Australian privacy law has changed several times since 2024, and many businesses are still running policies written before those changes. ComplianceKit generates a policy built for the current law and keeps it up to date.
The rules have changed multiple times since 2024. Here's what you need to know.
Maximum penalties for serious privacy breaches rose from $2.2 million to $50 million in December 2022. Since December 2024, the OAIC can also issue infringement notices without going to court, and in 2026 it began reviewing businesses' privacy policies.
Since June 2025, individuals can take businesses to court for serious invasions of privacy, without needing to prove financial loss. The first cases were brought in 2025.
Privacy policies must disclose automated decision-making from 10 December 2026. The government has also proposed removing the small business exemption, which would bring millions more businesses under the Privacy Act, though no date has been set.
Many privacy policy generators are built for the US market and adapted for other countries. That means Australian specifics like the NDB scheme, all 13 Australian Privacy Principles and the June 2025 statutory tort often get missed.
ComplianceKit is built from the Australian Privacy Act 1988. With Managed Compliance, your policy is automatically updated whenever the law changes, so you don't have to monitor legislation yourself.
Every policy includes the NDB scheme
The requirement most generators miss
Updated for 2025 reforms
Statutory tort (right to sue), automated decision-making
Managed Compliance available
We update your policy when laws change. $29/year
What's Covered
Get your privacy policy in 3 simple steps
Our guided questionnaire walks you through all the information needed for your privacy policy.
Preview your policy before downloading. Make any customisations you need.
Get instant access to your policy. Download in multiple formats and deploy to your website.
Professional features without the complexity
Complete coverage of all 13 Australian Privacy Principles required by law.
Language customised for your business type and how you collect, use, and store data.
Download as PDF, Word (DOCX), HTML, or plain text. Use anywhere you need.
Explains how you handle a data breach under the Notifiable Data Breaches scheme.
Written in clear, understandable language your customers can actually read.
Optional subscription for automatic updates when Australian privacy law changes.
No subscription required. Own your policy forever.
For businesses operating in Australia and New Zealand
(billed annually, in addition to base price)
Everything in Generate Once, PLUS:
Preview policy structure before payment • No subscription required • Instant delivery
Australian privacy law has unique requirements that US-based generators don't cover. You need a policy that includes all 13 Australian Privacy Principles and the Notifiable Data Breaches scheme.
Most customers complete the questionnaire and download their policy in about 5-10 minutes.
Every policy includes PDF, Word (DOCX), HTML, and plain text (TXT) formats. Download all formats with your purchase.
A complete Australian privacy policy covering all 13 APPs, the NDB scheme, 4 file formats, and lifetime dashboard access. One-time payment, own it forever.
Managed Compliance ($29/year) is optional. It provides automatic updates when Australian privacy law changes, hosted policy URL, and email notifications. Perfect for "set it and forget it" compliance.
Yes! You can add Managed Compliance anytime from your dashboard.
Each policy is $79. However, the Trans-Tasman Bundle ($149) covers both countries and saves you $9 compared to buying separately.
With Managed Compliance, we automatically update your policy when laws change and notify you via email. Without Managed Compliance, you'll need to manually update the downloaded files yourself using the new legal requirements.
You can regenerate your policy anytime for free with updated business information. With Managed Compliance, it's one-click regeneration.