Privacy law reform in Australia is happening in stages, and not every stage has the same level of certainty. Some of what follows is already locked in. Some has a confirmed date but hasn't taken effect yet. Some is direction-of-travel only, with nothing legislated. Here's exactly which is which.
Before 1 July 2026
Accountants, real estate agents, lawyers, conveyancers, and precious metals/stones dealers under $3M turnover had no Privacy Act obligations for their client verification data. No requirement for a Privacy Policy, Collection Notice, or Breach Response Plan tied to this work.
After 1 July 2026
These businesses are Privacy Act–covered for the client information they handle as part of identity verification and due diligence work, regardless of turnover. This has already happened and is not dependent on any further legislation.
Before 10 December 2026
Businesses already covered by the Privacy Act (turnover over $3M, health providers, or the AML/CTF-triggered group above) generally don't have to disclose when automated systems are used to make decisions about individuals.
After 10 December 2026
Privacy policies for already-covered businesses must disclose the use of automated decision-making that significantly affects individuals. The OAIC is also required to finalise a Children's Online Privacy Code around this time. This date is legislated under the Privacy and Other Legislation Amendment Act 2024, which already received Royal Assent.
Current position
Most businesses under $3M annual turnover, outside the categories above, remain exempt from the Privacy Act entirely. This has been the case since 1988.
What's proposed
The Australian Government has agreed in principle to remove this exemption entirely, which would bring an estimated 2.5 million further small businesses into scope. This has not been legislated and has no confirmed date. Treat it as a strong signal of direction, not a deadline.
This page reflects publicly available information on Australian privacy law reform as of August 2026 and is provided for general awareness, not legal advice. Dates and legislative status can change; if a specific date matters to a decision you're making, verify it directly with the OAIC (oaic.gov.au) or a qualified solicitor before relying on it.