Australia: Privacy and Other Legislation Amendment Act 2024 including data protection regulation received Royal Assent

On 10 December 2024, the Privacy and Other Legislation Amendment Act 2024 received Royal Assent. The Act requires APP entities to disclose information about automated decision-making in their privacy policies if such decisions significantly affect individuals' rights or interests. The specified information includes the types of personal information used, the nature of decisions made solely by automated systems, and decisions where automation plays a substantial role. These decisions may relate to benefits, contracts, or access to essential services. The transparency requirements set out in the Act apply to both new and pre-existing automated decision-making processes. Furthermore, the Act introduces criminal penalties for doxxing, making it an offence to use a carriage service (such as the internet or telecommunications networks) to publish or disseminate personal data in a way that threatens or harasses individuals, with a penalty of up to 6 years' imprisonment. A more serious offence applies if the doxxing targets individuals on the basis of characteristics such as race, religion, gender or disability, with a penalty of up to 7 years' imprisonment.