AI surge puts Australia’s only industry privacy code under review

The Australian Data and Insights Association (ADIA) has opened public consultation on a review of its Privacy (Market and Social Research) Code. Feedback is open from 23 July until 13 August.

READ MORE: ADIA launches certification program to combat cybercrime

READ MORE: ADMA report reveals fast AI adoption outweighs training uptake

What could change in the privacy code?

The mandatory five-yearly review will consider updates covering AI, children and young people, overseas sharing of personal information, enforcement and expanded responsibilities for member Privacy Officers. ADIA says its code is the only industry code registered under the Privacy Act.

The review forms part of ADIA’s compliance obligations to the Office of the Australian Information Commissioner. It follows rapid changes in technology, regulation and the risks surrounding consumer data.

ADIA commissioned former Tasmanian senator the Hon. Terry Aulich to lead the independent review. Aulich has examined the code and the association’s broader privacy framework ahead of the consultation.

Why AI and youth privacy are in focus

“The code has held up well, but there are a number of social, technological, regulatory and compliance changes since 2021, which necessitates amendments to the code, particularly around AI, young people’s privacy and safety, online attacks which could diminish consumer trust, and recent legislative change,” Aulich said.

Professor Peter Leonard, chair of the ADIA Privacy Compliance Committee, said regular reviews were needed as technology created new privacy risks.

“As technology rapidly evolves and new risks emerge, it is crucial to regularly review and strengthen our industry’s privacy safeguards. Reviewing and considering updates to the ADIA’s Privacy Code is an important part of that process, to ensure our standards reflect evolving best practices and provide clear guidance to, and guardrails for, our members,” Leonard said.

How to make a submission

Members of the public can submit feedback by emailing [email protected]. ADIA said the responses would help shape amendments and inform government and commercial research projects.

Each ADIA member must appoint a Privacy Officer and report annually on risks, inquiries and complaints. The association represents more than 85 data, insights and research companies employing more than 5,000 people in an industry generating more than $4 billion in annual economic activity.