Australian organisations still struggling to fully comprehend new privacy laws

ADMA chief highlights the lack of knowledge around the implications of Australia's new Privacy Act and its impact for marketers on customer data

Large and medium-sized organisations are getting ready for Australia’s new privacy laws but concerns remain across the industry that smaller businesses still don’t appreciate the significance of the new legislation.

The new privacy laws comes into effect on 12 March and will introduce a range of measures that companies must oblige by around customer data. These are a single set of standards called the Australian Privacy Principles that specify when information can be used for direct marketing or be sent overseas. Penalties for failing to meet the new privacy laws could cost companies up to $1.7m.

CEO of the Association for Data-driven Marketing and Advertising (ADMA), Jodie Sangster, told CMO that she believed many of Australia’s larger and medium-sized companies are on top of the changes, and have put in place processes to abide by the new rules. These include notices across customer-facing website outlining new privacy policies and rights.

But Sangster expressed concern around the readiness of SMBs and not-for-profit organisations, many of which don’t believe the privacy law changes apply to them, she claimed. The other challenge is that most of these organisations don’t have internal legal resources, staff on-hand, or budgets to hire consultancies to help them act on the information.

“Smaller marketers are challenged firstly on what they have to do, then secondly, how they get this in motion,” Sangster said.

Major challenges all organisations have faced is the notification piece and what that actually means.

“There is a question mark over what notification actually means and how organisations must notify customers,” Sangster said. “Many businesses are comfortable with sending people to a privacy policy without realising that won’t quite cut it under the new laws. There are whole new obligations to be met around proactively telling people what data you have about them. And there is a real struggle around how I do that, when I do that, and do I have to do it on an ongoing basis.”

The second recurring stumbling block is the provision around unsolicited information. According to Sangster, organisations must delete any unsolicited information obtained, nor can they use such information for any future relationship-building exercise. As an example, if someone brings a colleague or wife along to an event they have registered for, this could be unsolicited information and organisations wouldn’t be allowed to keep it.

“The question then becomes if this information has been given by someone for a business purpose, or has it just been given under a different reason. If it’s the latter, we cannot use it for future relationship building,” Sangster said.

“These are the types of things on the peripheral, not in the middle of the radar and therefore will be challenging,” she claimed. “The problem we have is that what the law says and the practicalities are often not aligned. This [unsolicited information clause] seems good in practices, but when you run every business scenario past it, it’s doesn’t work.”

To help member organisations get up to speed, ADMA launched the Data Pass responsible data practice program last October focus on the new privacy and security changes. Sangster said 40 companies have signed up to participate including Telstra, Weight Watchers, Foxtel and Amaysim.

“There is a big need for education throughout the whole industry,” Sangster claimed. “The reaction that we’ve had so far to the classes is that many don’t realise there’s so much to it. Data touches all parts of the business, not just the compliance person and anyone in the organisation that touches data needs to be aware of the changes."

While concerns remain around how prepared organisations are for the privacy crackdown, Sangster said it hasn’t hindered the rise of data-driven marketing across Australian businesses.

“Either organisations have made the changes and they’re ready, or they continue to feel they are compliant with the law as they are, so no one has said ‘stop’,” she said. “That did happen, however, when the spam act came in.”

Sangster’s key tips on getting on top of privacy law changes
  • Do a data audit: Organisations need to get a grip on what has to be done as a first step, even down to single data spreadsheets.
  • Get your front-facing information in order first: This includes the customer privacy policy, opt-out notifications and disclosure statements. These will at least be compliant while you then work on ensuring the whole back-end processes in your organisation meet the new privacy obligations.
  • Train your staff: Teams need to be trained to understand what they have to achieve and abide by, Sangster said. She pointed out there are a number of free tools available around digital privacy and policies from not only ADMA, but also legal firms and other associations. These are a good starting point for getting a grip on what needs to be done.
  • Tackle the new compliance policies in marketing: Sangster encouraged marketers to work on the wording of any new privacy and compliance statements, rather than leave them in the hands of legal teams. This will ensure that any information is couched in a customer approach and is therefore easier to understand as an end consumer.

Follow CMO on Twitter: @CMOAustralia, take part in the CMO Australia conversation on LinkedIn: CMO Australia, or join us on Facebook: https://www.facebook.com/CMOAustralia

Signup to CMO’s new email newsletter to receive your weekly dose of targeted content for the modern marketing chief.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Show Comments

Blog Posts

Putting the ‘human element’ back in marketing

During the recent CMO Momentum conference, Paul Mitchell shared how marketing leaders can create cultures that deliver

Paul Mitchell

Managing director, The Human Enterprise

The rise and rise of voice search

In 1982, an AT&T employee by the name of Plotzke predicted the rise of voice: “In fact, it has been predicted that, by 1990, well over half the communications dollars spent by businesses will be for products and services that include voice technologies.

Michael Jenkins

Founder and director, Shout agency

Is design thinking the answer for the next generation of marketing?

The speed and pace of change will never be slower than we’re experiencing today. So in this era of unprecedented change, how can brands meet soaring consumer expectations, stay relevant and deliver differentiated and connected experiences?

Merryn Olifent

Senior consultant, G2 Innovation

End your financial worriesAre you a business man or woman? And you are in need of an urgent loan as to start up your own business? Or do ...

lance

Kmart turnaround chief to exit Wesfarmers, Target

Read more

https://uploads.disquscdn.c... [magic school bus] KID: where are we going today MS. FRIZZLE: the zoo KID: but last week we went to SPACE ...

Germain3161

Sephora Asia details its journey to data-driven decision making

Read more

DP Apparel bietet große Auswahl Audi Rennbekleidung in Deutschland zu den besten Angeboten. Das Geschäft bietet auch qualitativ hochwerti...

DP apparel

Audi Australia gets a new CMO

Read more

this is a really great news

Vincent Mouton

Mobile-first banking startup showcases fresh brand identity

Read more

Prozac is the brand name of fluoxetine, a prescription drug used to treat depression obsessive-compulsive disorder, and panic disorder. B...

jenson smith

CMO's top 8 martech stories for the week - 19 July 2018

Read more

Latest Podcast

More podcasts

Sign in