Data Protection and Privacy

Data Protection & Privacy - Australia

Informed advice on every aspect of data protection and privacy laws

Thanks to decades of experience, we have deep expertise in all areas of data protection and privacy law.

Our firm has played an important part in reforming privacy laws in Australia, advising on the many changes and government reviews that have shaped the law in this area. Our clients include leading businesses headquartered in Australia such as Telstra, Medibank, Wesfarmers Group and, and many multinational corporations seeking to understand their exposure to Australian data protection regulation.

In March 2014 the penalties for serious contraventions of the Australian Privacy Act increased substantially to a maximum amount of A$1.7 million. This, in combination with regular media coverage of serious data security breaches, has caused many businesses to re-evaluate their approach to complying with that legislation.

Our experience enables us to advise you on every aspect of your data protection compliance regime, including strategic planning, responding to changes in law, monitoring compliance, training and dealing with data breaches. We also advise clients regularly on their potential exposure when entering into transactions that involve the disclosure of personal data outside Australia, including contractual and other risk mitigation measures. Whatever you need, you can rely on us to deliver timely, sensible and commercial advice to help manage your data protection risks.

Show moreShow less

Advice on all aspects of privacy and data protection legislation

Our data protection lawyers advise domestic and multinational clients operating in all sectors, including telecommunications, IT, financial services, health, consumer and retail and government in the following ways: 
  • The application of the data protection and privacy legislation, including the complex sector-specific regulation, in particular of consumer creditworthiness information and health information
  • Managing marketing, outsourcing and other core activities, and ensuring compliance 
  • Developing privacy policies, as well as underlying compliance practices and procedures, including training materials and conducting workshops 
  • Strategies for lobbying government, regulators and industry bodies 
  • Data protection audits and privacy impact assessments to assist with compliance
  • Negotiating and drafting contractual provisions to give contractual rights in the event of data compliance breaches 
  • Defending allegations of breaches of privacy and data protection legislation, both at the level of the office of the commissioner and in appellate tribunals
  • Developing international compliance programmes and solutions
  • Applying privacy regulations to developing technologies and techniques, including increasingly complex data analysis (“Big Data”), cloud computing, hosting data centres in Australia, cookies, online behavioural monitoring, use of geolocation information, mobile apps and social media.

We have a full team specialising in this area.


Australia's financial institutions are experiencing more regulatory pressure than ever before. Remain at the forefront of key regulatory issues as we guide and shape the future of financial services.

Discover our latest insights into legal issues affecting your business

King & Wood Mallesons and the International Swaps and Derivatives Association, Inc. have published a new whitepaper that sets out practical steps for developing smart derivatives contracts.

04 October 2018

How do organisations move beyond the paradigm of consent and start asking about the data use and governance models that we should start thinking about in the future?

30 August 2018

The Federal Government have published a draft bill to help national security and law enforcement agencies address challenges that the increasing use of encrypted communications and devices presents...

17 August 2018

The energy sector will be part of the first wave of the Consumer Data Right roll out, which will give consumers access to data about themselves in a readily usable form

16 August 2018