Expertise 05
Regulatory Compliance
Separate what is law from what is proposed, and act on the right one.
- Frameworks covered
- 4, each labelled by status
- Related solutions
- 2 fixed-scope engagements
- Last verified
- October 2026
Overview
Privacy, data and AI regulation is moving on several fronts at once. Much of what is published is proposal, consultation or voluntary guidance rather than enacted law.
Lexora labels every development it writes about by status, so you can see at a glance what is law today, what has a start date, and what is still being debated. Our Regulatory Intelligence publication follows the same rule.
Our compliance work is advisory. We identify obligations, map them to your operations and track them over time. Formal legal interpretation remains with your lawyers.
The frameworks behind it
Each is labelled by status, so enacted law is never confused with proposals or voluntary standards. Verified October 2026.
Privacy and Other Legislation Amendment Act 2024
Status: Law in forceThe first tranche of Privacy Act reforms. Most changes commenced on 11 December 2024; automated decision-making disclosures commence on 10 December 2026.
Children's Online Privacy Code (OAIC)
Status: Being finalisedBeing finalised by the OAIC, which must register it by 10 December 2026. Its commencement date has not yet been set.
Privacy Amendment (Personal Data Protection) Bill 2026
Status: Exposure draftReleased on 31 August 2026 for consultation. Not yet introduced to Parliament and has no commencement date.
GDPR (European Union)
Status: Law in forceCan apply to Australian organisations that offer goods or services to, or monitor, people in the EU.
Not every headline is an obligation.
Questions we help answer
- Which privacy, data and AI obligations apply to us, and from when?
- What is coming that we should prepare for, and what can we safely watch?
- How do we show our board that obligations are tracked and owned?
Related solutions
- AssessPrivacy Compliance ReviewA fixed-scope review of how your organisation handles personal information against the Australian Privacy Principles, with a ranked gap register and a 90-day plan.
- SustainOngoing Privacy & Governance AdvisoryA standing advisory relationship that keeps your privacy, data and AI governance current as your systems, suppliers and obligations change.
Start with a conversation.
A free 20-minute call to understand your situation and recommend the right first step. Scope and a fixed fee are confirmed in writing before any work starts.