Guidance on the 10 December 2026 Privacy Act changes: what's new, who's covered, and what to do before the deadline.
The Australian Privacy Principles are the core rules of the Privacy Act. Here are all 13 in plain English, with what each means for a small business.
A collection notice tells people what you collect and why, at the moment they hand over their details. Here is what to include and where to put it.
Australia has no standalone cookie law, but analytics and ad tags can still collect personal information. Here is what website owners should check.
The Privacy Act expects covered businesses to destroy or de-identify personal information they no longer need. Here is how to decide what to keep.
Most small businesses use cloud tools hosted overseas. Here is what Australian Privacy Principle 8 asks of you before personal information crosses a border.
Under the Privacy Act, people can ask to see and correct the personal information you hold about them. Here is how a small business should handle it.
The EU GDPR can apply to businesses outside Europe. Here is when an Australian business may be caught, and what to check if you sell to Europe or the UK.
Marketing emails and texts in Australia are covered by the Spam Act and the Privacy Act. Here are the rules every small business should know.
What Australian businesses covered by the Privacy Act need to put in a privacy policy, and the gaps we see most often.
Under the Notifiable Data Breaches scheme, covered businesses must act fast when personal data is exposed. Here is what that means in practice.
The penalty framework for privacy breaches has widened. Here is what the figures mean for a small business.
Whether you need a privacy policy depends on the law and on your tools. Here is a plain answer for Australian business owners.
Staff are pasting customer details into AI tools. Here is what that means under Australian privacy law, and what to do about it.
A plain checklist for the 10 December 2026 changes: eight things to check before the deadline.
New ADM transparency obligations take effect 10 December 2026. Here's what's changing, who's affected, and what to do before the deadline.
Automated decision-making disclosure is the biggest change in the 2026 amendments. What it requires, common gaps, and how to fix them.
The small business exemption is narrowing, not gone. Here's the turnover test, the exceptions that apply regardless of size, and how to check.