclosure of personal information
- updated privacy notice requirements
- changes to direct marketing rules
- strengthened data breach notification regime, including a proposed 72-hour reporting requirement to the OAIC
- new data security and data minimisation obligations
- a proposed right of erasure for large digital platforms, and
- the introduction of a controller-processor framework, aligning Australia's approach more closely with overseas privacy regimes.
The Government is also seeking feedback on measures to improve the Office of the Australian Information Commissioner’s (OIAC) administration and enforcement, and to address privacy risks arising from emerging technologies such as wearable surveillance devices and connected vehicles.
Disclaimer: This does not purport to be comprehensive or to render legal advice. You should not act based on any information contained in this publication without first obtaining specific professional advice. Consult your legal advisor to determine if this applies to you.