Tougher penalties for privacy breaches, new measures to ensure that social media companies protect users’ personal information and $25 million in additional funding for the national privacy regulator were announced earlier this week as the Federal Government foreshadowed a number of changes to privacy regulation.
The proposed tightening comes amid an outcry against social media platforms for failing to effectively monitor and remove extremist content published during and after the Christchurch massacre. While the Government has moved quickly to demonstrate action on the issue, the legislation will not be drafted for consultation until the second half of 2019, after the federal election.
In the meantime, we consider the proposal below.
What are the proposed changes?
The joint announcement by Attorney-General Christian Porter and Senator Mitch Fifield proposed key changes to the Privacy Act 1988 (Cth) (Act). These include:
- $10 million; or
- three times the value of any benefit obtained through the misuse of the information; or
- 10 per cent of a company’s annual domestic turnover
The proposed changes to the regulation would be supported by a code of conduct for social media and online platforms, requiring increased transparency about any data sharing arrangements and more specific consent of users to the collection and use of their information. These changes are consistent with regulatory moves in Europe, following the commencement of the General Data Protection Regulation in 2018, and updates to the self-regulatory code on hate speech.
To help the OAIC administer and enforce this expanded online regime, it will receive a much-needed $25 million funding boost over three years.
What’s the timing?
Despite the speed of the announcement, the timing for implementation suggests that the Government will wait until it can incorporate the findings of the Digital Platforms Inquiry, due to deliver its final report in June 2019. The Government has suggested it then intends to consult on the draft legislation in the second half of the year, which will also follow the G20 Summit in Japan where Scott Morrison wants to make social media regulation an agenda item.
The implementation timeline is in stark contrast to that of the contentious encryption legislation, which was rushed through Parliament on the last parliamentary sitting day of 2018 in response to calls by security agencies for new powers to fight terrorism.
Authors: Georgia Milne & Joshua Clarke
Lyn Nicholson, General Counsel
T: +61 2 8083 0463
Dan Pearce, Partner
T: +61 3 9321 9840
Trent Taylor, Partner
T: +61 7 3135 0668
The information in this publication is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavour to provide accurate and timely information, we do not guarantee that the information in this publication is accurate at the date it is received or that it will continue to be accurate in the future. We are not responsible for the information of any source to which a link is provided or reference is made and exclude all liability in connection with use of these sources.
Published by Georgia Milne, Joshua Clarke