29/06/2026
Australia's privacy regulator β the OAIC β completed its first-ever compliance sweep in January earlier this year.
60 businesses across 6 sectors.
Checking two things: whether privacy policies comply with APP 1.4 (clear, up-to-date, and accessible) and whether businesses are notifying people about data collection at the point of collection under APP 5.1.
Non-compliant businesses face infringement notices and penalties of up to $66,000 per infringement.
This sweep isn't limited to those 6 sectors. Any business that collects personal information should treat it as a signal that the OAIC is moving from education to enforcement.
From 1 July, over 100,000 additional small businesses also lose their Privacy Act exemption due to AML Tranche 2 β accountants, lawyers, real estate agents, and conveyancers.
The insurance angle: Standard Business Pack policies don't cover OAIC investigation costs, legal fees, or third-party privacy claims. Cyber + Privacy Liability insurance is the purpose-built cover.
Free review at withpocket.com.au/book-an-introductory-call/