Australia: Privacy and Other Legislation Amendment Act 2024 including data protection authority governance was introduced to the House of Representatives

On 12 September 2024, the Privacy and Other Legislation Amendment Act 2024 was introduced to the House of Representatives. The Act would introduce a number of changes to the existing privacy regime, including broadening the Office of the Australian Information Commissioner's (OAIC) enforcement powers, including the ability to issue mid-tier civil penalties for breaches of privacy provisions and a low-level civil penalty for administrative breaches. In accordance with the provisions stipulated within the Act, the Privacy Commissioner would be authorised to develop an APP Code upon receiving a directive from the Minister, who is responsible for determining its scope, applicability, and necessity. Conversely, codes proposed by industry would require the Commissioner's approval. Further, the Act would task the OAIC with the development of a Children's Online Privacy Code which would apply to social media providers, relevant electronic services, designated internet services, and platforms likely accessed by children. Furthermore, the Act would empower the Privacy Commissioner to conduct public inquiries, impose civil penalties, monitor compliance, issue notices, and assess privacy risks. Additionally, the Act proposes an amendment to the response framework for significant data breaches and emergencies by prescribing more specific measures, such as providing information about automated decisions in privacy policies. The Act would also introduce a statutory tort for serious invasions of privacy.