NorthShore Privacy
Privacy Act compliance documents · Australia

Your privacy policy, drafted properly, before it's a problem.

A tailored Privacy Policy, Collection Notice, and Data Breach Response Plan for your business, built from how you actually operate, not a generic template. Delivered in days, not weeks.

–
days until mandatory
automated-decision disclosure
rules commence (10 Dec 2026)
01

What's actually changed

In effect
1 JUL 2026

Already in effect

Accountants, real estate agents, lawyers, conveyancers, and dealers in precious metals/stones are now Privacy Act–covered entities, regardless of turnover, a change linked to anti-money laundering law, not a direct privacy announcement, which is why most owners haven't heard about it yet.

Expected
expansion

Coming for most other small businesses

The blanket exemption for businesses under $3M turnover is expected to be removed, bringing an estimated 2.5 million further small businesses into scope. A confirmed date hasn't been legislated, but it's worth preparing for regardless.

Legal
standard

The requirement itself

A compliant policy must be clear, up to date, and publicly available (usually published on your website), and must specifically address the 13 Australian Privacy Principles, not just be a generic downloaded template.

See the full before-and-after breakdown, including exactly what's confirmed vs. still proposed →