1199

2019-2021

 

The Parliament of the

Commonwealth of Australia

 

THE SENATE

 

 

 

 

 

Treasury Laws Amendment (News Media and Digital Platforms Mandatory Bargaining Code) Bill 2021

 

 

(Amendments to be moved by Senator Griff, on behalf of Centre Alliance, in committee of the whole)

(1)     Schedule 1, item 1, page 51 (after line 18), at the end of Division 11, add:

52ZZT  Reporting on data practices

             (1)  The responsible digital platform corporation for a designated digital platform service must prepare and publish, in accordance with the requirements in this section, an annual report (the data practices report ) on the collection and use of user data by the service during the year.

             (2)  The data practices report must include the following information:

                     (a)  the types of user data collected by the service;

                     (b)  for each type of user data collected, the following information:

                              (i)  whether the user data is made available to other commercial entities;

                             (ii)  whether the user data is made available to foreign governments;

                            (iii)  whether users can opt out of their data being collected;

                            (iv)  whether users can opt out of their data being provided to other commercial entities or foreign governments;

                     (c)  the country or countries where the user data is stored;

                     (d)  how the service complies with relevant obligations in the Privacy Act 1988 ;

                     (e)  whether any user data has been compromised within the previous 12 months;

                      (f)  whether any user data is collected from external sources;

                     (g)  any other information prescribed by regulations for the purposes of this paragraph.

             (3)  The data practices report must:

                     (a)  be in writing; and

                     (b)  if regulations made for the purposes of this paragraph specify requirements—meet those requirements.

             (4)  The data practices report must be published on the internet by the responsible digital platform corporation:

                     (a)  as soon as practicable, and in any event within 90 days, after the end of each financial year; or

                     (b)  if regulations made for the purposes of this paragraph prescribe a different 12 month period—in accordance with the period prescribed.

             (5)  Nothing in this section requires, or empowers regulations to be made that would require, the disclosure of information that:

                     (a)  would reveal a trade secret of a responsible digital platform corporation; or

                     (b)  could reasonably be expected to prejudice substantially the commercial interests of a person.

[report on data practices]

(2)     Schedule 1, item 9, page 53 (line 3), omit “or 52ZZF(1)”, insert “, 52ZZF(1) or 52ZZT(1)”.

[penalty]

(3)     Schedule 1, item 10, page 53 (line 18), at the end of subsection (4A), add:

                   ; (k)  subsection 52ZZT(1).

[penalty]