Privacy and Other Legislation Amendment Act 2024

Overview

The Privacy and Other Legislation Amendment Act 2024 (Cth) was enacted to address several gaps in existing privacy and criminal law frameworks. It amends the Privacy Act 1988 (Cth) to introduce new measures for emergency declarations, doxxing offences, and privacy breaches. Additionally, it introduces penalties for interference with privacy and establishes statutory torts for serious invasions of privacy. The Act also introduces amendments to the Data Availability and Transparency Act 2022 (Cth), Digital ID Act 2024 (Cth), and Identity Verification Services Act 2023 (Cth) to enhance privacy protections. The Parliament of Australia enacted this Act to ensure robust privacy protections and address emerging privacy threats.

Scope and Application

The Privacy and Other Legislation Amendment Act 2024 amends several key pieces of Australian legislation, including the Privacy Act 1988, Data Availability and Transparency Act 2022, Digital ID Act 2024, and Identity Verification Services Act 2023, among others. The Act applies to both Commonwealth entities and private sector organisations, focusing on the protection of personal information and the regulation of privacy-related activities. It introduces significant changes to privacy laws, including new obligations for entities handling personal information, enhanced penalties for privacy breaches, and the establishment of a statutory tort for serious invasions of privacy. The amendments also extend to criminal law, particularly addressing doxxing offences under the Criminal Code Act 1995. The Act's provisions are designed to strengthen privacy protections and ensure compliance with both domestic and international obligations.

Key Provisions

• The Privacy and Other Legislation Amendment Act 2024 makes several key amendments to existing legislation, primarily focusing on privacy protections, emergency declarations, and the handling of eligible data breaches. Under the Privacy Act 1988, the Act introduces changes to the Australian Privacy Principles (APP) by mandating the development of APP codes by the Office of the Australian Information Commissioner (OAIC) at the direction of the Minister, both for regular and urgent circumstances. These codes must be publicly consulted upon and registered with the OAIC. Additionally, the Act modifies emergency declarations to specify the types of personal information, entities, and permitted purposes related to emergencies or disasters, ensuring the privacy of individuals is protected during such events.
• For eligible data breaches, the Act empowers the Minister to declare such breaches, specifying entities, information types, and purposes for collection, use, or disclosure. These declarations allow for authorised collection, use, or disclosure of personal information to mitigate risks arising from breaches. The Act also amends the penalties for serious interference with privacy, introducing a new civil penalty provision for serious interference and setting a maximum penalty of 2,000 penalty units or imprisonment for one year, or both.
• In terms of obligations, entities must comply with the APP codes and declarations issued by the Minister, ensuring the appropriate handling of personal information. Failure to comply can result in significant penalties and legal consequences. Offences under the Act include unauthorised collection, use, or disclosure of personal information in the context of eligible data breaches, which carry penalties of up to 60 penalty units or imprisonment for one year, or both. The Act also introduces offences related to doxxing, with penalties ranging from imprisonment for six to seven years, depending on the circumstances and targeted groups.
• Overall, the Act seeks to strengthen privacy protections, provide clearer guidelines for handling personal information during emergencies, and impose stricter penalties for breaches and doxxing offences.

Legal classification tags

Area of Law

Privacy Law

Criminal Law

Instrument

Act

Concepts

Definitions & Interpretation

Commencement Provisions

Civil Penalty Provisions

Regulatory Standards

Enforcement Powers

Prohibited Conduct