Australia Proposes Its Biggest Privacy Shake-Up in Years. Here Is What Sparked It.

Key points

• Australia's government has proposed changes to the Privacy Act, more than five years after it first began consulting on reform.
• 93% of Australians say protecting personal information is important to them, according to survey data cited by The Guardian.
• 87% of Australians say they are more concerned about their privacy than they were five years ago.
• Australians rank privacy protection as their top priority for regulating artificial intelligence, the technology behind chatbots, facial recognition and ad-targeting systems.

Facial recognition cameras in shopping centres. Anti-surveillance glasses selling out at Kmart. Social media feeds stuffed with targeted ads chosen by algorithms that know more about your habits than your friends do. Australia's privacy problem is not theoretical. It is happening in car parks and checkout queues right now.

Against that backdrop, the Australian government has put forward significant proposed changes to the Privacy Act, the main law governing how organisations collect and use personal data. The reform is overdue: talks about updating the law began more than five years ago.

Why does this matter to ordinary Australians?

Because the current rules are not working for ordinary people, and most Australians know it.

The existing system relies heavily on what experts call "tick-a-box consent", meaning the pop-up boxes and terms-and-conditions screens that ask you to agree before you use an app or website. In practice, almost nobody reads them, and the consent they record is largely meaningless. You click yes or you cannot use the service. That is not a real choice.

Microtargeting, the practice of using your personal data to show you ads, content or political messages selected specifically for you, has made the problem worse. It fills feeds with misleading or inflammatory material, because that content tends to get clicks, and clicks are what the system is built to reward.

Then came AI. Artificial intelligence systems, the technology behind tools like ChatGPT and the facial recognition cameras spreading through retail spaces, consume enormous amounts of personal data. The current law was written before these tools existed at scale.

What do Australians actually want?

Strong privacy rules, by a wide margin.

Survey figures show 93% of Australians rate protecting personal information as important, and 87% say they worry about privacy more than they did five years ago. When asked specifically about AI regulation, Australians put privacy protection at the top of the list, above concerns about job losses or misinformation.

Those numbers suggest the political will for real reform exists. The question is whether the proposed changes are strong enough to match public expectation.

What happens next?

The proposals are still at the consultation stage, meaning the public and industry can respond before any law is passed. Privacy advocates argue the changes cannot come soon enough, pointing to anti-surveillance glasses becoming a consumer product as a sign of how normalised the problem has become.

For now, the practical advice for anyone worried about their data footprint is simple: treat every app permission as a real decision, check which apps on your phone have access to your location and camera, and read the summary (not the full terms) when a service asks for your data. The law may catch up. Until it does, personal caution is the only tool available.

Common questions

What is the Privacy Act and who does it cover?

The Privacy Act is Australia's main federal law controlling how businesses and government agencies collect, store and use personal information. It currently applies to organisations with an annual turnover above AU$3 million, though reform proposals would likely expand that coverage.

What is facial recognition and why is it in shops?

Facial recognition is software that identifies a person by analysing their face on camera, the same way you might unlock your phone with your face. Retailers have begun using it for security, but critics say it collects sensitive biometric data from shoppers who have not agreed to it.

Can I opt out of ad-targeting today?

Yes, partially. Most major platforms let you limit personalised ads in their settings menus. In a browser, enabling privacy-focused extensions and using private or incognito mode reduces, but does not eliminate, the data collected about you.