Australia’s Privacy Act is still subject to an ongoing review process. The Australian government has not specified when the second tranche of reforms can be expected. If implemented, the second tranche of reforms will provide further significant changes to Australia’s privacy protection framework. These are expected to include but are not limited to: Requiring entities to conduct privacy impact assessments for activities with high privacy risks, expanding individual rights to more closely align with the GDPR, and more.