Australia：数据保护法、网络犯罪、罚款与刑罚
Privacy Act reform gave the OAIC civil penalties from Dec 2024 and created a statutory privacy tort in 2025; a Children's Code is due Dec 2026.
- Law
- Privacy Act 1988 (POLA Act 2024 reform)
- Authority
- OAIC (Office of the Australian Information Commissioner)
- Max fine
- Greatest of A$50M, 3x the benefit obtained or 30% of adjusted turnover
- Breach notification
- —
- DPO
- —
Crimes
| Unauthorised access or modification with intent to commit a serious offence | Criminal Code Act 1995, s.477.1 | Up to 10 years |
| Access to restricted data | Criminal Code Act 1995, s.478.1 | Up to 2 years |
| Identity crime | Criminal Code Act 1995, Part 9.5 | — |
Risks
- Statutory tort for serious invasion of privacy (since 10 Jun 2025)
- OAIC civil penalties (Australian Clinical Labs, A$5.8M; action against Optus)
- Children's Online Privacy Code and automated-decision transparency (10 Dec 2026)
- Australian Clinical Labs: first civil penalty under the Privacy Act (2022 attack, about 223k people)
- Optus: OAIC civil action filed in Aug 2025 (9.5M people)
来源: LexisNexis AU · McCullough Robertson · OAIC · Federal Register of Legislation – Criminal Code