The statutory privacy tort is live, automated decision-making disclosures are due in December 2026, and the Tranche 2 exposure draft proposes 40 further changes. A practical guide for Australian businesses.