澳大利亚政府发布了《隐私法修正案（个人数据保护）法案2026》的草案立法1，这是对现行隐私保护制度的第二阶段改革。该法案包含约40项措施1，其中最具开创性的是引入世界首创的"公平合理"测试1，要求组织只有在公平合理的情况下才能收集、使用或披露个人信息1。这一改革将数据保护的责任从个人转移到组织1。
该法案还包括多项配套保护措施1。敏感信息的定义得到扩展1，对同意的要求也进一步强化1。法案引入了"被遗忘权"1，允许个人要求删除其个人数据。此外，组织如发生数据泄露事件，必须在72小时内向监管机构报告1。大型数字平台被定义为年收入达4.5亿澳元或月活跃用户250万以上的平台1，精准位置追踪数据则被界定为设备精确定位到500米范围内并随时间跟踪的信息1。公开评论征询的截止日期为9月18日1。
The Australian government has released draft legislation for the Privacy Act Amendment (Personal Data Protection) Bill 2026, marking the second phase of comprehensive privacy law reform 1. The groundbreaking proposal introduces approximately 40 measures designed to modernize data protection standards across the country 1.
The centerpiece of the reform is a world-first "fair and reasonable" test, which requires organizations to collect, use, or disclose personal information only when doing so is fair and reasonable 1. This approach fundamentally shifts data protection responsibility from individuals to organizations 1. The draft bill expands the definition of sensitive information, strengthens consent requirements, and introduces a "right to be forgotten" 1. Additionally, organizations must report data breaches to the regulator within 72 hours of discovery 1.
The legislation specifically targets large digital platforms, defined as those with annual revenue of AUD 450 million or more than 2.5 million monthly active users 1. Precise location tracking data is also addressed, defined as device positioning accurate to within 500 meters and tracked over time 1. Public consultation on the draft bill is open until September 18 1. This reform builds on the first wave of privacy amendments, which became law by the end of 2024 1, and follows a comprehensive three-year review by the Attorney-General's Department that produced over 100 reform proposals in 2023 1.
评论
还没有评论，欢迎留下第一条。