Australians Able To Opt Out of Targeted Ads, Erase Their Data Under Proposed Privacy Reforms

An anonymous reader quotes a report from The Guardian: Australians would gain greater control of their personal information, including the ability to opt out of targeted ads, erase their data and sue for serious breaches of privacy, under a proposal to the Albanese government. On Thursday the attorney general, Mark Dreyfus, will release a review conducted by his department into modernization of the Privacy Act which calls to expand its remit to small businesses and add new safeguards for use of data by political parties. Although the document is not government policy, in January Dreyfus told Guardian Australia the right to sue for privacy breaches and European-style reforms such as the right to be forgotten would be considered for the next tranche of legislation. In 2022 the Albanese government passed a bill increasing penalties for companies that fail to protect customer data in the wake of major data breaches at telco Optus and health insurer Medibank. A summary section of the review, seen in advance by Guardian Australia, called for the exemption from the Privacy Act for small businesses to be abolished, citing community expectations that if small businesses are provided personal information "they will keep it safe." But first the government should conduct an "impact analysis" and give support to ensure small businesses can comply with their obligations, it said. Despite calls to abolish the privacy exemptions for political parties, the review proposed only increased safeguards, such as for parties to publish a privacy policy and not target voters "based on sensitive information or traits" except for political opinions, membership of a political association, or a trade union. "There was very strong support for increasing the protections for personal information under the Act," the review said. The review called for new limits on targeted advertising, including to prohibit targeting to a child except where it is in their "best interests," and to provide others with an "an unqualified right to opt-out" of targeted ads and their information being disclosed for direct marketing purposes. The Privacy Act should include a new overarching requirement that "the collection, use and disclosure of personal information must be fair and reasonable in the circumstances," it said. The review also proposes individual rights modeled on the European Union's general data protection regulation including to: object to the collection, use or disclosure of personal information; request erasure of personal information; and to de-index online search results containing sensitive information, excessive detail or "inaccurate, out-of-date, incomplete, irrelevant, or misleading" information. The review suggested that consent should be required for collection and use of precise geolocation tracking data. The government should "consult on introducing a criminal offense for malicious re-identification of de-identified information where there is an intention to harm another or obtain an illegitimate benefit," it said. The report said that individuals wanted "more agency to seek redress for interferences with their privacy," proposing the creation of a right to sue for "serious invasions of privacy," which was also a recommendation of the Australian Law Reform Commission in 2014.

Read more of this story at Slashdot.