Australia: Privacy and Other Legislation Amendment Act 2024 including data protection regulation was adopted by House of Representatives

On 29 November 2024, the Privacy and Other Legislation Amendment Act 2024 was adopted following the House of Representatives approval of the Senate amendments. The Act requires APP entities to disclose information about automated decision-making in their privacy policies if such decisions significantly affect individuals' rights or interests. These entities are obliged to specify the types of personal information used, the nature of decisions made solely by automated systems, and decisions where automation plays a substantial role. This includes decisions related to benefits, contracts, or access to essential services. The transparency requirements set out in the Act apply to both new and pre-existing automated decision-making processes. Furthermore, the Act introduces criminal penalties for doxxing, making it an offence to use a carriage service (such as the internet or telecommunications networks) to publish or disseminate personal data in a way that threatens or harasses individuals, with a penalty of up to 6 years' imprisonment. A more serious offence applies if the doxxing targets individuals on the basis of characteristics such as race, religion, gender or disability, with a penalty of up to 7 years' imprisonment.