Data Protection & Privacy - Australia

Informed advice on every aspect of data protection and privacy laws

Thanks to decades of experience, we have deep expertise in all areas of data protection and privacy law.

Our firm has played an important part in reforming privacy laws in Australia, advising on the many changes and government reviews that have shaped the law in this area. Our clients include leading businesses headquartered in Australia such as Telstra, Medibank, Wesfarmers Group and, and many multinational corporations seeking to understand their exposure to Australian data protection regulation.

In March 2014 the penalties for serious contraventions of the Australian Privacy Act increased substantially to a maximum amount of A$1.7 million. This, in combination with regular media coverage of serious data security breaches, has caused many businesses to re-evaluate their approach to complying with that legislation.

Our experience enables us to advise you on every aspect of your data protection compliance regime, including strategic planning, responding to changes in law, monitoring compliance, training and dealing with data breaches. We also advise clients regularly on their potential exposure when entering into transactions that involve the disclosure of personal data outside Australia, including contractual and other risk mitigation measures. Whatever you need, you can rely on us to deliver timely, sensible and commercial advice to help manage your data protection risks.

Show moreShow less

Advice on all aspects of privacy and data protection legislation

Our data protection lawyers advise domestic and multinational clients operating in all sectors, including telecommunications, IT, financial services, health, consumer and retail and government in the following ways: 
  • The application of the data protection and privacy legislation, including the complex sector-specific regulation, in particular of consumer creditworthiness information and health information
  • Managing marketing, outsourcing and other core activities, and ensuring compliance 
  • Developing privacy policies, as well as underlying compliance practices and procedures, including training materials and conducting workshops 
  • Strategies for lobbying government, regulators and industry bodies 
  • Data protection audits and privacy impact assessments to assist with compliance
  • Negotiating and drafting contractual provisions to give contractual rights in the event of data compliance breaches 
  • Defending allegations of breaches of privacy and data protection legislation, both at the level of the office of the commissioner and in appellate tribunals
  • Developing international compliance programmes and solutions
  • Applying privacy regulations to developing technologies and techniques, including increasingly complex data analysis (“Big Data”), cloud computing, hosting data centres in Australia, cookies, online behavioural monitoring, use of geolocation information, mobile apps and social media.

We have a full team specialising in this area.


Australia's financial institutions are experiencing more regulatory pressure than ever before. Remain at the forefront of key regulatory issues as we guide and shape the future of financial services.

Discover our latest insights into legal issues affecting your business

On 30 October 2020 the Australian Government commenced a broad-based review of Australian Privacy Laws by releasing an Issues Paper seeking feedback on possible privacy law reforms.

04 November 2020

In this alert, we identify the main takeaways from the Data Strategy, describe the major role played by KWM and Galexia in the development of the strategy and highlight the key questions on which the...

03 November 2020

This article was written by Cheng Lim and Madeline Close. Landmark proceedings commenced ASIC commenced proceedings on 21 August 2020 against RI Advice Group Pty Ltd (RI) alleging its failure to...

26 August 2020

This article was written by Kirsten Bowe, Soeun Hong and Daniela Lai. The increasing importance of cyber security Cyber attacks have rapidly become an alarming and more frequent issue around the...

25 August 2020

This site uses cookies to enhance your experience and to help us improve the site. Please see our Privacy Policy for further information. If you continue without changing your settings, we will assume that you are happy to receive these cookies. You can change your cookie settings at any time.

For more information on which cookies we use then please refer to our Cookie Policy.