Australia provides certain privacy and data security protections and requirements. Companies subject to the law should be familiar with all relevant privacy and data laws or regulations, including those listed below.
National Data Protection Authority - Other Government Agencies
Privacy Law and Regulations
National-Federal Laws and Regulations
Sectoral Privacy Laws and Regulations
Financial
Health
Telecommunications
Anti-Spam Laws and Regulations
The Spam Act 2003
Responsible Government Agency - Australian Communications and Media Authority (ACMA)
Do Not Call Register
Responsible Government Agency - Australian Communications and Media Authority (ACMA)
State-Provincial Data Protection Authority - Other Government Agencies
Australian Capital Territory
Justice and Community Safety Directorate
The Directorate has responsibility for government activities of justice administration, rights protection, business regulation and emergency services.
New South Wales
The Northern Territory
Office Of The Information Commissioner
The Office oversees the Freedom of Information and Privacy provisions of the Information Act and is responsible for the implementation of the Public Interest Disclosure Act. Its functions relate to public sector organizations, including local government. It does not cover Commonwealth organizations or the private sector.
Queensland
Office of the Information Commissioner
An independent body established under the Right to Information Act 2009 to promote access to government-held information; and protect people's personal information held by government under the Information Privacy Act 2009.
South Australia
Government of South Australia Attorney-General’s Department
Tasmania
The Office of the Ombudsman
The Personal Information and Protection Act 2004 applies to the public and local government sectors and the University of Tasmania. The Act is administered by the Department of Justice and complaints may be made to the Tasmanian Ombudsman.
Victoria
Office of the Health Complaints Commissioner
The Victorian Health Records Act 2001 (Health Records Act) covers the handling of all personal information held by health service providers in the State public sector and also seeks to govern acts or practices in the Victorian private health sector. The Health Records Act contains a set of principles adapted from the National Privacy Principles. The Office of the Health Services Commissioner provides more information.
Western Australia
State-Provincial Privacy Laws and Regulations
Australian Information Commissioner
Australian Capital Territory
The Health Records (Privacy and Access) Act 1997 (Health Records Act)
The Health Records Act covers health records held in the public sector in the ACT and also seeks to apply to acts or practices in the private sector not covered by the Privacy Act.
Information Privacy Act 2014 (ACT)
The Information Privacy Act 2014 (ACT) applies to Australian Capital Territory (ACT) public sector agencies.
New South Wales (NSW)
The Northern Territory
Queensland
The Information Privacy Act 2009 (Qld)
Applies to the public sector only
South Australia
SA Information Privacy Principles (IPPS) Instruction
Applies to the public sector
Victoria
Health Records Act 2001 (Vic)
(amended through December 2005)
Surveillance Devices (Workplace Privacy) Act 2006
New Part 2A inserted in Surveillance Devices Act 1999.
Western Australia
Freedom of Information Act 1992 (WA)
The Office of the Information Commissioner (WA) administers the Freedom of Information Act 1992 (WA), as amended through 2019, which includes some privacy principles related to the disclosure and amendment of personal information held by Western Australian State and local government agencies.
