Data breach class actions suits
Australiaâs legal system has long struggled with an unresolved question: can individuals sue for privacy breaches? For years, the right to take civil action over data violations has remained unclear. Now, at least three ongoing class actions are testing this issue in court.
The cases could determine whether organisations face new legal risks when handling personal information.
The uncertainty around privacy lawsuits dates back decades. Two lower courts previously recognised a tort of invasion of privacy, but both rulings were settled before appeals could clarify the law. Earlier attempts to claim damages under the Privacy Act also failed, including a class action rejected by the Privacy Commissioner.
Now, three separate class actions are pushing for a common law right to sue over data breaches. The plaintiffsâwhose identities remain undisclosedâargue that victims should be able to seek compensation for privacy violations. If the courts agree, companies could face a wave of civil litigation following future breaches.
The outcome of these cases remains unpredictable. Judges may confirm a right to sue, reject it entirely, or set new limits on potential damages. Whatever the decision, it will shape how privacy disputes are handled in Australia for years to come.
The ongoing lawsuits may finally settle whether Australians can take legal action over privacy breaches. A ruling in favour of the plaintiffs would expose businesses to greater financial risks after data leaks. Until then, the right to sueâand the compensation availableâremains an open question.