Consumer groups have called for a radical overhaul of Australian privacy laws to provide greater protections for consumers to counterbalance the increased use and exploitation of big data by business and industry.

A joint submission by Financial Rights Legal Centre together with Consumer Action Law Centre and Financial Counselling Australia to the Attorney-General’s Department Privacy Act Review, Issues Paper, October 2020 argues that substantial reform is needed to rebalance Australians’ right to privacy and ensure our laws keep pace with future economic and technological change.

Financial Rights Chief Executive Officer Karen Cox said the review of the Privacy Act 1988 is well overdue.

“Australians want a safe and secure data environment that puts their privacy ahead of the increasingly rapacious data desires of industry,” Ms Cox said.

 “Australians have had very little power to stop the trade, misuse and abuse of their personal information. The time to strengthen our right to privacy is now.”

The joint submission describes how the rapid pace of technological change has led to a data saturated economy and the development of new business models and markets centred on the harvesting of surplus behavioural data for predictive purposes. 

Calls coincide with research released by the Consumer Policy Research Centre today which reveals:

• 94% of Australian consumers are uncomfortable with how their personal information is collected and shared online;
• 88% of Australian consumers do not have a clear understanding of how their personal information is being collected and shared;
• 94% of Australian consumers reported not reading all of the privacy policies or T&Cs that applied to them in the past 12 months.
• Of consumers who had read privacy policies, 69% reported accepting terms even though they weren’t comfortable with them – the main reason for doing so was it was the only way to access the product or service.

Consumers should be free to decide how much or how little of their information they wish to share in exchange for the use of services, Ms Cox said.

“Privacy agreements, privacy preferences, and terms and conditions are often complex and unclear so consumers don’t know what they are consenting to,” she said.

“Yet, declining to participate in data driven technologies is increasingly not an option for many consumers. Services are offered on a like it or lump it basis, meaning people have the choice to either fully participate in the modern economy or retain reasonable control of their personal data, you simply can’t do both.”

The Consumer Policy Research Centre research also found that Australian consumers believe that government has an important responsibility to ensure that consumers are protected:

• 94% of consumers expected government to protect them against the collection and sharing of their personal information (67% high responsibility, 27% moderate responsibility);
• 93% of consumers expected government to improve their understanding of how personal information may be collected and shared (67% high responsibility, 26% moderate responsibility);
• 94% of consumers expected government to protect them from having their information being used in a way that makes them worse off.

Consumer Policy Research Centre Chief Executive Officer Lauren Solomon said the message from Australian consumers is clear.

“Companies have too much control over their personal information. Australians expect a modern protection and enforcement regime that gives them more control and ultimately ensures that they receive fair treatment,” Ms Solomon said.

Ms Cox said while ensuring consent is freely given and informed is difficult if not impossible, there are simple reforms that could improve the process in line with reform under the Consumer Data Right.

Data collection and use exists on a spectrum from the relatively benign, through invasive but justifiable, to outright exploitation. Regulation should reflect this, with controls appropriate to the circumstance and clear prohibitions on more egregious practices, she said.

“The concept of consent has been rendered completely meaningless when it comes to protecting our privacy.” Ms Cox said. “It is time for the Privacy Act be overhauled to deliver real life protections for the modern world, rather than a cloak of legitimacy for poor practices and exploitation.”

The submission can be found here