The Attorney-General’s office has begun its review into whether the Privacy Act is fit for the digital age, including whether the law should be changed to allow consumers to bring lawsuits, including class actions, for privacy breaches.