Australia: Data Protection

Australia's automotive sector faces intensifying privacy scrutiny as the OAIC launches its first compliance sweep targeting car dealerships and signals active investigations into connected vehicle manufacturers. With modern vehicles collecting thousands of data points and 93% of new cars expected to be connected by 2031, manufacturers, importers and dealers must urgently address transparency, consent and cross-border data flow obligations under the Privacy Act.

Subpoenas under Queensland's Uniform Civil Procedure Rules are court-issued processes that compel document production or witness testimony in civil proceedings. While they provide powerful evidence-gathering tools for parties and can reach non-parties like banks and employers, strict procedural requirements govern their drafting, service, scope, and enforcement.

As electric vehicles and connected car technologies become increasingly prevalent in commercial and everyday use, they generate unprecedented volumes of data about driver behaviour, location patterns and personal activities. With approximately 80% of EVs sold in Australia manufactured in China, questions surrounding data privacy, cybersecurity vulnerabilities and potential surveillance risks are emerging as critical concerns for businesses and individuals alike. This analysis examines the complex intersecti

NDIS providers in Australia are subject to strict privacy obligations under both the Privacy Act 1988 (Cth) and the NDIS Practice Standards, requiring robust handling of participants’ sensitive personal information.

AI service agreements in Australia should clearly define the scope of AI services, ownership of outputs, and liability for errors or unexpected results.

The cyber and data security landscape continues to evolve at pace. It can be challenging to keep up, so we have collated our "top 10" cyber stories from the last month, so you don't have to.

The Federal Court has ordered Australian Clinical Labs (ACL) to pay AU$5.8 million in civil penalties following a 2022 data breach involving its then-newly acquired Medlab Pathology business.

Tranche 2 of the Australian Privacy Act reforms is expected soon (perhaps imminently), following comments from the new attorney general in the media that suggested the time for conversation and for lobbying is ov

The Privacy Act 1988 (Act) requires entities to only collect personal information that is reasonably necessary for their functions or activities.