Artboard 1Icon/UI/CalendarIcons/Ionic/Social/social-pinterestIcon/UI/Video-outline

Data Protection & Privacy

Helping organisations manage data protection, privacy risks, and regulatory compliance with confidence.

Data Protection & Privacy Overview

Holding Redlich helps organisations confidently manage personal data and privacy compliance. With deep regulatory knowledge and a practical approach, we support clients in building trust, mitigating risk, and staying ahead of Australia’s evolving data protection landscape.

In today’s digital economy, the secure and lawful collection, use, and storage of personal data is critical—especially in highly regulated sectors and where high-risk privacy issues arise due to sensitive information held. Australia’s data protection regime is complex and constantly evolving, with obligations arising not just under the Privacy Act 1988 (Cth), but also the Spam Act 2003 (Cth) and other surveillance and related legislation, regulations, and industry codes.

Holding Redlich provides clients with clear, practical advice to ensure compliance and reduce risk. We help organisations design and implement effective systems for handling personal data, conduct privacy impact assessments and privacy audits, and review policies and practices to meet regulatory requirements and industry best practices.

Our team regularly assists with a wide range of privacy matters, including:

  • Preparing privacy impact assessments for new products or projects
  • Reviewing current privacy policies and data practices
  • Developing compliance plans and conducting privacy impact assessments
  • Training management and frontline staff on compliance and best practices
  • Preparing and implementing policies, codes of conduct, and internal procedures
  • Responding quickly to privacy crises, such as data breaches

Recognised in the Global Data Review's GDR 100, our privacy and data protection practice is trusted by clients across sectors. We stay at the forefront of legislative change—helping you anticipate issues, protect your reputation, and maintain public and customer trust in a data-driven world.

Case Studies

  • Privacy-compliant body-worn video
    We advised a shopping centre manager in adopting body worn video in a privacy compliant manner, including governance issues, risk analysis, consent and notification issues and training issues [LMN December 2024]
  • Engaged by an organisation to assess potential consent gaps in a public health program. Conducted stakeholder interviews and document review, then delivered a detailed report outlining consent discrepancies, practical remedies by participant type, and key governance learnings. [Emily Booth Dec 2023]