On 30 September 2026, the OAIC published its guidance on the new transparency obligations for the use of AI and automated decision-making.

An automated system operated by a well-resourced organisation went somewhere it wasn't permitted to go, took non-public data that it wasn’t permitted to take, and nobody told the data owner for nearly three months. So now what do we do?

This week, the NSW Parliament passed the Residential Tenancies Amendment (Protection of Personal Information) Bill 2025 - the APPs will now apply to agents and landlords.

If the Privacy Amendment (Personal Data Protection) Bill 2026 exposure draft is passed as is, it will require organisations to completely reconsider how they use personal information. The long standing test for use and disclosure in Australian Privacy Principle (APP) 6 - which restricted the use or-disclosure of PI to the primary purpose of collection or a permitted secondary purpose, will be repealed and replaced by the 'fair and reasonable' test in the new APP 3. This morni

Australian businesses (or at least the privacy community) are all a flutter about Tranche 2 of the reforms to the Privacy Act 1988 (Cth), so I will be chewing over the exposure draft of the Privacy Amendment (Personal Data Protection) Bill 2026 for the next few days. For me, one of the most important elements of the Bill is the ‘fair and reasonable’ test, which I consider the cornerstone of the current reforms. The current requirement under Australian Privacy Principle 3 is t