The Privacy and Other Legislation Bill 2024 (Cth) received Royal Assent on 10 December 2024 and makes several significant amendments to the Privacy Act 1988 (Cth) following prior public consultation to ensure privacy laws remain fit for purpose in the digital age. Some amendments have already taken effect.

Key changes include new transparency obligations in relation to automated decision-making systems, additional regulator enforcement powers, new civil penalties, and clarification on what ‘reasonable steps’ must be taken to protect personal information. These changes apply to all ‘APP entities’.

Importantly for not-for-profits, the Bill introduced a new tort for serious invasions of privacy and applies to all entities handling personal information, regardless of whether they meet the definition of an ‘APP entity’. Individuals can bring a claim against an organisation or other individuals for an invasion of privacy and misuse of personal information.

In this webinar, MinterEllison's Kate Dimes Letters and Fiona Chui:

∙ Provide an overview of the recent reforms;

∙ Outline key amendments;

∙ Highlight new obligations for not-for-profits