Privacy Amendment (Personal Data Protection) Bill 2026 exposure draft
Exposure draft of the second wave of Privacy Act reform: a broader definition of personal information, a new fair and reasonable test for collection and use, mandatory opt-out for direct marketing, 72-hour breach notification, erasure rights for large digital platforms, and GDPR-style controller and processor roles. Affects every organisation handling personal information, law firms included. Consultation closed 18 September 2026.
What it means for business
Consider scoping what the fair and reasonable test and 72-hour notification would mean for the firm's own privacy practices.
What does this mean for your business?
If this development touches your contracts, compliance or reporting, it may be worth a short conversation. Get in touch through our contact page and a senior lawyer will reply within one business day.
Talk to Envision LegalMore in Privacy, data & AI
11 September 2026 · ASIC
CP 391 Access to information on the companies register
31 August 2026 · Attorney-General's Department
Modernising Australia's privacy laws for the digital age
27 August 2026 · APRA
APRA and ASIC warn frontier AI awareness must turn to action
27 August 2026 · APRA
Insights from the APRA-ASIC Industry Roundtables
Regulatory alerts
Get the radar in your inbox.
A short email when something worth knowing lands. Pick the areas you care about and skip the rest.
This register contains general information only and does not constitute legal advice. Envision Legal accepts no liability for any loss arising from reliance on this content. You should seek independent legal advice tailored to your specific circumstances. For enquiries, contact Envision Legal.