Article 10.1
Western Australia just got its first privacy law.
Yesterday, Western Australia was the only place in Australia where the public sector had no privacy law. Today, that is no longer true.
Blog
› Series
The WA Privacy Reset
What Western Australia's new privacy law changed on 1 July 2026, and what it means for Government, recruitment, universities, and legal.
8 articles in this series
Article 10.2
One clause in your WA Government contract now carries the force of law.
There is a clause that can now sit in your WA Government contract and quietly turn a commercial obligation into a statutory one. Most suppliers have not read it.
Article 10.3
In WA, “reasonably necessary” is no longer good enough.
The gap between “reasonably necessary” and “necessary” sounds like lawyer’s pedantry. In WA, from today, it decides whether your data collection is lawful.
Article 10.4
WA’s privacy law protects data that isn’t even “personal”. And it is watching your AI.
Think de-identified data is out of scope? Think your AI tool sits in a grey area? In WA, from today, neither is true.
Article 10.5
WA’s new privacy law does something no other Australian law does.
Every privacy law in Australia protects individuals. Only one, as of this month, builds in Aboriginal data governance. It is in Western Australia.
Article 10.6
WA’s privacy principles are live. The breach-notification clock starts 1 January 2027.
WA’s privacy principles went live this week. But the deadline that will actually make headlines is six months away.
Article 10.7
In WA, some projects now need a privacy assessment before they start.
In WA, switching on a new system that touches personal information may now require a formal assessment first. Not after go-live.
Article 10.8
The best way to handle overseas-data consent? Never send it overseas.
Most teams are preparing to ask clients for consent to send data offshore. The sharper question is why it is leaving at all.