Australia’s Office of the Australian Information Commissioner (OAIC) has started its first big crackdown on businesses that collect too much customer data or keep it too long. The agency can fine businesses up to $66,000 if their privacy rules fail legal standards. The OAIC will check 60 businesses across six risky sectors this January. These include real estate rentals, chemists issuing paperless receipts, licensed venues scanning IDs, pawnshops, car rentals, and dealerships collecting data for test drives. OAIC Commissioner Elizabeth Tydd said customers often feel they cannot refuse handing over personal info at places like open homes or pubs. Privacy Commissioner Carly Kind explained that too much data collection puts customers’ security at risk. Many companies also hold on to data longer than needed, increasing risks like hacking. Tydd said, “When that happens, it creates additional privacy risks; for example, cybersecurity risks where personal information can be harvested.” The OAIC will demand clear policies from businesses showing why and how they store data, how long it is kept, and whether it is sent abroad. The Australian Automotive Dealer Association’s chief James Voortman said car dealerships have faced many cyberattacks but spend heavily to protect customer data. Real estate agents have been criticised for asking for excessive personal details such as year-long bank statements and social media profiles. The New South Wales government has also moved to limit data collection by real estate agencies that gather about 187,000 ID details weekly. Stacey Holt from Real Estate Excellence said tenants often share more data to improve their rental chances. She added that data is kept to meet landlord insurance needs and market properties, and most agencies delete data when no longer required. Holt noted breaches usually happen with agencies using generic or outdated privacy policies. The OAIC said large businesses and small franchisees will both be checked. Some firms might be caught off-guard as the sweep was announced during busy holiday weeks, but the commissioner expects many to have improved their privacy policies by now.