Australia: Privacy and Other Legislation Amendment Act 2024 including data protection authority governance enters into force

On 11 December 2024, the Privacy and Other Legislation Amendment Act 2024 enters partially into force. The Act expands the OAIC’s enforcement powers, allowing it to issue mid-tier civil penalties for privacy breaches and low-level civil penalties for administrative violations. The Privacy Commissioner is authorised to develop APP codes when directed by the Minister, while industry-proposed codes require the Commissioner’s approval. Furthermore, the Act amends the Commissioners' enforcement powers, including the ability to conduct public inquiries, impose civil penalties, monitor compliance, issue notices, assess privacy risks, and oversee new data breach response measures, with Ministerial approval where required.