Data Protection Monitor
Global Privacy & Data Protection Intelligence

Australia (AU) · Module Detail

Australia: AdTech & Commercial Privacy

← Full Australia overview Build report with Australia Request deeper dive

#

Direct marketing and tracking-technology oversight exist and are being actively enforced, but dark-pattern-specific rules, recognised opt-out signals, clean-room rules and cross-context-advertising concepts (as distinct legal categories) were not evidenced.

Primary frameworkPrivacy Act 1988 (Cth) APP 7; Spam Act 2003 (Cth) (adjacent, ACMA-administered)
Supervisory authorityOffice of the Australian Information Commissioner (OAIC)
Traffic-light rationale — AmberDirect marketing and tracking-technology oversight exist and are being actively enforced, but dark-pattern-specific rules, recognised opt-out signals, clean-room rules and cross-context-advertising concepts (as distinct legal categories) were not evidenced.

Sub-modules (6)

Cookies And TrackersAmber

OAIC has actively inspected tracking-pixel use in the healthcare sector.

Claims (1):

  • The OAIC has inspected the use of tracking pixels by 50 healthcare providers as part of its regulatory focus on online tracking technologies in the health sector.

Dark PatternsRed

No dedicated dark-pattern prohibition identified in this research pass.

Opt Out SignalsRed

No GPC/DAA-equivalent recognised opt-out signal regime identified.

Clean Rooms And DcrRed

No clean-room/data-collaboration-room-specific rules identified.

Cross Context AdvertisingRed

No CPRA-style 'sale'/'share' construct identified in the Privacy Act.

Direct MarketingGreen

APP 7 mandates an easy opt-out; adjacent ACMA enforcement addresses unlawful marketing practices.

Claims (2):

  • APP 7 requires an organisation to provide the individual with an easy means to opt out of direct marketing communications.
  • ACMA fined Latitude Finance AUD 3.96 million for sending marketing messages without accurate contact information and a working unsubscribe function, illustrating adjacent (non-OAIC) enforcement of direct-marketing rules.

Key findings (3)

  • — source on file
  • — source on file
  • — source on file
Category narrative48 words

Australia lacks a dedicated ePrivacy/cookie-consent statute or CPRA-style 'sale'/'share' construct; commercial privacy protection instead flows from general APP obligations (notably APP 7 direct-marketing opt-out) plus targeted regulatory activity such as the OAIC's inspection of tracking-pixel use by healthcare providers and ACMA's separate Spam Act enforcement against unlawful marketing.

no periodic updates on record for this sub-brief

Sources and claims (3)
  1. ProbableOffice of the Australian Information Commissioner — The OAIC has inspected the use of tracking pixels by 50 healthcare providers as part of its regulatory focus on online tracking technologies in the health sector.observed
  2. ProbableInternational Association of Privacy Professionals — APP 7 requires an organisation to provide the individual with an easy means to opt out of direct marketing communications.observed
  3. ProbableOneTrust DataGuidance — ACMA fined Latitude Finance AUD 3.96 million for sending marketing messages without accurate contact information and a working unsubscribe function, illustrating adjacent (non-OAIC) enforcement of direct-marketing rules.observed