What we're monitoring.
Privacy Act compliance for Australian businesses — what the law requires and how to meet it
Understand which Australian businesses must comply with the Privacy Act 1988, what the Australian Privacy Principles require, and the practical steps to build a compliant framework.
Read noteWhat Privacy Act compliance means for your Australian business
Learn how to comply with the Privacy Act when you run a small business. We explain who it covers, the key principles, and how to handle a data breach.
Read notePrivacy enforcement reforms in Australia — what the 2022 and 2024 changes mean for your business
Australia's Privacy Act penalties and enforcement powers have been significantly strengthened. Here is what APP entities need to know about their obligations.
Read notePrivacy and confidentiality — what's the difference for an Australian business
The difference between privacy and confidentiality for Australian businesses and why conflating them is a compliance risk.
Read noteWhat the Spam Act 2003 actually requires from your business
The Spam Act 2003 sets three non-negotiable rules for every marketing email or SMS your business sends. Here is what consent, identification, and unsubscribe really mean.
Read noteHow Australia's spam and direct marketing laws work for business operators
Understand how the Spam Act 2003, Privacy Act, Do Not Call Register and Australian Consumer Law apply to your business marketing campaigns.
Read noteCollecting online information without a privacy policy — what to do now
Running a website that collects personal information without a privacy policy? Here is what Australian law requires, and the steps to get your business compliant.
Read noteWhat to do when an EU customer asks your Australian business to comply with the GDPR
An EU customer has asked your Australian business to comply with the GDPR. Here is what that means, whether it applies to you, and what to do next.
Read noteWhen your vendor is breached: what Australian businesses must do next
When a third-party vendor suffers a data breach, your business may still hold legal responsibility. Here is what Australian businesses must do under the NDB scheme.
Read noteWorkplace surveillance in Australia — what to do when you've skipped the legal steps
Installed cameras or monitoring tools without the right notice? Here is how Australian businesses fix the gap before a complaint lands on their desk.
Read noteHow the Notifiable Data Breaches scheme works for small businesses
Find out whether the Notifiable Data Breaches scheme applies to your small business and how to assess, contain and report an eligible data breach to the OAIC.
Read noteOpt-out notices for direct marketing in Australia
Australian businesses must include a compliant opt-out notice in every marketing email, SMS and sales call. Here is what the law requires and how to set it up.
Read note