A major rewrite of Australia’s 40-year-old privacy laws could cost big businesses thousands of dollars per customer and would likely mean big, expensive overhauls of how they structure and store data to comply.
The Attorney General’s Department released a two-year review of the Privacy Act on Thursday morning, making 116 recommendations for reform including redefining “personal information” to include IP addresses and device identifiers, adding a “fair and reasonable” requirement for using information, a new personal right to sue for breaches of privacy, and a right to be erased from a company’s records.