Following the passage of the Privacy and Other Legislation Amendment Bill 2024 by the Commonwealth Parliament on 29 November 2024, which amended the Privacy Act 1988 (Cth) and other Acts, a new statutory tort for a serious invasion of privacy will soon enter Australian law.
This new tort will commence on 10 June 2025 and confers on an individual a cause of action for serious invasions of privacy.
Elements to be proven
The tort allows individuals to take action against those:
- who invade their privacy, either by:
- intruding upon their seclusion; or
- misusing their information;
- in circumstances where the individual had a reasonable expectation of privacy;
- where the invasion is serious and either:
- intentional; or
- reckless; and
- where the public interest in the plaintiff’s privacy outweighs any countervailing public interest.
The public interest considerations include the freedom of expression, freedom of the media, the proper administration of government, open justice, public health and safety, national security and the prevention of crime.
Remedies
The tort is actionable without proof of damage however, where the elements are established, a Court will be able to award damages to the plaintiff, as well as other remedies (such as injunctions, apologies, destruction or delivery of materials, accounting for profits etc) if appropriate.
Damages are capped at the greater of:
- $478,550; or
- the maximum award for general damages in defamation,
but there are no aggravated damages available.
Exemptions
There are exemptions for invasions of privacy by a State Authority or its staff if the invasion of privacy occurs in good faith, in the performance or purported performance of a function or exercise of power of the Authority, or in the exercise or purported exercise of a power of the authority and for law enforcement bodies and intelligence agencies. Persons under 18 are also exempt.
Limitation periods
The cause of action must be actioned within 1 year of the person first becoming aware of the invasion of privacy however if the plaintiff is unaware of the invasion, 3 years from the day the invasion occurred or if the plaintiff was under 18 when it occurred, before the plaintiff turns 21.
The introduction of this new tort marks a significant change in Australian law because until now, there has been no generally recognized right to privacy.
New crimes
Note that the Criminal Code was also amended to create new crimes for “doxxing” in sections 474.17C (criminalizing the release of personal data using a carriage service (ie, internet or telecommunications services) in a manner that a ‘reasonable person’ would regard as menacing or harassing) and section 474.17D (which focuses on such dissemination targeting individuals or groups based on their protected attributes, such as race, religion, sex, sexual orientation, gender identity, intersex status, disability, nationality, or ethnic origin).
These new offences maximum sentences of 6 and 7 years imprisonment respectively.
FURTHER INFORMATION
For further information, please contact McKillop Legal on (02) 9521 2455 or email help@mckilloplegal.com.au
This information is general only and is not a substitute for proper legal advice. Please contact McKillop Legal to discuss your needs.