Australia drafts new privacy laws to rein in AI data use, smart glasses and identity theft
Proposed legislation would give Australians the right to delete their personal data from social media and search platforms, and a new tool to lock their ID documents against misuse.
Key points
- Australia's Attorney-General Michelle Rowland is releasing draft privacy legislation on Monday, 31 August 2026.
- A new government tool called IDLock will let Australians block, unblock and monitor their identity documents through their myGov accounts from 2027.
- The draft law includes a right to erasure, meaning people can demand social media and search companies delete their personal information.
- Smart glasses, which can silently photograph or film bystanders, are named as a technology the updated law must account for.
- The Credential Protection Register, a related existing system, has blocked more than 830,000 fraudulent identity verification attempts since 2022.
Australia is about to overhaul its privacy laws in a way that will touch almost every person who uses the internet, holds a driving licence, or has ever had their personal details exposed in a data breach, which is when criminals break into a company's computer systems and steal sensitive information.
Attorney-General Michelle Rowland will release draft legislation on Monday that covers three broad areas: the rise of artificial intelligence (AI) systems that are trained on vast amounts of people's data without their consent, smart glasses that can silently record bystanders, and a new government service to protect identity documents.
What is IDLock and what will it do for ordinary Australians?
IDLock is a free government tool that will let Australians lock their driving licence, passport and other official documents so criminals cannot use them to open bank accounts or pass identity checks fraudulently. It will be available through existing myGov accounts in 2027, following an initial trial.
Rowland described the aim plainly: "Whether their driver licence details have been exposed in a data breach or they are concerned about scams and identity theft, IDLock will give Australians an accessible and simple way to have greater visibility, control and confidence in how their identity documents are used."
IDLock builds on the Credential Protection Register, a related system the government created in 2022 that is designed to stop identity documents already known to be stolen from being accepted as proof of identity. That register has blocked more than 830,000 fraudulent identity verification attempts since it launched.
If you know your details were exposed in a past breach, such as the major hacks of Optus or Medibank in recent years, IDLock will let you monitor whether anyone is trying to use your documents and place a block on them until you choose to lift it.
What does the right to erasure actually mean?
Under the draft law, you will be able to contact social media platforms and search engines and demand they delete your personal information. The company must comply. The right will not extend to news organisations publishing journalism.
This mirrors similar rules already in force in Europe under legislation known as GDPR, the General Data Protection Regulation, which has allowed European residents to request the removal of outdated or inaccurate information about themselves from search results since 2014.
How do smart glasses fit into a privacy law?
Smart glasses look like ordinary glasses but contain a small camera. The current market leader is the Ray-Ban Meta model. They can photograph or film everything the wearer sees, and a bystander has no reliable way to know they are being recorded. The Greens party has separately proposed banning their import for 12 months while the legal framework catches up.
The proposed privacy law would treat recording someone without their knowledge using smart glasses as a potential privacy violation subject to enforcement.
After the draft is published, the government plans industry consultation before introducing the legislation to parliament by the end of 2026. As first reported by the Sydney Morning Herald, no final bill has yet been tabled, and the text will be subject to further amendment.
| Element | Detail |
|---|---|
| Draft released | 31 August 2026 |
| IDLock available | 2027 (myGov integration) |
| Credential Protection Register blocked | 830,000+ fraudulent attempts since 2022 |
| Right to erasure excludes | News organisations |
| Expected parliament introduction | By end of 2026 |
Common questions
Do I need to do anything right now?
No immediate action is needed. The law is still in draft form. IDLock is not yet available; it will be added to myGov accounts in 2027 after a trial period.
Will this law stop companies from using my data to train AI?
The draft addresses AI data practices, but the final scope depends on what survives the consultation and parliamentary process. The law has not passed yet.
What should I do if I think my ID has already been stolen?
Contact your state roads authority to flag your driving licence and report suspected passport fraud to the Australian Passport Office. Once IDLock launches, it will centralise this process through myGov.
