🇦🇺
Australia
Privacy Act 1988
Oceania🔵 Substantial
Compliance Score
64%
9 Addressed
5 Partial
0 None
Authority
Office of the Australian Information Commissioner (OAIC)
Overview
Australia's Privacy Act, effective 1988, is a substantial framework. The OAIC is the independent authority that enforces compliance and provides guidance on the law.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
PartialChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
AddressedAI & Automated Decisions
PartialData Localisation
PartialSignificant Data Fiduciary
PartialGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Australia?+
Australia is governed by the Privacy Act 1988. The law is enforced by the Office of the Australian Information Commissioner (OAIC). According to our analysis, the country has a Substantial level of data protection framework.
Does Australia require a Data Protection Officer (DPO)?+
Partially. The Privacy Act 1988 may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Australia?+
Partially. While Privacy Act 1988 may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Australia?+
Under the Privacy Act 1988, organizations must notify the Office of the Australian Information Commissioner (OAIC) and affected individuals without undue delay in the event of a personal data breach.