It is increasingly difficult to participate in the economy without disclosing personal information to entities online. A direct right of action should be implemented to advance out-dated Australian law with regard to invasions of privacy.

Existing regulatory regimes in Australia can, with limitations, address responsibility for harm caused by AI actions. This approach can incentivise better corporate behaviour with respect to AI.

Artificial intelligence can currently assemble data from multiple sources and re-identify a person's identity from de-identified materials. Does this render current legal protections of privacy obsolete?