
Scam Notification
We are aware that some people with Bigpond email addresses have been receiving suspicious emails (purportedly attaching an outstanding invoice from Sierra Legal). If you have received this email, you do not need to report it to us (as we are aware of the issue). Please do not pay that invoice or click on any of the links in the email.
Privacy and data security have become critical business issues. With the Australian Privacy Act undergoing significant reform and data breaches increasingly common, businesses need expert legal advice to manage their obligations and protect their interests. Sierra Legal's privacy and data security lawyers provide practical, commercially focused advice across all aspects of Australian privacy law.
Sierra Legal advises businesses of all sizes on their privacy and data security obligations under Australian law. We take a pragmatic approach — helping you understand what is required, put the right frameworks in place, and respond effectively when things go wrong. Our privacy team works closely with our M&A and technology lawyers to provide integrated advice on privacy risk across transactions, technology contracts and business operations.
Sierra Legal advises on: — Australian Privacy Act compliance, including compliance reviews and gap analyses — Privacy policies and collection notices — Data breach response and notification obligations under the Notifiable Data Breaches scheme — Privacy considerations in mergers, acquisitions and due diligence — Privacy risk in technology contracts, SaaS agreements and data sharing arrangements — Cross-border data transfers and international privacy compliance — Employee privacy and workplace data issues — AI and automated decision-making privacy risks — Privacy Act reform and preparing for upcoming changes
Privacy is an increasingly important consideration in M&A due diligence. Acquiring a business means inheriting its data obligations — and its data risks. Sierra Legal's lawyers review privacy compliance as part of the due diligence process, identifying material risks that could affect transaction value or require post-completion remediation.
The Privacy Act 1988 (Cth) applies to businesses with annual turnover over $3 million, as well as certain smaller businesses. It requires organisations to handle personal information in accordance with the Australian Privacy Principles, which cover collection, use, disclosure, storage and security of personal information.
Under the Notifiable Data Breaches scheme, organisations covered by the Privacy Act must notify the Office of the Australian Information Commissioner and affected individuals if a data breach is likely to result in serious harm. Sierra Legal can advise on your notification obligations and help manage the legal and reputational response.
When acquiring a business, you assume its privacy obligations and any existing privacy risks. This includes inheriting data handling practices, outstanding breach notifications, and regulatory exposure. Privacy due diligence identifies these risks before you commit to the transaction.
The Australian Government is implementing significant reforms to the Privacy Act following the 2022 Privacy Act Review Report. These reforms include strengthening individual rights, introducing a statutory tort for serious privacy invasions, and expanding the Act's coverage. Sierra Legal monitors these developments and can advise on how they affect your business.
Speak with Sierra Legal’s privacy lawyers today.
Sierra Legal advises businesses of all sizes on their privacy and data security obligations under Australian law. We take a pragmatic approach — helping you understand what is required, put the right frameworks in place, and respond effectively when things go wrong. Our privacy team works closely with our M&A and technology lawyers to provide integrated advice on privacy risk across transactions, technology contracts and business operations.
Sierra Legal advises on: — Australian Privacy Act compliance, including compliance reviews and gap analyses — Privacy policies and collection notices — Data breach response and notification obligations under the Notifiable Data Breaches scheme — Privacy considerations in mergers, acquisitions and due diligence — Privacy risk in technology contracts, SaaS agreements and data sharing arrangements — Cross-border data transfers and international privacy compliance — Employee privacy and workplace data issues — AI and automated decision-making privacy risks — Privacy Act reform and preparing for upcoming changes
Privacy is an increasingly important consideration in M&A due diligence. Acquiring a business means inheriting its data obligations — and its data risks. Sierra Legal’s lawyers review privacy compliance as part of the due diligence process, identifying material risks that could affect transaction value or require post-completion remediation.
The Privacy Act 1988 (Cth) applies to businesses with annual turnover over $3 million, as well as certain smaller businesses. It requires organisations to handle personal information in accordance with the Australian Privacy Principles, which cover collection, use, disclosure, storage and security of personal information.
Under the Notifiable Data Breaches scheme, organisations covered by the Privacy Act must notify the Office of the Australian Information Commissioner and affected individuals if a data breach is likely to result in serious harm. Sierra Legal can advise on your notification obligations and help manage the legal and reputational response.
When acquiring a business, you assume its privacy obligations and any existing privacy risks. This includes inheriting data handling practices, outstanding breach notifications, and regulatory exposure. Privacy due diligence identifies these risks before you commit to the transaction.
The Australian Government is implementing significant reforms to the Privacy Act following the 2022 Privacy Act Review Report. These reforms include strengthening individual rights, introducing a statutory tort for serious privacy invasions, and expanding the Act’s coverage. Sierra Legal monitors these developments and can advise on how they affect your business.
Yes. We advise technology companies on privacy by design, data governance frameworks, privacy policies for apps and platforms, and managing privacy risk in technology contracts and AI systems.
Speak with Sierra Legal’s privacy lawyers today.