Understanding the Privacy Act 1988 Reforms: What Sporting Organisations Need to Know
Updated: Sep 10
The Privacy Act 1988 (Cth) is undergoing the most significant reform in decades. Tranche one is already in force. The Government has signalled that a second tranche is coming, with timing and final content still to be confirmed.
These reforms are driven by heightened concern about how personal and sensitive information is collected, stored, and used. For sporting organisations that handle player data, fan engagement systems, wearable devices, or video analytics, now is the time to pay attention.
Privacy Act Reforms - What Changed in Tranche One
The Privacy and Other Legislation Amendment Act 2024 commenced on 10 December 2024 and delivered major changes, including:
Stronger penalties for serious or repeated privacy breaches.
Expanded powers for the Office of the Australian Information Commissioner (OAIC).
Clarification of extraterritorial operation, capturing overseas entities that carry on business in Australia.
Introduction of a new statutory tort for serious invasions of privacy.
New criminal offences relating to doxxing.
These measures strengthened enforcement and increased the risks of non-compliance.
What to Expect in Tranche Two
Based on the Government’s 2023 response to the Privacy Act Review, tranche two is expected to address several major items. Until a bill is introduced, treat the following as proposals to plan for:
Possible removal of the small business exemption: Clubs, associations, and organisations with an annual turnover under $3 million may soon be covered by the Privacy Act.
Expanded definitions of personal and sensitive information: Particularly relevant where data is collected from athletes, members, and fans.
Greater transparency obligations: Clearer privacy notices and more accessible policies.
Stricter rules on data retention and deletion: Organisations may need to justify why they hold data and have systems in place for secure disposal.
Why Sporting Organisations Should Care
Sporting organisations often underestimate the breadth of personal and sensitive information they handle, such as:
Player health and performance data.
Member registrations and contact details.
Video footage and analytics.
Financial information tied to memberships and sponsorships.
If the small business exemption is removed, almost every sporting organisation will be captured by the Act. Preparation is essential.
Practical Steps to Take Now
To get ahead of tranche two, sporting organisations should:
Review how personal information is collected and stored.
Update privacy policies to reflect the likely reforms.
Audit technology platforms (apps, wearables, video analytics tools) for compliance.
Train staff and volunteers on privacy obligations.
Seek legal advice to ensure compliance before the reforms take effect.
The Importance of Compliance
Compliance with the Privacy Act is not just a legal requirement; it is also crucial for maintaining trust. Sporting organisations must ensure that they handle data responsibly. This builds confidence among players, members, and sponsors.
When organisations are transparent about their data practices, they foster a culture of trust. This is vital in a world where data breaches can lead to significant reputational damage.
Future Considerations
As the landscape of data privacy continues to evolve, sporting organisations must stay informed. Regular updates from the OAIC and legal experts can provide insights into upcoming changes.
Additionally, organisations should consider investing in technology that enhances data security. This could include encryption tools, secure storage solutions, and robust access controls.
Final Word
The Privacy Act reforms will lift the standard for how sporting organisations manage information. Those who prepare early will reduce legal risk and strengthen trust with players, members, and sponsors.
Now is the time to start.
Matt Krog
Director
Aus Sports Law
---wix---
