Information Governance in the AI age
Australia’s second tranche of Privacy Act reform set out in the exposure draft Privacy Amendment (Personal Data Protection) Bill 2026, released on 31 August 2026, presents significant changes to private-sector privacy obligations. For organisations, the immediate concern is not simply new privacy notices: the proposals go to the way personal […]
New Zealand introduced the Online Safety (Minimum Age and Child Safety Risk Assessment) Bill on 24 August 2026, which would require designated high-risk platforms to take steps to prevent under-16s from holding accounts. Importantly, the Bill goes beyond a social-media age restriction: it also creates recurring child-safety risk assessment duties […]
Australia’s child-facing digital framework is becoming increasingly layered. Age-assurance requirements for app distribution services under eSafety’s Age-Restricted Material Codes take effect on 9 September 2026, including requirements directed at preventing Australian children from downloading or purchasing adult apps. The Children’s Online Privacy Code is being developed and must be registered […]
The Australian Government has released an Exposure Draft of the Privacy Amendment (Personal Data Protection) Bill 2026 and a detailed Consultation Paper for the second tranche of Privacy Act reform, following the first tranche of amendments passed in December 2024. The package contains roughly 40 proposals and would significantly reshape the […]
What organisations can learn from the Privacy Commissioner’s decision to conclude preliminary inquiries without further action. The Privacy Commissioner has completed preliminary inquiries into the 2025 Qantas data incident, which affected approximately 5.12 million Australians following a social-engineering attack on an overseas third-party contact centre provider. After almost a […]
Australia’s latest data breach figures reinforce the need for stronger cyber resilience, third-party oversight and breach readiness across organisations holding sensitive and identity-rich information. The OAIC’s latest complete dataset records 1,205 notifiable data breaches during calendar year 2025, an increase of 8 per cent on 2024 and the highest […]
The substantive privacy and information-sharing provisions of Western Australia’s Privacy and Responsible Information Sharing Act 2024 commenced on 1 July 2026. The framework introduces clear principles and standards for how Western Australian government agencies collect, use, store and share personal information, together with a responsible information-sharing framework. The commencement matters […]
The Privacy Commissioner has found that American Express Australia Limited (Amex) interfered with an individual’s privacy by failing to take reasonable steps to protect personal information from unauthorised employee access, in breach of APP 11.1. The decision is a significant reminder that insider access is not a peripheral cyber-security issue. […]
The Australian Privacy Commissioner has found that Medmate Australia and Monash IVF interfered with individuals’ privacy by using third-party tracking pixels on websites that provide telehealth and fertility services. The determinations found that tracking pixels collected sensitive information and enabled subsequent targeting of individuals through social media advertising. The decisions […]
On 28 May 2026, New Zealand’s government passed the Social Security (Modernisation) Amendment Bill, enabling automated electronic systems to be used in social security administration, including to make decisions on behalf of the Ministry of Social Development about people’s benefits. Government messaging has emphasised modernisation, reduced delays, error reduction and […]
The OAIC is seeking views to inform guidance on the new ADM transparency obligation under APP 1.7 to 1.9. The consultation is directed to Commonwealth agencies, private sector organisations, civil society, academia and other interested stakeholders, with feedback intended to help identify key issues, perspectives and implementation gaps. The new […]
The OAIC has updated Chapter 3 of the APP Guidelines, which deals with APP 3 and the collection of solicited personal information. The updates are particularly relevant to AI and data governance because they apply APP 3 principles to contemporary technology use cases such as artificial intelligence and facial recognition, […]
New Zealand’s Privacy Amendment Act 2025 commenced on 1 May 2026, introducing a new Information Privacy Principle 3A (IPP3A) into the Privacy Act 2020. This is a significant transparency reform because it applies where an agency collects personal information indirectly, that is, from someone other than the individual concerned. Under […]
The Australian Privacy Commissioner’s latest privacy determination provides a timely reminder that personal information collection must be necessary, fair and genuinely connected to the organisation’s functions or activities. On 22 April 2026, the Privacy Commissioner announced a determination concerning the 2Apply rental technology platform operated by InspectRealEstate (IRE). The Commissioner […]
The OAIC’s national theme for PAW2026 is “Trust is built here: In every privacy complaint. In every resolution.” The campaign focuses on strengthening privacy dispute resolution practices and building public confidence in how personal information is handled. This is a strong governance message. Privacy complaints are often treated as customer […]
The Information and Privacy Commission NSW is running Privacy Awareness Week under the theme “Smart Tech, Smarter Choices – Protecting Yourself in the Age of AI.” The IPC notes that smart technologies can make services faster, more efficient, more personalised and more convenient, but they can also create privacy risks […]
The Office of the Victorian Information Commissioner is marking Privacy Awareness Week under the theme “Smart Tech, Smarter Choices: Protecting Your Privacy in the Age of AI.” OVIC’s programme is particularly useful for information governance professionals because it connects privacy awareness with practical AI risks, including reliance on generative AI […]
Queensland’s Office of the Information Commissioner is supporting Privacy Awareness Week under the theme “Smart tech, smarter choices: Protecting your privacy in the age of AI.” This year, OIC Queensland is taking an online resources approach, releasing recorded presentations and highlighting resources throughout the week for specific audiences, including public […]
Western Australia is also participating in Privacy Awareness Week under the “Smart Tech, Smarter Choices” theme. The Office of the Information Commissioner WA notes that it will host its inaugural PAW event on Wednesday, 6 May, featuring a range of sessions. This is particularly significant because WA’s Privacy and Responsible […]
New Zealand’s Office of the Privacy Commissioner is running Privacy Week 2026 from 11 to 15 May, following Privacy Awareness Week in Australia. The theme is “Foundations of the Future | He Tūāpapa Anamata”, and the programme is being delivered through five days of free webinars, with recordings to be […]
