StopTheScroll logo
Translate icon.

Many Australians don't know what a privacy policy really is

It’s the common misconception that could be putting your personal data at risk – many Australians believe a privacy policy is designed to protect their information. However, a closer look reveals a different reality.

By Yav Find, 29 June 2025

A hero image, showing the march of progress, followed by a man sitting down, hunched over, looking at his phone, representing mobile phone usage as a reduction in progress.

A 2019 inquiry by the Australian Competition and Consumer Commission (ACCC) found that 36% of Australians on digital media platforms don’t actually know what a privacy policy is. This lack of awareness reveals a fundamental gap in understanding how our personal information is being collected, stored, used, and shared across the web.

A graphic showing a group of simple face icons. Within the group, one third of the faces are coloured red, and the rest are light blue. The text below reads: 36% of Aussies incorrectly believe privacy policies protect their data.
ACCC (2019)

So, what exactly is a privacy policy?

A privacy policy isn’t a shield or statement that guarantees the protection of your personal data. Instead, privacy policies are a legal document that outline how a company collects, stores, and processes your data (OAIC, 2025). It also states how your data is distributed to third parties.

According to the ACCC (2019):

❌ False

When a digital platform has a privacy policy, it means it will not share my personal information with anyone else (including other digital platforms)

✅ True

A privacy policy means the user has relinquished their control over their personal information and user data to the extent outlined in that privacy policy

When you “agree” to a privacy, you agree to how the service uses your data in accordance with their privacy policy.

You should contact a business directly if you don’t understand their privacy policy.

When you “agree” to a privacy, you agree to how the service uses your data in accordance with their privacy policy.

What a privacy policy actually includes.

The Office of the Australian Information Commissioner (OAIC) outlines various key elements that a privacy policy must contain. Here’s the gist of it:

An outline of the data that the platform collects

Here, the platform shows the data that is being gathered, which can be anything from your name to your browsing history, location data, and contacts.

Learn how to reduce the amount of data you share while keeping your Reels, Shorts and TikToks rolling.

How the platform will use & disclose your data

“Using” your data refers to the platform’s internal activities, like feeding your data into content algorithms to personalise your feed.

“Disclosing” your data refers to how the platform shares your data with third parties like targeted marketing

An outline of the data that the platform collects

Here, the platform gives reasons behind data collection. I.e., a platform might state that they need your data for the “development of an advertising ID” to serve you more relevant ads.

How you can access your personal info

These are the steps that you can take to request your personal information from the platform.

Privacy policy vs. Terms & Conditions

Oftentimes, when you sign up for a service, you’re agreeing to both their terms & conditions and their privacy policy. These are two fundamentally different documents and confusing them can cause significant misunderstandings about your rights and obligations (Talip, 2022)

A privacy policy outlines how a platform collects, uses, stores, and shares your personal information. In Australia, platforms are required by law to have a privacy policy.

Terms & conditions set out the rules, expectations, and guidelines for using a platform. Platforms are not required by law to have a terms & conditions statement.

It’s tempting to skip reading the privacy policy and just go straight to the service, but it’s important to know what exactly you’re allowing a platform to do with your personal data. Oftentimes, the extent of data collection and processing can appear excessive or alarming.

But it’s not all bad news – if you really want to keep using a platform, see our guide on limiting the amount of data you share with big tech.