During the period August 2024 to 30 September 2026 there have been only four published determinations by the OAIC where compensation has been awarded, with the compensation awards ranging from $7,500 to $10,000. In March 2026 the OAIC announced a new approach in how it will be handling individual privacy complaints arising out of a data breach which is the subject of court proceedings, an investigation or a representative complaint.
Read more
In this update, Stephens Lawyers & Consultants provides a review of selected determinations made (and published) by the Office of the Australian Information Commissioner (OAIC) during the period August 2024 to 30 September 2026 in relation to privacy breaches in which compensation was awarded – and the factors that the OAIC takes into account in assessing whether compensation should be awarded to the complainant.
Read more
From 30 May 2025 all businesses that have an annual turnover of $3 million in a financial year, must report a ransomware or cyber extortion within 72 hours of making or having a payment made on its behalf. This is in addition to existing reporting obligations under the Notifiable Data Breach scheme. This article explores these reporting obligations and offers guidance on some strategies to consider for data protection and privacy law compliance.
Read more
On 29 November, 2024 amendments to the Australian privacy law made by the Privacy and Other Legislation Amendment Bill 2024 (the ‘Bill’) passed and came into effect on 11 December 2024 (the day after receiving Royal Assent). In this Update we provide an overview of some of the key changes arising from the Bill, together with guidance on steps that businesses can consider taking now to prepare for the changes and privacy law compliance generally.
Read more
In this update, Stephens Lawyers & Consultants provides an overview of the compensation awarded in privacy breach determinations made during October 2022 – July 2024 by the OAIC and some of the factors it took into account in awarding compensation and costs.
With long awaited changes to the Privacy Act now imminent, businesses cannot afford to be complacent about privacy compliance.
Read more
