The Privacy Amendment (Enhancing Privacy Protection) Bill 2012 was passed on 29 November 2012 and will significantly change Australian privacy law.

From March 2014, both public and private businesses must comply with the changes which include personal information may not be used for direct marketing unless certain requirements are satisfied.

Companies need to be aware of the penalties for noncompliance, including civil penalties of up to $220,000 for individuals and $1.1 million for companies in the case of a serious or repeated interference with the privacy of an individual.

All businesses should review their privacy procedures to ensure compliance.