Privacy Reform – Consultation on Exposure Draft legislation
Overview
The Australian Government has released a Consultation Paper and Exposure Draft legislation to modernise and strengthen Australia’s privacy laws for the digital age. The reforms will bolster privacy protections for Australians and help tackle emerging risks from new technologies, including artificial intelligence and wearable devices such as smart glasses.
The measures in the Exposure Draft Bill are designed to better protect Australians while supporting innovation and providing greater certainty for regulated entities.
Stronger privacy protections help Australians stay in control of their personal information, make informed choices and participate in society with greater certainty about how their information is used.
This Bill has been developed in response to feedback received during extensive consultation over several years. This includes feedback received through the Privacy Act Review process and the 2024 reforms to the Privacy Act, with about 900 written submissions received across the process. The Bill remains subject to further consideration by government.
Why we are consulting
The Privacy Act 1988 (Cth) is Australia’s central, economy-wide framework for handling personal information.
We are seeking feedback on how the measures in the Bill might operate in practice.
- Exposure Draft Privacy Amendment (Personal Data Protection) Bill 2026 [PDF 544KB]
- Exposure Draft Privacy Amendment (Personal Data Protection) Bill 2026 [DOCX 240KB]
- Consultation Paper [PDF 792KB]
- Consultation Paper [DOCX 408KB]
Your feedback will inform what the government considers when finalising reforms to strengthen privacy protections and ensure Australia’s privacy laws are fit for the digital age.
Please ensure submissions are uploaded by Friday 18 September 2026. We encourage concise submissions of around 1,000 words. Unfortunately, we will not be able to consider submissions received after the closing date.
Who we want to hear from
We welcome feedback from all interested stakeholders, including:
- regulated entities
- non-government organisations
- industry
- consumer organisations
- legal experts
- privacy advocates
- academia
- individuals.
We appreciate your time and effort in considering the Bill.
Privacy Collection Notice
The Attorney-General’s Department is covered by the Privacy Act 1988, including the Australian Privacy Principles (APPs). The APPs set out standards, rights and obligations regarding the handling and management of personal information. This includes how we collect, store, use, disclose, quality assure and secure personal information, as well as your rights to access or correct your personal information.
Further information about the collection of your personal information is provided below.
Public consultation – Exposure Draft Privacy Amendment (Personal Data Protection) Bill 2026
The Attorney-General’s Department (the department) is collecting some of your personal information to support the review of submissions and feedback on the Exposure Draft Privacy Amendment (Personal Data Protection) Bill 2026. The privacy and security of your personal information is important to us and protected by law.
The consultation is being undertaken by officers of the department. Any personal or sensitive information you choose to provide may be shared with officers of the department for the purposes of conducting the consultation and reviewing submissions.
How your personal information will be collected
- If you participate in the consultation by providing a written submission, you do not need to provide any personal or sensitive information. If you do, this will be on a voluntary basis.
- If you email the department, the department will have a record of your email address, and if you choose to provide it, your name.
- We request that you do not provide unnecessary personal information or sensitive information unless it is directly relevant to your submission. If you provide personal or sensitive information about a third party, we will not publish this without the consent of the third party, even if you have provided your consent for your submission to be published.
If we don’t collect your personal information
If we don’t collect your personal information, it may affect our ability to get in touch, including our ability to contact you to clarify any aspect of the feedback you provide in the consultation.
If you choose not to provide your name or use a pseudonym, we may not be able to provide you access to information or records that you provide us as part of the consultation.
How your personal information will be used
We may use your personal information to consult with you, including to contact you if we have questions about your feedback, or would like to gain further information to:
- analyse submissions, including using AI tools, received through the consultation process
- inform what the government considers when deciding on reforms to strengthen privacy protections
- prepare consultation summaries, reports or briefing materials.
Where practical, personal information will be de-identified before it is included in reports, summaries or other consultation outputs.
Who your personal information may be disclosed to
- If you include personal information in a written submission and provide consent to publish that submission, then your personal information may be published. For example, if you put your name on the title page of the submission or include personal information in the text of your submission.
- Your submission, including any personal information you choose to provide, will be disclosed to officers of the department who are involved in the review of submissions.
- If your submission contains personal information or sensitive information about another individual, the department may de-identify or redact that information before using, sharing or publishing the submission.
- If you provide personal or sensitive information about a third party, we will not publish this without the consent of the third party, even if you have provided your consent for your submission to be published.
If we identify any other reasons to disclose your personal information, we will seek your written consent before doing so.
Further information
The department’s Privacy Policy explains how the department handles and protects the information provided by you. Our Privacy Policy also explains how you can request access to or correct the personal information we hold about you, and who to contact if you have a privacy enquiry or complaint. If you require a hard copy of our Privacy Policy, please contact the Privacy Officer at privacy@ag.gov.au.
If you have any questions about this consultation or this Privacy Collection Notice, please contact PrivacyReform@ag.gov.au.
Have your say
Interests
- Government
- Legislation
- Privacy
Share
Share on Twitter Share on Facebook