Oceania: Privacy

Facial recognition technology captures biometric information, which is classified as sensitive information under Australian privacy law and attracts a higher level of protection than ordinary personal information, meaning businesses must either obtain consent or establish a lawful exception before collecting it.

NDIS providers in Australia are subject to strict privacy obligations under both the Privacy Act 1988 (Cth) and the NDIS Practice Standards, requiring robust handling of participants’ sensitive personal information.

AI service agreements in Australia should clearly define the scope of AI services, ownership of outputs, and liability for errors or unexpected results.

Employers can dismiss employees for key jamming if clear remote work policies exist, a thorough investigation is conducted, and a fair disciplinary process is followed.

Poor decision-making, whether failing to share or over-sharing, can lead to regulatory action, reputational damage and safeguarding failures.

NDIS providers in Australia are subject to strict privacy obligations under both the Privacy Act 1988 (Cth) and the NDIS Practice Standards, requiring robust handling of participants’ sensitive personal information.