The Office of the Australian Information Commissioner (OAIC), Australia's privacy regulator, is conducting its first ever privacy compliance sweep, as of this January. The compliance sweep will include a review of the privacy policies of businesses that collect information in person.
The OAIC is focusing on businesses in industries with practices that involve the in-person collection of personal information.
Approximately 60 entities from the following sectors will have their privacy policies assessed, focusing on ensuring that they meet the requirements under Australian Privacy Principle 1.4:
- Rental and property;
- Chemists and pharmacists;
- Licenced venues;
- Car rental companies;
- Car dealerships; and
- Pawnbrokers and second-hand dealers.
Businesses found to have non-compliant privacy policies may face consequences including compliance and infringement notices that could include penalties of up to AUS$66,000 under the OAIC's new enforcement powers.
If your business operates in these industries, it's a timely reminder to check your privacy policies and collection notices to ensure that they are current, compliant, and accurately reflect how your business handles personal information.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
