---
title: "Australia — AdTech & Commercial Privacy | Data Protection Monitor"
canonical: https://dataprotection.gi/jurisdictions/australia/adtech-and-commercial-privacy/
source_html: /jurisdictions/australia/adtech-and-commercial-privacy/index.html
description: "Australia — AdTech & Commercial Privacy: adtech_and_commercial_privacy AdTech & Commercial Privacy 6 sub-modules 3 claims Amber ▾ # Direct marketing and tracking-technology oversight exist and are being actively enforced,"
generated_at: 2026-10-25T04:46:50Z
content_sha256: 4a57d0d3ca4e0ee77f5ca72bf877a7b285f637930bf9bcada20f30460d8ee87a
generator: "fe-fleet/md-twin@1.0"
---
# Australia — AdTech & Commercial Privacy | Data Protection Monitor

### D7AdTech & Commercial Privacy6 sub-modules3 claimsAmber▾#

Direct marketing and tracking-technology oversight exist and are being actively enforced, but dark-pattern-specific rules, recognised opt-out signals, clean-room rules and cross-context-advertising concepts (as distinct legal categories) were not evidenced.

Primary framework Privacy Act 1988 (Cth) APP 7; Spam Act 2003 (Cth) (adjacent, ACMA-administered)

Supervisory authority [Office of the Australian Information Commissioner (OAIC)](https://www.oaic.gov.au/)

Traffic-light rationale — Amber Direct marketing and tracking-technology oversight exist and are being actively enforced, but dark-pattern-specific rules, recognised opt-out signals, clean-room rules and cross-context-advertising concepts (as distinct legal categories) were not evidenced.

#### Sub-modules (6)

#### Cookies And TrackersAmber

OAIC has actively inspected tracking-pixel use in the healthcare sector.

Claims (1):

- The OAIC has inspected the use of tracking pixels by 50 healthcare providers as part of its regulatory focus on online tracking technologies in the health sector.

#### Dark PatternsRed

No dedicated dark-pattern prohibition identified in this research pass.

#### Opt Out SignalsRed

No GPC/DAA-equivalent recognised opt-out signal regime identified.

#### Clean Rooms And DcrRed

No clean-room/data-collaboration-room-specific rules identified.

#### Cross Context AdvertisingRed

No CPRA-style 'sale'/'share' construct identified in the Privacy Act.

#### Direct MarketingGreen

APP 7 mandates an easy opt-out; adjacent ACMA enforcement addresses unlawful marketing practices.

Claims (2):

- APP 7 requires an organisation to provide the individual with an easy means to opt out of direct marketing communications.
- ACMA fined Latitude Finance AUD 3.96 million for sending marketing messages without accurate contact information and a working unsubscribe function, illustrating adjacent (non-OAIC) enforcement of direct-marketing rules.

#### Key findings (3)

- — source on file
- — source on file
- — source on file

Category narrative 48 words

Australia lacks a dedicated ePrivacy/cookie-consent statute or CPRA-style 'sale'/'share' construct; commercial privacy protection instead flows from general APP obligations (notably APP 7 direct-marketing opt-out) plus targeted regulatory activity such as the OAIC's inspection of tracking-pixel use by healthcare providers and ACMA's separate Spam Act enforcement against unlawful marketing.

no periodic updates on record for this sub-brief

Evidence 3

Sources and claims (3)
- Probable[Office of the Australian Information Commissioner](https://www.oaic.gov.au/) — The OAIC has inspected the use of tracking pixels by 50 healthcare providers as part of its regulatory focus on online tracking technologies in the health sector.observed 2026-07-29
- Probable[International Association of Privacy Professionals](https://iapp.org/news/a/overview-of-the-newly-enacted-australian-privacy-principles) — APP 7 requires an organisation to provide the individual with an easy means to opt out of direct marketing communications.observed 2026-07-29
- Probable[OneTrust DataGuidance](https://www.dataguidance.com/jurisdictions/australia) — ACMA fined Latitude Finance AUD 3.96 million for sending marketing messages without accurate contact information and a working unsubscribe function, illustrating adjacent (non-OAIC) enforcement of direct-marketing rules.observed 2026-07-29