New laws taking effect from 12 March 2014 impose new requirements on businesses and most government bodies that collect and transfer personal information in Australia. These laws also impact personal information that is collected outside Australia if that data is brought to Australia. Non-compliance with the new legislation risks civil penalties of up to $1.7 million for corporations and $340,000 for individuals. In addition there are new government powers to investigate privacy and data loss events and to obtain enforceable undertakings in the event of a breach of the laws. The new privacy laws create new Australian Privacy Principles (APPs) that revise prior obligations on how and when any personal information can be collected and how
