The OAIC’s 2026 2Apply determination signals a major shift in privacy compliance. It’s no longer enough to ask whether personal information is reasonably necessary to collect. Organisations must also consider whether form design, consent mechanisms and user experience unfairly influence disclosure. This article explains the Commissioner’s findings, the emerging concept of “Online Choice Architecture,” and the practical checks legal, compliance and marketing teams should apply before their next form review.

Read more

The legal world looks very different as we turn our gaze to 2026. Privacy penalties have escalated dramatically, signalling a new era of enforcement. A brand-new merger control system is…

Read more

The past few years have fundamentally changed how Australian organisations approach data privacy and cybersecurity. High-profile data breaches at Qantas, Optus, Medibank, and Australian Clinical Labs have made headlines, sparked…

Read more

Extensive reforms of significance to media and internet businesses have been proposed in the Privacy Act Review Report released in December 2022 (the report). Submissions on the proposals in the…

Read more

This toolkit is a guide to Practical Law resources developed to assist organisations in responding to a data breach, cyberattack, or other cybersecurity incident, including those that require organisations to notify authorities.

Read more

Business is at a critical point. Still reeling from the ongoing risk impact of the pandemic, you now have to prepare for an equally uncertain future. There is no more putting it off.

Read more

Whether you are a business operating exclusively in New Zealand, or an Australian business with a presence in New Zealand, the new Privacy Act 2020 will have an impact.

Read more

Subscribe toLegal Insight

Discover best practice and keep up-to-date with insights on the latest industry trends.

Subscribe