Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 01 OCTOBER 2025

OAIC privacy guidelines for not-for-profits: essential compliance insights

Cooper Grace Ward
Cooper Grace Ward
Contributor
Cooper Grace Ward

Cooper Grace Ward

Cooper Grace Ward was established in 1980 and has quickly become one of the largest independent...

View firm profile
Explore more from Cooper Grace Ward

Key points from OAIC guidance on how NFPs can comply with the Australian Privacy Principles.

AustraliaPrivacy
Charles Sweeney
Charles Sweeney
Carly Ashwood
Carly Ashwood
Adelaide Hayes
Adelaide Hayes
Author LinkedIn connections

Understanding how your not-for-profit handles personal information is crucial to maintaining trust and meeting legal obligations. Not-for-profits may be required to comply with the Privacy Act and practical guidance is available on how to protect personal data, manage breaches, and work with third parties to safeguard privacy and strengthen community confidence.

Introduction

The Privacy Act 1988 (Cth) contains 13 Australian Privacy Principles (APP) that set out the minimum requirements for the handling of personal information by organisations subject to the Act.

A not-for-profit (NFP) will be required to comply with the Act if it has an annual turnover of over $3 million. Other NFPs are also subject to the Act, irrespective of turnover, if they:

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

© Cooper Grace Ward Lawyers

Cooper Grace Ward is a leading Australian law firm based in Brisbane.

This publication is for information only and is not legal advice. You should obtain advice that is specific to your circumstances and not rely on this publication as legal advice. If there are any issues you would like us to advise you on arising from this publication, please contact Cooper Grace Ward Lawyers.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Privacy Reform In Australia: What Businesses Need To Know In 2026-2027 (Part 2)

The Australian Government has released the Exposure Draft Privacy Amendment (Personal Data Protection) Bill 2026, proposing the most significant overhaul of privacy law in years. These reforms would fundamentally change how Australian businesses handle personal information, introducing a new "fair and reasonable" test, stronger consent requirements, expanded definitions of personal information, and new rules for AI and emerging technologies.
AustraliaPrivacy
Coleman Greig Lawyers
Coleman Greig Lawyers
Article

Digital Duty Of Care: What Australian Businesses Need To Know

The Australian Government's proposed digital duty of care reforms would extend online safety obligations far beyond social media platforms to encompass any business operating websites, digital platforms, or AI-enabled tools. Rather than simply responding to complaints, businesses would need to proactively identify foreseeable risks and implement safeguards, with substantial penalties for non-compliance reaching up to $109.2 million for companies. The exposure draft introduces a fundamental shift from reacti
AustraliaPrivacy
Holding Redlich
Holding Redlich
Article

Australia’s Privacy Act Reforms: Fundamental Changes Proposed In New Exposure Draft

Australia's Privacy Act reform has reached a critical milestone with the release of exposure draft legislation proposing fundamental changes to how organisations handle personal information. The reforms introduce a new 'fair and reasonable' test for data collection and use, a right of erasure for large digital platforms, strengthened consent standards, a statutory controller/processor framework, restrictions on trading personal data, and enhanced data breach obligations. These changes come at a time when em
AustraliaPrivacy
Corrs Chambers Westgarth
Corrs Chambers Westgarth
Article

Privacy Reform In Australia: What Businesses Need To Know In 2026-2027

Australia's privacy laws are undergoing significant reform, with new automated decision-making transparency requirements commencing in December 2026 and further substantial changes under consideration. Businesses must prepare for enhanced regulatory scrutiny, increased litigation risk through the new statutory tort for serious privacy invasions, and potential expansion of obligations to small businesses and employee records.
AustraliaPrivacy
Coleman Greig Lawyers
Coleman Greig Lawyers
Article

Transparency In Automated Decision-Making: What The OAIC Guidance Means For Your Business

Australia's privacy regulator has issued final guidance on new transparency obligations for automated decision-making systems. From December 2026, organisations using computer programs—including AI, algorithms, and everyday software—to make or inform significant decisions about individuals must disclose these practices in their privacy policies. The guidance reveals a broader compliance burden than many expect, particularly for businesses using automated tools across recruitment, pricing, credit
AustraliaPrivacy
Corrs Chambers Westgarth
Corrs Chambers Westgarth
Article

AI Glasses And Privacy: Are Our Laws Keeping Up?

Australia's new statutory tort for serious invasions of privacy, which commenced in June 2025, is being tested against emerging AI-powered smart glasses technology that can record audio and video discreetly. As these devices become more sophisticated and less detectable, questions arise about whether current privacy laws adequately protect individuals from covert surveillance and data collection in both public and private settings.
AustraliaPrivacy
Carroll & O'Dea
Carroll & O'Dea
Video

It Depends – Can A Limited Recourse Borrowing Trust Acquire More Than One Asset? (Video)

Under Australian superannuation law, limited recourse borrowing arrangements typically require separate bare trusts for each asset acquired by an SMSF. However, certain exceptions allow multiple assets to be held in a single bare trust, including identical assets purchased simultaneously, permanent fixtures spanning multiple titles, and assets legally required to be dealt with together. Understanding these nuanced rules is critical to avoid serious compliance, tax, and duty implications.
AustraliaWealth Management
Cooper Grace Ward
Cooper Grace Ward
Video

National Safe Work Month – For Life – Why WHS Matters (Video)

October is National Safe Work Month, and Cooper Grace Ward's workplace relations and safety team explores why work health and safety matters for every business. Special counsel Gemma Sharp examines the legal duties of PCBUs and officers to protect workers from both physical and psychosocial hazards, emphasizing that safety must be woven into the fabric of business operations rather than treated as an afterthought.
AustraliaEmployment and HR
Cooper Grace Ward
Cooper Grace Ward
Podcast

Podcast: Inside The Claim With CGW – Flight Risk: Grounded By A Galley Cart

Cooper Grace Ward's Damien Jarrett and Jess Byrne examine Hunter v Alliance Airlines Pty Ltd, a Supreme Court workers' compensation case involving a cabin crew member's back injury from a jammed galley cart. The discussion explores how the case evolved from maintenance and staffing allegations into a training dispute, and examines the court's approach to quantum arguments when the injured worker chose to pursue her own business rather than return to employment.
AustraliaEmployment and HR
Cooper Grace Ward
Cooper Grace Ward
Article

First Right To Disconnect Rulings Clarify The Bar For A Contravention Of The Right To Disconnect Laws

In the first substantive rulings on Australia's right to disconnect laws, the South Australian Employment Tribunal has determined that an Adelaide hairdressing salon did not breach its apprentices' rights despite sending frequent out-of-hours messages via TikTok and Snapchat. The Tribunal drew a critical distinction between unwelcome communication and actually preventing employees from disconnecting, establishing that subjective pressure without demonstrable consequences does not constitute a breach.
AustraliaEmployment and HR
Cooper Grace Ward
Cooper Grace Ward