Our regulatory approach
We have a range of regulatory responsibilities and powers under the Privacy Act 1988 and the Freedom of Information Act 1982 (FOI Act) and other legislation.
The documents below outline our approach to using our regulatory powers. They’re designed to guide our decision-making process when taking regulatory action on privacy, freedom of information, Consumer Data Right and digital health issues, as well as our international efforts.
Organisations with obligations under the Privacy Act or FOI Act, as well as the public, will also find them helpful to understand our regulatory approach.
OAIC regulatory priorities
We’ve identified four broad areas for regulatory focus
Making claims of legal professional privilege
This guidance explains our approach to seeking information about any claims for legal professional privilege (LPP)
Statement of regulatory approach
In June 2024, OAIC issued a statement of regulatory approach to guide its regulatory decision making
Consumer Data Right
Consumer Data Right regulatory action policy
How we exercise our Consumer Data Right regulatory powers
Compliance and enforcement policy
How we work with the Australian Competition and Consumer Commission to encourage compliance with Consumer Data Right rules and legislation
