CyberPosture suite | View all tools
Australian Privacy Act reforms, what's changed and what's coming

Australia's Privacy Act Compliance Assessment

The Privacy Act is changing. Penalties have increased significantly, and further reforms are being introduced. Take our free 3-minute assessment and discover your compliance gaps, before regulators do.

Used by Australian accountants, medical practices, and professional services firms preparing for Privacy Act compliance.

๐Ÿ”’ No account required. Results emailed to you.

How the Privacy Act Assessment Works

Three steps toward stronger privacy compliance

Free Assessment

18 questions across 5 compliance domains. No sign-up required. Takes 3 minutes.

Instant Score

See your compliance score across 5 domains and your top 3 risks, immediately, for free.

Your Privacy Policy

Tailored to your assessment answers. Download in PDF or Word in minutes.

The Privacy Act is getting teeth

Privacy Act 1988 (Cth) reforms are landing in stages. Here's what has already changed and what's proposed.

More Small Businesses Already Covered

The Tranche 2 draft bill (August 2026) keeps the $3M small business exemption. But AML/CTF regulated businesses (lawyers, accountants, real estate agents) have been covered for their AML/CTF activities since 1 July 2026, and the statutory tort for serious invasions of privacy applies regardless of turnover.

Individual Rights: Existing and Proposed

Rights to access (APP 12) and correct (APP 13) personal data already exist under current law. The Tranche 2 draft proposes a right to erasure for large digital platforms. Build processes for all three now.

Stronger Consent Rules Proposed

The current Privacy Act already requires meaningful consent. Proposed reforms would explicitly prohibit pre-ticked boxes and require express consent for most data collection, getting this right now puts you ahead.

Bigger Penalties

Civil penalties for serious or repeated breaches have been significantly increased. The OAIC now has greater enforcement powers.

Privacy Act Assessment Pricing

The assessment is always free. Pay only when you need the policy.

Free Assessment

$0

free forever
  • โœ“ 18-question compliance assessment
  • โœ“ Score across 5 compliance domains
  • โœ“ Top 3 risks identified
  • โœ“ No sign-up required
  • โœ“ Results stored in your browser only
Start free assessment
Most Popular

Tailored Privacy Policy

$49

one-time
  • โœ“ Everything in Free
  • โœ“ Custom Privacy Policy tailored to your answers
  • โœ“ Aligned with the Australian Privacy Principles
  • โœ“ Plain English, ready to publish
  • โœ“ Download in PDF + Word format
  • โœ“ Covers upcoming Privacy Act reforms

๐Ÿ”’ Payment processed by CyberPosture ยท Secured by Stripe

Get your $49 Privacy Policy

All prices are in Australian dollars and include GST. One-time payments, no subscription.

Preview

Sample Privacy Policy Output

Collection and use of personal informationโœ“
Disclosure to third partiesโœ“
Data breach notification procedureโœ“
Individual access and correction rightsโœ“

Plain English. Aligned with the Australian Privacy Principles. Ready to publish on your website.

Generate your policy, $49

Privacy Act Compliance FAQs

Does my business actually need to comply?

It depends on your size and sector. Businesses with over $3M annual turnover are already covered by the Privacy Act now. Health service providers, credit reporting bodies, and several other categories are covered regardless of size. The small business exemption is proposed to be removed for general SMBs, but this has not yet been legislated. Either way, building good privacy practices now protects you ahead of any change.

Is the assessment really free?

Yes, completely. 18 questions, your score and top risks once you enter your name, business and email, all free, no account required. We only charge if you want the tailored Privacy Policy document.

How is the Privacy Policy tailored to my business?

We use your assessment answers to understand what data you collect, how you store it, and what processes you have in place. It generates a policy that reflects your actual situation, not a generic template.

Is the generated policy legally compliant?

The policy is designed to align with the Australian Privacy Principles and references the Privacy Act 1988 (Cth). However, it is a tailored starting point, we recommend having a lawyer review it before publishing, especially if you collect sensitive information.

What if I'm not sure whether the Privacy Act applies to my business?

Complete the free assessment anyway. It takes 3 minutes and the results will tell you exactly where you stand, including whether the small business exemption currently applies to you and what the proposed reforms would mean for your situation.

Ready to check your compliance score?

3 minutes. Free. No account required.

Start free assessment