Government Announces Bill For Mandatory Data Breach Notification Scheme

The Australian Government has released the Exposure Draft Privacy Amendment (Personal Data Protection) Bill 2026, proposing the most significant overhaul of privacy law in years. These reforms would fundamentally change how Australian businesses handle personal information, introducing a new "fair and reasonable" test, stronger consent requirements, expanded definitions of personal information, and new rules for AI and emerging technologies.

The new data breach scheme creates an obligation to report eligible data breaches relating to personal information.

Australia's Privacy Act reform has reached a critical milestone with the release of exposure draft legislation proposing fundamental changes to how organisations handle personal information. The reforms introduce a new 'fair and reasonable' test for data collection and use, a right of erasure for large digital platforms, strengthened consent standards, a statutory controller/processor framework, restrictions on trading personal data, and enhanced data breach obligations. These changes come at a time when em

Australia's privacy laws are undergoing significant reform, with new automated decision-making transparency requirements commencing in December 2026 and further substantial changes under consideration. Businesses must prepare for enhanced regulatory scrutiny, increased litigation risk through the new statutory tort for serious privacy invasions, and potential expansion of obligations to small businesses and employee records.

The Australian Government's exposure draft proposes a proactive, systems-based digital duty of care for online service providers, requiring them to ensure a 'safe online environment' so far as reasonably practicable.

Australia's digital regulatory landscape is undergoing a fundamental transformation, with the proposed digital duty of care joining a complex web of reforms including Privacy Act amendments...

Almost two years after a relatively modest set of Privacy Act reforms were passed in late 2024 (Tranche 1 Reforms) (more on these here), the Australian Government has released an exposure draft...

The Australian Government's proposed digital duty of care reforms would extend online safety obligations far beyond social media platforms to encompass any business operating websites, digital platforms, or AI-enabled tools. Rather than simply responding to complaints, businesses would need to proactively identify foreseeable risks and implement safeguards, with substantial penalties for non-compliance reaching up to $109.2 million for companies. The exposure draft introduces a fundamental shift from reacti

Australia's new statutory tort for serious invasions of privacy, which commenced in June 2025, is being tested against emerging AI-powered smart glasses technology that can record audio and video discreetly. As these devices become more sophisticated and less detectable, questions arise about whether current privacy laws adequately protect individuals from covert surveillance and data collection in both public and private settings.

New guidance to help organisations and developers comply with their privacy obligations when using AI.

The Code is voluntary, but it will likely become an important reference point for demonstrating compliance with Article 50 of the AI Act.

The Ninth Circuit Court of Appeals vacated a preliminary injunction against Perplexity AI, determining that when an AI agent acts at a user's direction, it is the user—not the AI company—who "accesses" computer systems under federal and California computer fraud statutes. This landmark appellate decision addresses how existing computer-access laws apply to agentic artificial intelligence and has significant implications...

The European Commission has initiated infringement procedures against 20 EU Member States for failing to transpose the EmpCo Directive by the March 27, 2026 deadline. This directive aims to combat greenwashing by requiring substantiation of environmental claims and third-party certification for sustainability labels, with full implementation expected by September 27, 2026.

The European Commission has proposed replacing the EU's three core procurement directives with a single, directly applicable Regulation that would fundamentally reshape how companies compete for public contracts across Member States. The reform introduces mandatory quality criteria thresholds, embeds ESG considerations as evaluation factors, and establishes new security and European-preference provisions that could restrict participation based on ownership, supply chain exposure, and strategic dependencies.

A federal court has struck down New York's Climate Change Superfund Act, which sought to recover $75 billion from fossil fuel companies based on historical emissions. The ruling found the Act preempted by the Clean Air Act, marking the first judicial decision on state climate superfund legislation and establishing that EPA's rescission of the endangerment finding does not alter preemption analysis.

Mexico's comprehensive anti-money laundering framework has undergone a sweeping transformation through Acuerdo 115/2026, introducing mandatory risk-based methodologies, enhanced client due diligence protocols, and automated monitoring requirements. With implementation deadlines beginning March 1, 2027, obligated parties conducting vulnerable activities face compressed timelines to overhaul their compliance infrastructure while navigating heightened enforcement risks and stricter beneficial ownership thresho

France's Anti-Corruption Agency has imposed its first-ever monetary sanctions under the Sapin II Act, penalizing a company €350,000 and its president €60,000 for widespread compliance failures. The landmark decision establishes critical precedents for enforcement strategy, breach assessment timing, and personal executive liability in anti-corruption matters.

The European Commission has adopted final Guidelines on exclusionary abuses of dominance under Article 102 TFEU, introducing a "workable effects approach" that narrows presumptions while expanding guidance on objective justifications and recognizing sustainability benefits as valid efficiencies for the first time. These Guidelines replace the 2008 Enforcement Priorities Guidance and are expected to significantly impact enforcement practices across EU Member States and beyond, particularly for digital market

The user of defective goods benefi ts from several causes of action against the vendor or manufacturer.

On December 3, a federal court in the Central District of California granted plaintiffs' request for preliminary approval of a proposed $22 million settlement ...