Free privacy policy template (Australia)
A free Australian privacy policy template from Quillio is compliant with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). It covers what personal information is collected, how it is used, when it is disclosed, how it is protected, individual rights of access and correction, and complaints handling. Required for organisations with annual turnover of $3m+ and for certain smaller organisations (health providers, credit reporters, etc.).
Privacy Act 1988 applicability
The Privacy Act 1988 (Cth) applies to: private sector organisations with annual turnover of $3m+ (APP entities); all Commonwealth government agencies; health service providers; credit providers and reporting bodies; and certain smaller organisations. The Privacy and Other Legislation Amendment Act 2024 introduced significant reforms including a statutory tort of serious invasion of privacy from 2025.
What APP-compliant privacy policies must cover
APP 1 requires a clearly expressed, up-to-date privacy policy covering: the kinds of personal information collected and held; how collected; how held; purposes of collection, use, disclosure; how individuals can access or correct their information; how complaints are handled; whether information is likely to be disclosed overseas; and the countries to which disclosure is likely. Websites must also address cookies, analytics, and third-party tracking.
Recent reforms to watch
The 2024 Privacy Act reforms introduced: a direct right of action for privacy breaches (from 2025); a statutory tort for serious invasion of privacy; new notification requirements for certain breaches; expanded small business coverage (progressively); and automated decision-making disclosures. Privacy policies should be reviewed against current requirements annually.
How I generate privacy policies
Tell me the business, what personal information is collected, and how it is used. I produce a draft privacy policy in under a minute, compliant with current Privacy Act 1988 (Cth) requirements. For commercial and tech lawyers this is a volume routine workflow.
Common issues
- Overseas disclosure statements must identify countries — generic "may be transferred overseas" is not enough
- Cookie and analytics disclosures should be specific to the tools used
- Direct marketing consent requirements under APP 7 need clear opt-in/opt-out mechanisms
Try Quillio on a real matter.
The fastest way to know if Quillio fits your practice is to use it on your own work. The free trial requires no credit card and no sales call.
Start your free trial