Small businesses with an annual turnover of $3 million or less — which are currently not required to protect your personal information or disclose how it is used — may soon have to comply with the Privacy Act.
A wideranging review of the Privacy Act by the Attorney-General's Department has laid out the case for scrapping the 20-year-old exemption, which was introduced prior to businesses' take-up of online platforms.
