Book a call
Emergency supportSend a messageBook a call

Articles on Data Privacy

Every article filed under Data Privacy, newest first. The rest of the archive is one chip away. Each chip is a drawer, and this one is open.

29 posts 2021–2026 latest 31 Aug 2026

Fig. 1 — Posts by month in Data Privacy. It follows the search below. A dot is a month when this drawer got nothing new.

The index

Every post in this category, newest first. Pick another category, or search the titles and excerpts. The search is literal: every word you type has to appear, which is how computers like it.

Showing 16 of 29 posts

2026 6 posts

  1. Tranche 2: The Privacy Act Finally Gets Fair (and Reasonable)

    Today the government released the draft Tranche 2 Privacy Act bill. It replaces three of the core privacy principles with one question, "is this fair and reasonable?", and it puts a consent gate in front of trading personal information, which may include the pixels on your website. Here is what the draft says, how the test works, and how to sort your own data flows before submissions close.

    Data PrivacyA Flemish-style cottage garden where a house-sitter stands at the gate with a large key and a watering can, while merchants and odd hybrid creatures wait by the open door behind her and a glowing laptop sits on the gatepost.
  2. Pixel Imperfect: What the OAIC's Tracking Pixel Rulings Mean for Your Website

    On 24 June, the Privacy Commissioner released two determinations: Medmate and Monash IVF broke the Privacy Act with the tracking pixels on their websites. Here is what a pixel actually sends, why a cookie banner did not count as consent, and how to check and fix your own site.

    Data PrivacyA Flemish-style apothecary shop where a thimble-sized clerk on the counter copies the label of each jar a cloaked customer picks up, while a pigeon with a satchel waits on the windowsill and a glowing laptop sits among the jars.
  3. Session Replay: Smile, You're on Candid Camera

    On 25 February 2026, France's privacy regulator published a draft recommendation on session replay: consent first, mask by default, record less and delete soon. A week later, the Conseil d'État confirmed that Criteo's "pseudonymous" IDs were personal data all along. Here is what a replay really records, and how to configure one you can defend.

    Data PrivacyA Flemish-style village market where a woman in a red cloak reaches for a loaf, while behind her, hidden in a hay cart, an owl-headed painter creature copies her every movement onto an easel, a small laptop balanced beside its paint pots.
  4. Global Privacy Control: When the Browser Says No for You

    On 11 February 2026, Disney agreed to pay US$2.75 million after California alleged that a Global Privacy Control signal on one device did not stop the selling and sharing on the rest of a logged-in account. Here is how the signal travels, what honouring it now means, and how to wire it into your tags this week.

    Data PrivacyA Flemish-style winter lane where a wooden front door has a red wax seal with an open palm pressed onto its letterbox; a pamphlet seller at the gate turns away, a heron-like creature stuffed with leaflets waits in the queue, and another hawker creeps round to a side window where a laptop sits on the sill.
  5. Counting Heads Without Asking: The UK's New Analytics Cookie Exemption

    Since 5 February 2026, UK websites can run some analytics without asking first, as long as visitors can say no. The exception is narrower than the headlines, the fines are now £17.5 million or 4% of turnover, and your GA4 settings decide which side of the line you are on.

    Data PrivacyA Flemish-style market gate where a clerk on a stool clicks a brass tally counter as villagers, goats and a cart pass, while an old woman pulls a small bell on a rope and the clerk lifts his thumb off the counter for her, a closed laptop resting on a barrel beside him.
  6. Privacy Policies: Somebody Is Finally Reading the Fine Print

    In January 2026, the OAIC began its first compliance sweep, reading the privacy policies of about 60 businesses that collect information in person. The policy is now a document that gets tested. Here is what APP 1.4 requires, why a missing line can now cost money, and how to find the collection points your policy forgot.

    Data PrivacyA Flemish-style market square where a robed inspector reads a very long scroll through a magnifying glass while nervous stallholders, a cart-hirer and a pawnbroker wait with their own scrolls, and a modern clipboard lies on the table beside him.

2025 6 posts

  1. Age Assurance: Prove You're 16 Without Proving Who You Are

    On 10 December 2025, Australia's social media minimum age took effect. Platforms must now work out who is under 16, and the privacy law says exactly what they may keep afterwards: the answer, not the face. Here is how age checks really work, where they fail, and what to ask any age-check vendor.

    Data PrivacyA Flemish-style town gate on market day where a gatekeeper holds a small wax-sealed token up to the light while a young person in a plain carnival mask waits in front of him, a queue of peasants and a goat behind, and a glowing laptop on the gatehouse windowsill.
  2. The Digital Omnibus: Europe Tries to Eat the Cookie Banner

    On 19 November 2025, the European Commission proposed moving the EU's cookie rules into the GDPR, with a short list of cookies that would need no consent, a single-click "no", and a six-month break after a refusal. It is a proposal, not law. Here is what the article text actually says, which of your tags it might free from the banner, and what to change in your CMP now.

    Data PrivacyA Flemish-style winter village feast where robed officials at the head of a long table carve an enormous banner-shaped biscuit into slices while villagers lean in with plates, and a glowing laptop sits among the bread and cheese.
  3. Privacy Sandbox: The Sandcastle the Tide Took Back

    On 17 October 2025, Google retired Topics, Protected Audience, Attribution Reporting, IP Protection, Related Website Sets and more. CHIPS, FedCM and Private State Tokens stay, and so do third-party cookies. Here is how the Sandbox worked, why the tide took it back, and how to check what your own stack loses.

    Data PrivacyA Bruegel-style grey beach where a large, elaborate sandcastle slides into the incoming tide while robed clerks and peasants with spades stand around it, one still shovelling, one writing in a ledger, and a glowing laptop sits on a driftwood plank at its foot.
  4. CCPA Grows Up: Risk Assessments, Audits and the Right to Ask for a Human

    California has approved new CCPA rules on automated decisions, risk assessments and cybersecurity audits. They start on 1 January 2026 and phase in to 2030. Here is what counts as an automated decision, what the rules make a business do about it, and what to check this week.

    Data PrivacyA Flemish-style toll bridge on a grey morning where a wooden gate arm lifts by itself, driven by a glowing laptop on a post, while peasants, an apple cart and a goat queue and a clerk with a large key sleeps in the toll house window.
  5. Safari 26: Fingerprints Off the Glass

    Safari 26 now stops known fingerprinting scripts from reading device details, keeping long-lived cookies, and seeing your query parameters and referrer. It did not start deleting your gclid. Here is what changed, what the marketing panic got wrong, and how to test your own tags.

    Data PrivacyA Flemish-style market square seen through a large curved pane of glass, where a glazier in a leather apron wipes greasy fingerprints off the glass while a hooded figure with an ink pad and magnifying glass scowls on the other side, and a smartphone lies on the workbench.
  6. Productivity Over Privacy? The Commission's Outcomes Gambit

    On 5 August 2025, the Productivity Commission proposed a second way to comply with the Privacy Act: meet an outcome, not a checklist. Here is what rules-based and outcomes-based compliance really mean, what Montana learnt when it tried "reasonable and prudent" on its highways, and which privacy controls you need whichever track wins.

    Data PrivacyA Flemish-style village crossroads where a robed clerk stands under a two-armed signpost; down one road villagers queue while a scribe ticks boxes in a ledger, down the other a judge inspects a finished cottage, and an open laptop rests on a milestone.

2024 6 posts

  1. Tranche 1 Passes: The Privacy Act Gets a Tort, a Children's Code and ADM Notices

    Yesterday the Governor-General signed the first tranche of Privacy Act reforms, and most of it switched on this morning. Here is what changed: a penalty ladder with a new bottom rung, a tort with five elements, a Children's Online Privacy Code, and a privacy-policy duty for automated decisions.

    Data PrivacyA Flemish-style winter village square where a robed magistrate cuts the first thin slice from a huge wheel of cheese on a trestle table, a laptop beside the knife, while peasants, clerks, a goat and two children queue behind a rope for the rest.
  2. LinkedIn Trained on Your Posts: The Opt-Out Nobody Saw

    On 18 September, LinkedIn members found a new setting that let the company train AI on their posts. It was already on. Members in Europe never saw it, and two days later the UK joined them. Here is why the same company offered two different deals on the same day, why the default does nearly all the deciding, and what to do about the posts your staff write.

    Data PrivacyA Bruegel-style market square where villagers pin letters to a noticeboard while clerks behind it copy each letter into a brass mechanical scribe, and a small lever, already pulled down, stands unnoticed behind a hay cart.
  3. National Public Data: The Data Broker You Never Met

    A Florida background-check company most people had never heard of lost a file with hundreds of millions of Social Security numbers, and the headlines said "2.9 billion people". Here is what a data broker is, how it builds a profile of you without ever meeting you, what the numbers really mean, and why an Australian should care.

    Data PrivacyA Bruegel-style archive room where a robed clerk pastes scraps of paper into a thick leather folder among towering shelves of identical folders, while behind him a hooded figure carries an armful of folders out of an open back door into the night, and a small laptop sits among the quills.
  4. Private Cloud Compute: Can AI in the Cloud Keep a Secret?

    On Monday, Apple said its AI will send some of your requests to its servers, and that nobody there, Apple included, will be able to read them. Here is how Private Cloud Compute is meant to keep that secret, which parts your phone can check, which parts are still a promise, and what changes when Siri hands your question to ChatGPT.

    Data PrivacyA crowded Flemish-style market square with a windowless stone tower at its centre. A villager posts a sealed letter through a slot, a hooded scribe inside translates it in a bare room, and a notary checks the tower's seal against a huge public ledger chained to a post while a server cabinet glows at the tower's base.
  5. Incognito Isn't Invisible: What Google's Settlement Means for Tracking

    On 1 April 2024, Google's Incognito lawsuit settlement became public: billions of records to delete or clean, new wording on the Incognito screen, and no money for the class. Here is what private browsing really hides, what it never could, and what that means for the tags on your own website.

    Data PrivacyA Flemish-style village market where a man in a wide black hat and round dark spectacles tiptoes through the crowd, while every stall-keeper calmly writes about him in a ledger and a laptop glows on a barrel.
  6. DNS over TLS: The Acronym Nightmare That Protects Your Privacy

    Let’s set the scene: you’re sitting in a bustling Hobart café (or as bustling as anything in Hobart can get — other than the “organic goat food” section of the local farmers market), sipping on a double-steeped Darjeeling, aged five years in a Huon pine humidor carved by retired boatbuilders, infused with a whisper of Tasmanian bush peppermint, a rogue sprig of wild wattleflower, and precisely one clove — all brewed in rooftop-harvested Hobart rainwater, filtered through quartz and naïve optimism.

    Data Privacy

16 of 29 shown