Regulations › Rest of world › Australia
Privacy Act (AU)
Privacy Act 1988 (Australia)
WhenIn effect since 1 January 1989
Who enforces itOffice of the Australian Information Commissioner
Who it applies toMost organizations with annual turnover above AU$3 million, and some smaller ones.
Tell the regulatorAssess suspected breaches within 30 days
DPO requiredNot required for organizations
RegistrationNo registration of organizations
Transfers abroadTake reasonable steps so overseas recipients comply with APPs
Request deadlineAgencies 30 days
Maximum fineBody corporate: greater of AUD 50 million, 3x the benefit, or 30% of adjusted turnover for ser…
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws