Office of the Australian Information Commissioner

Privacy Impact Assessments (PIAs) are an important tool for identifying and managing privacy risks, building public trust, and ensuring personal information is handled responsibly.   Australian Government agencies are required to undertake a PIA for projects involving high privacy risks. It’s also recommended for APP entities to consider undertaking a PIA for high-risk projects, as it can help identify and address privacy risks early in the design and delivery process. We have published a new blog outlining when PIAs are required, when they should be considered, and the guidance available to support organisations in conducting them.   The Australian community expects government agencies and organisations to protect personal information and consider privacy throughout the development of programs, services and initiatives.   Read our blog to learn more about the importance of PIAs and to explore our available guidance: https://lnkd.in/geyz_VHG

The Office of the Australian Information Commissioner has released its latest Notifiable Data Breach (NDB) statistics for January to June 2026, and the statistics show that more Australians are being affected by large-scale incidents. Personal information such as your name, contact details and identity documents can be exposed in a data breach, potentially putting you at risk of scams and identity theft. Be cautious of unexpected messages requesting personal information, use strong and unique passwords and stay alert to suspicious activity on your accounts. Explore the latest insights in our interactive NDB Statistics Dashboard: https://lnkd.in/gNeeRxmv Learn about NDBs and how to report a data breach on our website: https://lnkd.in/gEj5gJ9y

The Office of the Australian Information Commissioner's 2025–26 Annual Report has been published. Our priorities during the year were: • rebalance power and information asymmetries • rights preservation in new and emerging technologies • strengthen the information governance of the Australian Public Service • ensure timely access to government information. This report reflects our successes under last year’s Corporate Plan and highlights the important work of the OAIC amidst increased demand and growing community awareness of rights to privacy and information access. Read the Annual Report on our website: https://lnkd.in/gMFrPbxR

Good compliance builds confidence within the community. Many Australian Government agencies are meeting their Freedom of Information (FOI) disclosure log obligations under the FOI Act. Best-practice features adopted by agencies so far, as recommended in the FOI Guidelines, include: • making disclosure logs easy to find • providing embedded search functionality • offering filtering and sorting options • publishing clear descriptions of released information • making documents available in more than one accessible format. It's important your agency understands the effectiveness of its information access systems and how they comply with the FOI Act. Agencies are encouraged to use our self-assessment tool to identify areas for improvement and see what's working well: https://lnkd.in/guj687tP Access our other FOI guidance: https://lnkd.in/gWq9hFaA

We're recruiting for multiple APS 6 Policy Officers to join our Policy and Statutory Functions team. This is an opportunity to contribute towards the OAIC's engagement with legislative and policy processes, discharge of statutory responsibilities, engagement with key stakeholders, and coordination of activities within various funded programs of work. In this role you'll: • successfully deliver any allocated workstream, from conception, planning, project management, stakeholder engagement, product delivery and review to continuous improvement • prepare high-quality strategic policy and regulatory advice drawing on research and analysis • build strong, effective relationships with internal and with external stakeholders • engage in agile and innovative ways of working. Find out more and how to apply on our website: https://lnkd.in/g9QF7VUP Applications close on Sunday, 1 November 2026 at 11:59pm AEDT.

As smart glasses and other surveillance wearables become more common, organisations need to consider what their growing use means for privacy. When adopting emerging technologies, privacy should be built in from the outset, not considered after implementation. A privacy-by-design approach can help organisations identify privacy risks early, consider how personal information will be collected and handled, and build appropriate protections into systems and processes. Embedding privacy into innovation can help your organisation meet its privacy obligations while maintaining community trust. As Privacy Commissioner Carly Kind highlighted in her blog, protecting privacy must remain central as surveillance tech become more common. Read the blog: https://lnkd.in/gV4kgZ54 Access our privacy guidance for organisations: https://lnkd.in/gpFBPKUX

October is Cyber Security Action Month. A time to pause and think differently about how we stay secure online. This year’s theme, 'Take a second. Stay secure.' reminds us that small, everyday choices can make a meaningful difference. We're supporting the National Office of Cyber Security in promoting strong cyber security and privacy. Taking steps to strengthen cyber security can help protect personal information and reduce the risk and impact of data breaches. Cyber security is everyone's responsibility, whether you're at work, home or in the community. Learn more about protecting yourself and your organisation, including key actions: https://lnkd.in/gS3KxAPG Learn more about privacy, including your rights and guidance for organisations on our website: https://lnkd.in/gHQpd2_X #CyberMonth2026 National Cyber Security Coordinator

The Australian Information Commissioner has today commenced an investigation into the privacy practices of the maker of the 'HeyCyan' Smart Glasses phone application, Shenzhen Qingcheng Future Technology Co. Ltd (Shenzhen Qingcheng). The OAIC has been monitoring the roll out of smart glasses since early 2026, and in August 2026 received correspondence from the Attorney-General requesting the Privacy Commissioner examine the privacy implications of smart glasses devices. The Privacy Commissioner Carly Kind has published a blog summarising the outcomes of preliminary inquiries into various manufacturers and distributors of smart glasses, including that the OAIC did not receive a response from Shenzhen Qingcheng. The Commissioner said, “The Australian community has expressed its concern about the proliferation of smart glasses and other surveillance wearables. Given the particular risks the OAIC has identified with the HeyCyan app, I would urge responsible retailers to consider whether it is appropriate to continue making these devices available.” Learn more about the investigation on our website: https://lnkd.in/gvk3QtVQ Read the Commissioner’s blog: https://lnkd.in/gV4kgZ54

Access to information is fundamental to an open and accountable government. Over the past week, we’ve marked International Access to Information Day by highlighting the connection between Transparency + Access = Information Integrity. From proactive disclosure and good information management to effective freedom of information (FOI) practices and making trusted information easier to find, government agencies have an important role in ensuring authoritative information is accessible to the community. While #IAID2026 has come to an end, the messaging and work continues. We encourage Australian Government agencies to keep strengthening transparency and access throughout the year. Make sure you’re FOI informed and explore our guidance and resources: https://lnkd.in/gWq9hFaA