Australia Privacy Act 1988 & APPs
Direct Marketing & Penalty Defense
Enforce the 13 Australian Privacy Principles (APPs) and protect against landmark OAIC penalties of up to $50M AUD or 30% adjusted annual turnover. Automated APP 7 direct marketing opt-outs and APP 8 cross-border disclosure guards.
Australia OAIC Statutory Exposure Calculator
Under the Privacy Legislation Amendment (Enforcement and Other Measures) Act 2022, corporate maximum civil penalties for serious or repeated interferences with privacy were increased to the greater of $50,000,000 AUD, 3x benefit obtained, or 30% of adjusted turnover.
Calculate statutory corporate exposure based on adjusted Australian turnover and tracking practices.
Direct marketing cookies & behavioral remarketing trackers fire without opt-out capability.
Personal information sent to non-Australian cloud entities without contractual APP safeguards.
Australia's statutory tort for serious invasion of privacy enables individuals and class actions to claim damages for unauthorized tracking and pixel telemetry.
Key APPs Governing Digital Tracking
The Office of the Australian Information Commissioner strictly enforces the 13 APPs across web cookies, marketing analytics, and cloud databases.
Open & Transparent Management
Entities must have an up-to-date, clearly expressed privacy policy detailing how personal information and digital telemetry are collected, held, used, and disclosed.
Collection of Solicited Info
Only collect personal information reasonably necessary for primary functions. Sensitive health/financial telemetry requires explicit opt-in consent.
Direct Marketing Controls
Strict prohibition on using personal information for direct marketing unless simple opt-out mechanisms are prominently provided and immediately honored across ad pixels.
Cross-Border Disclosures
Before disclosing personal information to overseas recipients, take reasonable steps to ensure the overseas entity does not breach the APPs, remaining accountable for breaches.
Edge APP 7 Marketing Gatekeeper
& APP 8 Tokenizer
Consent Shield AI deploys automated edge middleware across Sydney and Melbourne points of presence. It intercepts tracking pixels (Meta, Google Ads, TikTok, Criteo) and blocks direct marketing identifier collection until explicit APP 7 opt-out or consent states are evaluated.
-
Instant Sydney/Melbourne Sub-3ms Geo-Routing -
APP 7 Direct Marketing Dynamic Opt-Out Bar -
New Zealand Privacy Act 2020 (13 IPPs) Dual Mode
import { EdgeShield, AU_APP_Rules } from '@consentshield/australia-core';
// Intercept traffic for Australian / NZ visitors
export const australiaMiddleware = async (event: FetchEvent) => {
const clientCountry = event.request.headers.get('cf-ipcountry');
if (clientCountry === 'AU' || clientCountry === 'NZ') {
const userPreferences = await EdgeShield.getConsentToken(event.request);
// Enforce APP 7 Direct Marketing opt-out status
if (userPreferences.directMarketingOptedOut) {
return EdgeShield.stripMarketingBeacons(event.request, {
blockMetaCapi: true,
blockGoogleRemarketing: true,
anonymizeApp8Export: true
});
}
}
return fetch(event.request);
};