Regulatory networks

We work with international and domestic regulators to address challenges faced across the data protection, privacy and information access landscape.


Privacy Authorities Australia

Privacy Authorities Australia (PAA) is a group of Australian privacy authorities who meet regularly to promote best practice and consistency of privacy policies and laws. We join privacy representatives from all states and territories as a member of PAA.

Association of Information Access Commissioners

This Australian and New Zealand network is for information access authorities who administer freedom of information legislation. Members meet twice a year to share knowledge and upcoming projects.

Digital Platform Regulators Forum

The Digital Platform Regulators Forum (DP-REG) is an initiative of Australian independent regulators to share information about and collaborate on cross-cutting issues and activities relating to the regulation of digital platforms. This includes consideration of how competition, consumer protection, privacy, online safety and data issues intersect.

DP-REG was formed in 2022 and its members are the OAIC, Australian Communications and Media Authority (ACMA), Australian Competition and Consumer Commission and Office of the eSafety Commissioner.

See the DP-REG Terms of Reference on the ACMA's website.


Asia-Pacific Economic Cooperation

Asia-Pacific Economic Cooperation (APEC) administers a number of working groups including a working group focused on privacy, data transfers and digital interactions. In 2007, APEC economies endorsed the APEC Data Privacy Pathfinder (the Pathfinder) to guide implementation of the APEC Privacy Framework.

APEC Privacy Framework

The APEC Privacy Framework aims to promote a consistent approach to information privacy protection across member economies, while avoiding the creation of unnecessary barriers to information flows. Consistent with the Organisation for Economic Co-operation and Development’s (OECD) Privacy Guidelines, the Privacy Framework’s principles and implementation guidance are focused on four main goals:

  • to develop appropriate privacy protections for personal information
  • to prevent the creation of unnecessary barriers to information flows
  • to enable multinational businesses to implement uniform approaches to the collection, use and processing of data
  • to facilitate both domestic and international efforts to promote and enforce information privacy protections.

Cross-border Privacy Enforcement Arrangement

The Cross-border Privacy Enforcement Arrangement (CPEA) commenced on 16 July 2010. The OAIC is a participant in the CPEA.

The CPEA provides a framework for privacy regulators to cooperate, and to seek information and advice from each other on cross-border enforcement matters. Any privacy enforcement authority in an economy may participate in the CPEA, for example privacy commissioners' offices, data protection authorities or consumer protection authorities that enforce privacy laws.

In accordance with the CPEA, we published the Summary Statement of Privacy Enforcement Authority enforcement practices, policies and activities (July 2014).

The Data Privacy Pathfinder initiative also involves the development and implementation of a Cross-border Privacy Rules (CBPR) system. The system provides a way for businesses of participating economies to be recognised as meeting the standards of the Privacy Framework. Australia is implementing the CBPR, which will be enforced by the OAIC.

Asia Pacific Privacy Authorities Forum

The Asia Pacific Privacy Authorities (APPA) Forum is the principal forum for privacy authorities in the Asia Pacific region to form partnerships and exchange ideas about privacy regulation, new technologies and the management of privacy enquiries and complaints.

The OAIC actively participates in APPA forums, activities and initiatives such as the annual Privacy Awareness Week.

Common Thread Network

The Common Thread Network (CTN) brings together data protection and privacy authorities from Commonwealth countries.

Global Privacy Enforcement Network

The Global Privacy Enforcement Network (GPEN) is designed to facilitate cross-border cooperation in the enforcement of privacy laws.

GPEN builds on the Organisation for Economic Co-operation and Development's (OECD) Recommendation on Privacy Law Enforcement Cooperation which recognised the need for greater cooperation between privacy enforcement authorities on cross-border privacy matters.

GPEN Alert

In October 2015, we joined with a number of other GPEN members to launch an information sharing system called GPEN Alert. GPEN Alert is a multilateral system that will enhance coordination between GPEN member organisations by enabling participants to confidentially share information about investigations.

Global Privacy Assembly

The Global Privacy Assembly (GPA) first met in 1979 as the International Conference of Data Protection and Privacy Commissioners. The GPA is the leading global forum of data protection and privacy authorities with more than 130 members from across the globe. It works throughout the year on global data protection policy issues, adopts resolutions and statements addressed to governments and policymakers, and arranges an annual conference.

Australian Information Commissioner and Privacy Commissioner, Angelene Falk, was elected to the Executive Committee at the 40th annual conference in Brussels in October 2018.

Global Cross Border Enforcement Cooperation Arrangement

The Global Cross Border Enforcement Cooperation Arrangement (GCBECA) commenced on 27 October 2015. The OAIC was one of the original signatories to the GCBECA.

The GCBECA encourages and facilitates cooperation and collaboration in the enforcement activities of global privacy enforcement authorities. The GCBECA provides a framework under which privacy enforcement authorities are encouraged to:

  • share information about potential or ongoing investigations
  • coordinate enforcement activities
  • share best practices and experiences.

International Conference of Information Commissioners

The International Conference of Information Commissioners (ICIC) is constituted by Information Commissioners and Ombudsmen from across the globe who meet regularly to discuss issues related to the protection and promotion of the right to public information for the benefit of citizens.