Privacy Act 1988
The Privacy Act 1988 is Australia's main privacy law, setting the 13 Australian Privacy Principles that govern how covered businesses collect, use, store and disclose personal information.
What it means in practice
Businesses with turnover above $3 million are covered, along with health service providers of any size. A covered business that sends personal information overseas generally stays accountable for how it's handled there, and from 10 December 2026 privacy policies must explain automated decisions that significantly affect people.
Marshall Tech settles hosting regions, data access and AI use against the Privacy Act before a client's first customer record goes into a new system.
Where this shows up in our work
We apply Privacy Act 1988 across these services when we build for Australian businesses.
See our services- Tech consultancy
- AI Delivery
See it in practice
- AEO Explained: Answer Engine Optimisation for Business Websites
- Adapt Health: fractional CTO and AI integration
- AI readiness
- Fractional CTO
- Nick Hugh
- On AI consulting firms Sydney vs boutique AI consultancy delivery
- On Answer Engine Optimisation strategy
- AI Delivery
- AI Readiness Assessment Checklist for Australian Businesses
- Fractional CTO vs Full-Time CTO: When to Choose Each
- What Is a Fractional CTO? A Complete Guide for Growing Businesses
- AI Agents Explained: What Australian Businesses Need to Know in 2026
Ready to speak with our team?
Tell us what you want to fix and we will show you where this fits.
Book a call now