Website analytics without cookies: what an Australian business can measure, and still stay honest
The OAIC's June 2026 tracking-pixel findings showed how most websites get analytics wrong: not by counting visitors, but by handing the count to a third party nobody disclosed. Here is what the Privacy Act actually asks of a website, and the three design choices that answer it.
ReadThe Cyber Security Act 2024 is now fully in force — what applies to you
Ransomware payment reporting, smart-device security standards and the Cyber Incident Review Board have all commenced. A plain-English rundown of which obligations touch an ordinary Australian business.
ReadNZ's Biometric Code grace period ended 3 August 2026
If your business was already using biometric systems — facial recognition, fingerprint entry, attendance scanners — before November 2025, the transition window closed on 3 August 2026. The Code now applies in full. Here's what compliance means.
ReadTwo Privacy Act deadlines land on 10 December 2026
Automated decision-making transparency commences and the Children's Online Privacy Code must be registered on the same day. What each one is, who it touches, and what to do before December.
ReadIncident response and business resilience: a plain-English guide
What a working incident response plan actually needs, how it links to your notification duties in Australia and New Zealand, and where to start without buying a bank-sized security program.
Read