Privacy law isn’t just a compliance checkbox
If your business collects personal information — and it almost certainly does — you have obligations under the Privacy Act 1988. For tech companies, those obligations show up everywhere: in your product design, your vendor contracts, your data flows, and your incident response plans.
We help businesses treat privacy as a design constraint, not an afterthought. That’s cheaper, more effective, and what the OAIC actually expects.
Privacy policies that reflect reality
Most privacy policies We review bear little resemblance to what the business actually does with data. We wrote an open-source privacy policy template because we were tired of seeing the same generic, lawyer-drafted documents that nobody reads and nobody follows. We draft privacy policies, collection notices, and consent mechanisms that accurately describe your data practices — because that’s what the Australian Privacy Principles require.
Data breach response — when speed matters
When a breach happens, you need to quickly assess whether it triggers the Notifiable Data Breaches scheme, notify the OAIC if required, communicate with affected individuals, and coordinate with your technical team on containment. We help clients work through this process under pressure, which is when having someone who already understands your systems and data flows makes a real difference.
Privacy by design saves money
Working with your product and engineering teams to build privacy into new features is significantly cheaper than retrofitting compliance after launch. We review data architectures, consent flows, and retention policies during development — not after the OAIC comes knocking.
Vendor and third-party risk
When you share personal information with third-party providers, you remain responsible for how they handle it. We conduct privacy and security assessments of vendors, negotiate data processing agreements, and help you understand what your exposure actually is. This matters especially when your data crosses borders to cloud providers or overseas teams.
Data-sharing agreements
Whether you’re sharing data with partners, integrating via APIs, or participating in broader data ecosystems, the agreements need to clearly define what data flows where, how it can be used, and what happens when the relationship ends. We draft these regularly for tech and SaaS businesses.
Privacy done well is a competitive advantage — especially when your customers and partners have their own compliance obligations. If you want to get ahead of it, get in touch.