Due 28 OctAUQuarterly BAS Due (July–September) NewUSForm 1099-NEC & Contractor Payment Reporting Check See deadlines ›
Due 31 OctPaper Self Assessment Return Deadline NewSole Trader Allowable Expenses & Simplified Expenses Check See deadlines ›
Due 2 NovForm 941 Quarterly Payroll Tax Return Due (Q3) NewForm 1099-NEC & Contractor Payment Reporting Check See deadlines ›
Due 31 OctEU One Stop Shop (OSS) VAT Return — July to September NewEU Product Liability Directive Readiness Check See deadlines ›
Due 28 OctQuarterly BAS Due (July–September) NewAutomated Decision-Making Privacy Check (Australia) See deadlines ›

Data & Privacy ✦ ✦ ✦ ✦ · Australia

Australian Privacy Act & APPs Compliance Check

Check whether your organisation meets Australian Privacy Act 1988 obligations under the Australian Privacy Principles — covering data collection, use, disclosure, and individual rights.

Start free check 10 questions · 8 minutes · No signup
Trending now ✦ ✦ ✦ ✦ ·

Did you know? The numbers behind this check.

  • A$50 million per contraventionMaximum penalty (serious breach)
  • 30 days of awareness of breachNDB notification deadline
  • A$3 million (most private entities)Annual turnover threshold
  • 13 Australian Privacy PrinciplesAPPs count

Why this matters.

The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) regulate how APP entities — Australian Government agencies and private sector organisations with annual turnover over A$3 million, plus certain other entities — collect, use, hold, and disclose personal information. The Privacy Legislation Amendment (Enhancing Online Privacy and Other Measures) Act 2021 introduced significant penalties: up to A$50 million per contravention for serious or repeated breaches (previously A$2.2 million). The Australian Information Commissioner (OAIC) actively investigates complaints and conducts assessments.

Significant Privacy Act reforms are underway following the Attorney-General’s Department review: proposals include expanding coverage to small businesses, introducing a direct right of action for individuals, and strengthening enforcement powers. Even under the current framework, the Notifiable Data Breaches (NDB) scheme requires APP entities to notify the OAIC and affected individuals when an eligible data breach is likely to cause serious harm. The 2022 Optus and Medibank breaches — affecting tens of millions of Australians — resulted in class actions, OAIC investigations, and regulatory reform.

Have these to hand.

  • Annual turnover of your organisation (to determine if the Privacy Act applies)
  • A list of types of personal information you collect, use, and disclose
  • Your current privacy policy
  • Whether you handle sensitive information (health, financial, racial/ethnic origin, etc.)
  • Your data breach response plan, if you have one

What you’ll get.

  • 1A score out of 100Where you stand today, at a glance.
  • 2Findings ranked by riskWhat could cost you, highest risk first.
  • 3A plan with timeframesWhat to fix first and by when.

Use this free tool to check your organisation’s compliance with the Australian Privacy Act 1988 and Australian Privacy Principles, and get a prioritised action plan covering data collection, use, disclosure, and breach response.

General guidance only, not legal advice. Consult a qualified solicitor or adviser in your jurisdiction for specific issues.