Australia Privacy Act reforms mandate explicit consent for programmatic advertising data
The Australian government has released exposure draft legislation for significant Privacy Act reforms, introducing a 'fair and reasonable' data handling test and a right of erasure for large digital platforms. These proposed changes would mandate explicit consent for programmatic advertising and data trading, directly impacting the operational compliance requirements for streaming services and ad-tech providers in the region.
Key Takeaways
- A new 'fair and reasonable' test will apply to all data collection, even if a user has provided consent or read a privacy policy.
- Programmatic advertising and data brokerage are classified as 'trading' personal information, requiring voluntary and unambiguous opt-in consent.
- Large digital platforms with over 2.5 million monthly Australian users must comply with a new statutory right of erasure.
- Entities face a strict 72-hour deadline to notify the OAIC of eligible data breaches, replacing the previous 'as soon as practicable' standard.
- Precise geolocation tracking data is now classified as sensitive information, requiring specific consent before collection.
Why It Matters
The proposed legislation shifts the burden of proof to streaming platforms, requiring them to demonstrate that data collection is objectively fair regardless of user consent. By classifying programmatic advertising as data trading, the reforms threaten the current automated ad-tech ecosystem, likely forcing a move away from passive tracking pixels toward active consent flows. This regulatory shift aligns Australia more closely with GDPR standards but introduces unique complexities, such as the specific targeting of large digital platforms for erasure rights. Industry participants should monitor the finalization of the OAIC Children’s Online Privacy Code by December 2026, as it will serve as the first major implementation of these revised privacy principles.
Additional Context
The Australia Privacy Amendment Bill provides the specific legal framework for these changes, explicitly categorizing pixel-based data collection as a form of information trading that necessitates explicit user opt-in.
Read full article at corrs.com.au
Enjoy our coverage?
Add StreamingMeme as a preferred source on Google to see more of our streaming news at the top of your Search results.
Add as preferred source