Section 26XA — Privacy Act 1988 (Cth)

When declarations cease to be in force

An eligible data breach declaration ceases to be in force at the earliest of the following:

(a) if a time at which the declaration will cease to be in force is specified in the declaration—at that time;

(b) the time at which the declaration is repealed;

(c) the start of the day after the end of the period of 12 months beginning on the day the declaration commences.

Sourced from the Federal Register of Legislation at 17 May 2026. For the latest information on Australian Government law please go to https://www.legislation.gov.au. Verify the current text against the official source before relying on it.

Related sections

s 26WT — Exception—inconsistency with secrecy provisions
s 26WU — Power to obtain information and documents relating to eligible data breaches
s 26X — Eligible data breach declaration
s 26XB — Authorisation of collection, use and disclosure of personal information
s 26XC — Disclosure of information—offence
s 26XD — Division not limited by secrecy provisions

Research how courts apply s 26XA

BriefBridge searches Australian caselaw by meaning — every answer cited to the paragraph.

Try BriefBridge free