Australian Privacy Regulator Reports Rise in Complaints
The annual report shows surges in privacy complaints and freedom of information inquiries across the country.
Updated on Oct. 23, 2026 in Cybersecurity
Live Poll
Do you trust the federal government to effectively protect your personal data privacy?
The Office of the Australian Information Commissioner released its 2025-26 annual report, detailing a sharp rise in both privacy complaints and freedom of information inquiries. The regulator also highlighted ongoing enforcement actions, including a significant penalty issued to Australian Clinical Labs for a 2022 data breach.
Why it matters
The report highlights the growing strain on Australia's data protection framework as citizens seek greater accountability and transparency from agencies. This surge in volume has prompted the commissioner to focus on process improvements and prepare for upcoming legislative reforms.
The OAIC handled 2,193 FOI enquiries and finalised 1,327 notifications under the Notifiable Data Breaches scheme during 2025-26. Of these notifications, 88% were processed within 60 days, while the average time to finalise an IC review reached 7 months.
The players
Office of the Australian Information Commissioner
The national regulatory body responsible for protecting privacy and managing freedom of information access rights.
Australian Clinical Labs
A pathology provider that was ordered to pay $5.8 million in civil penalties by the Federal Court regarding a 2022 data breach.
The details
The regulatory body handled 3,025 applications for Information Commissioner reviews, marking a 42% increase from the previous reporting cycle. To combat these rising volumes, the agency implemented a two-year program of case management improvements and introduced an FOI leaderboard to monitor agency performance.
Timeline
2022: Australian Clinical Labs data breach occurred.
2024-25: Previous reporting period for OAIC statistics.
2025-26: Reporting period for the annual report.
2026-27: Future period for planned privacy reforms.
The Tech Race
The reporting of metrics under the Notifiable Data Breaches scheme tracks the evolution of corporate data accountability. By publishing performance data, the OAIC shifts the landscape toward greater transparency as it prepares for broader privacy reforms in the coming year.
The increased oversight and enforcement by the OAIC mean that citizens can expect higher standards for how their personal information is managed by organisations. Readers should note that while the agency is working to clear backlogs, individual review processes currently average 7 months.
The takeaway
The surge in complaints reflects a heightened public awareness regarding digital privacy and agency transparency. Individuals should remain vigilant about their personal data and monitor the OAIC website for updates on upcoming privacy protections.
What happens next
The Office of the Australian Information Commissioner plans to undertake broad privacy reform and implement the Children's Online Privacy Code during the 2026-27 period.
Further reading
For more information on national data protection standards, visit the Cybersecurity section.
Live Poll
Do you trust the federal government to effectively protect your personal data privacy?
