What we're monitoring.
GDPR compliance for Australian businesses and what you need to do
Does the GDPR apply to your Australian business? We explain the triggers, your key obligations, penalties for non-compliance, and practical steps to take.
Read noteData sovereignty and what Australian businesses must do when data goes offshore
Data sovereignty for Australian businesses: who the Privacy Act covers, what APP 8 cross-border disclosure requires, and the compliance steps that matter.
Read noteStarting an online business in Australia and the legal obligations before launch
Starting an online business in Australia? Know the legal obligations before launch: ABN and GST registration, privacy law, consumer guarantees and spam rules.
Read notePrivacy Act reforms and the new obligations for Australian businesses
Privacy Act reforms: new penalties up to $50 million, a children's online privacy code, doxxing offences and a right to sue. What your business must do now.
Read notePrivacy complaints in Australia and the obligations your business must meet
A privacy complaint can escalate fast. Learn who the Privacy Act applies to, the duties you owe, the penalties for getting it wrong, and how to respond.
Read noteData Protection Impact Assessments, what They Are and When You Need One
A data protection impact assessment is required before high-risk processing under the GDPR. Find out when you need one and what your DPIA must contain.
Read noteThe essential clauses in a SaaS agreement
SaaS agreements govern cloud software delivered on subscription. Here are the essential clauses to review: scope, fees, data, liability and exit.
Read noteSelling personal information and your obligations under the Privacy Act
Selling personal information is a regulated disclosure under the Privacy Act. Here's who must comply, your APP duties and the penalties for getting it wrong.
Read noteDo You Need a Cyber Lawyer? A Decision Guide for Australian SMEs
Wondering whether to hire a cyber lawyer? We cover the triggers, from data breaches and ransomware reporting to contracts and new privacy laws, for SMEs.
Read noteAn employee leaked confidential information and your first five steps
An employee leaked confidential information: preserve evidence, check data breach obligations, manage client exposure, and discipline without new claims.
Read noteDe-identifying workplace data, a step-by-step guide
A practical guide to de-identifying employee and client data under the Privacy Act, including the re-identification risk test and the steps to follow.
Read noteCross-border data sharing under APP 8 and what your business must do
Cross-border data sharing triggers APP 8 of the Privacy Act. Who it applies to, the reasonable steps duty, the exceptions and penalties for getting it wrong.
Read note