Australia Media Law Guide

Defamation, Privacy and Data Protection


Patrick George

Patrick George

Partner - Giles/George



Defamation and Privacy Law in Australia 

Contributor: Patrick George (Partner, Giles/George)


Each state and territory of Australia has enacted the Defamation Act 2005 (‘the Act’) or its equivalent. The Act modified the Australian common law without fully replacing it. Amendments have been made to the Act, taking effect in most jurisdictions from 1 July 2021. Further amendments to the Act are proposed to take effect from 1 July 2024 (but have not been agreed to be introduced in all jurisdictions).

The cause of action

The cause of action for defamation is constituted by the publication of defamatory matter about a person to someone other than that person. The Act abolishes the distinction between libel and slander and the action for defamation may be brought without proof of special damage.

There are three traditional elements to the cause of action that the plaintiff must establish, namely publication, identification and defamatory meaning. A fourth element was added in 2021 requiring that the plaintiff must also establish serious harm to reputation.

The Act expressly extinguishes the cause of action for most corporations. Only non-public and ‘not for profit’ corporations or corporations which employ fewer than 10 persons can sue for defamation.

The Act also extinguishes the cause of action of or against deceased persons (except in Tasmania).


Publication is the foundation of the cause of action for defamation. Publication consists of the communication of matter defamatory about the plaintiff to some person other than the plaintiff[1].

The cause of action is located at the place where the damage to reputation occurs. Publication involves the comprehension of the matter by a third party. That is when and where damage to reputation occurs. It is the location where recipients download material from the internet[2].


Identification of the plaintiff is an essential part of the cause of action. The plaintiff must prove that the defendant published the defamatory matter ‘of and concerning’ the plaintiff or ‘about’ the plaintiff.

Defamatory Meaning

The third essential element of the cause of action for defamation is that the published matter should convey a defamatory meaning. At common law, words are defamatory if they convey a meaning or an imputation (asserting or attributing an act or condition to a person) which would be likely to cause ordinary reasonable people to think less of the person about whom the words are published.

The Act does not prescribe how the matter should be interpreted or define what is defamatory, leaving those issues to be determined in accordance with the common law.

The test of what is defamatory is an objective or reasonable standard consistent with the test of whether it has the tendency ‘to lower the plaintiff in the estimation of right-thinking members of society generally’[3]

Serious Harm

The fourth element of the cause of action for defamation, introduced under the 2021 amendments to the Act, is that the defamatory publication has caused or is likely to cause serious harm to the reputation of the plaintiff.

Resolution without litigation

The Act provides for an early resolution procedure by way of an offer to make amends. The publisher may make an offer to make amends to an aggrieved person after receipt of notice of the alleged defamatory imputations.
It is mandatory for the plaintiff to send a ‘concerns notice’ to the publisher before commencing proceedings, unless granted leave by the court not to do so.

An offer to make amends in response is deemed to be without prejudice. There are a number of specific requirements to be met in order to make a legitimate offer.


The Act (in jurisdictions which retain juries) gives a plaintiff or defendant the right to elect a trial before jury unless the court otherwise orders. Juries determine the factual issues – whether the defendant has published defamatory matter about the plaintiff and if so, whether any defence raised by the defendant has been established. Juries do not determine the award of damages, which is expressly reserved for the Trial Judge.


The common law provides defences justifying or excusing the publication of defamatory matter. The Act provides a number of statutory defences which are additional to any other defence or exclusion of liability available at common law.

The limitation period for bringing an action is 1 year from the date of publication of defamatory matter. The court may extend that period for up to 3 years from that date, if the court is satisfied that it is just and reasonable to do so[4].


At common law, it is a defence that the imputation complained of is true in substance and in fact. It has long been held that there is no wrong done by publishing the truth about the plaintiff. The presumption is that, by telling the truth about the plaintiff, his or her reputation is not lowered beyond its proper level, but is merely brought down to it[5]. A truthful statement defines reputation rather than damages it.

The Act provides a defence of justification to the publication of defamatory matter if the defendant proves that the defamatory imputations carried by the matter complained of are substantially true.

There is an alternative statutory defence of contextual truth which provides a defence where the matter complained of conveys a number of defamatory meanings but only one or some of which are the subject of the plaintiff’s complaint in the proceedings. Where there are other imputations of such significance contained in the publication that those about which the plaintiff complains do not further harm his or her reputation, then because of the substantial truth of the contextual imputations, the plaintiff’s cause of action will fail.

Absolute Privilege

The common law defence of absolute privilege is expanded under the Act. The defence of is provided to protect publications made to or by Parliamentary Bodies, Courts or Tribunals established by law and publications in the course of proceedings within such bodies.

The 2024 amendments expand the defence of absolute privilege to protect victim-survivors from reporting alleged criminal and unlawful conduct and misconduct to police and other complaints-handling bodies.

Qualified privilege

The common law defences of qualified privilege are also expanded under the Act.

The defence of qualified privilege at common law is directed to the occasion or circumstances of the publication. The defendant must generally establish a legitimate duty and interest to publish the matter.

Prior to the introduction of the Act, the High Court of Australia had extended the common law defence of qualified privilege under the ‘Lange’ defence to statements made ‘in the course of discussion of government and political matter’, subject to malice and subject to the publisher acting reasonably[6].

In doing so, the High Court upheld the implied guarantee of freedom of communication under the Australian Commonwealth Constitution which protects communications made to the public on a government or political matter. There are also statutory defences of qualified privilege for the publication of matter concerning an issue of public interest or for the provision of certain information.

Under s29A of the Act, where the matter published concerns an issue of public interest, and the defendant reasonably believes that the publication of the matter is in the public interest, there is a separate statutory defence of qualified privilege. The court may take into account a number of specific considerations applicable to the circumstances of the publication, expressly provided in the Act, but is not limited by those considerations.

Under s30 of the Act, the defendant must establish that the matter was published to a recipient with an interest (or an interest reasonably apparent to the defendant) in having information on some subject, that the matter was published in the course of giving the recipient information on that subject and ‘the conduct of the defendant in publishing that matter is reasonable in the circumstances’.

There are also statutory defences for the publication, or fair report, of public documents, and for a fair report of proceedings of public concern.

Honest opinion

There is a statutory defence for the expression of opinion relating to a matter of public interest and based on ‘proper material’[7] in addition to the common law defence of fair comment but this defence is broader. It may be available even where the defendant is unable to establish that all of the material on which the comment was based is proper material, provided that the opinion might reasonably be based on so much of the material that is proper material.

The defence requires that the alleged comment be sufficiently linked to facts being commented on by reason of those facts being stated (in specific or general terms) in the publication containing the comment, or being referred to in it, or being accessible from a reference, link or other access point or otherwise apparent from the context in which the matter is published, or being notorious[8]. This enables the readers to judge for themselves whether the comment based on those facts is fair.

The statutory defence of honest opinion may be defeated if it can be shown that the opinion was not honestly held at the time the defamatory matter was published.

Innocent dissemination

There is a specific statutory defence of innocent dissemination where the defendant can prove that the defendant published the matter as a subordinate distributor, that the defendant neither knew nor ought reasonably to have known that the matter was defamatory and that the defendant’s lack of knowledge was not due to any negligence on the part of the defendant.

The 2024 amendments introduce protection for digital intermediaries which host third party defamatory content. It recognises that internet intermediaries often will be unaware of the content they host until they receive a complaint.

There is an exemption from liability for a digital intermediary for the publication of digital matter if its role in the publication is limited to providing a caching service, conduit service or storage service without taking an active role in the publication, such as initiating, promoting or editing the matter; or if it is a search engine provider with a role limited to providing an automated process for users to generate search results identifying or linking to a webpage on which the matter is located.

There is a defence for a digital intermediary for the publication of digital matter posted by a third party, if it takes reasonable steps to remove or prevent access to the matter within 7 days of the receipt of a complaint. The amendments also enable courts to issue take-down orders against a digital intermediary which is not a party to the proceedings.


At common law, damages are awarded to compensate the plaintiff for the harm done by the effect of the publication of the defamatory matter on the plaintiff and on the plaintiff’s reputation[9].

Damages will be assessed by the Trial Judge alone. The amount of damages awarded must reflect an appropriate and rational relationship between the harm sustained by the plaintiff and the amount of damages awarded[10].

The amount of damages for non-economic loss is capped under the Act at the sum of $459,000 as at 1 July 2023, subject to adjustment by the change in average weekly earnings year to year. The maximum amount of damages is to be awarded only in a most serious case.

The court must award aggravated damages, for any amount, separately from an award of damages for non-economic loss but may award a sum exceeding the capped amount if it is satisfied that the circumstances of the publication are such as to warrant an award of aggravated damages.

The court may not award exemplary or punitive damages.

There are a number of factors that are expressly admissible on the question of mitigation of damages such as the publication of an apology or correction, the plaintiff has already recovered damages, agreed to receive compensation or has brought other proceedings in relation to publication of matter having the same meaning or effect as the defamatory matter in the proceedings.

The publication of an apology is not an admission of liability but can be used in mitigation of damage.
There is specific provision that the court may take into account the conduct of the parties in awarding costs in defamation proceedings.


The common law in Australia does not clearly recognise a legal right to protection from invasion of privacy[11]. In a number of instances however protection may be provided incidentally by other laws which protect rights such as property, personal security and confidential information.

There have been some judgments (in Queensland[12] and Victoria[13]) which have held that a cause of action for invasion of privacy is part of the common law of Australia.

In the absence of a clearly established common law right, there has been agitation to introduce a statutory right for a deliberate and serious invasion of privacy in order to clarify the law and ensure uniformity throughout Australia.

The Australian Law Reform Commission has recommended a statutory cause of action be legislated. A claimant would be required to show:

(a) Misuse of private information, where there is a reasonable expectation of privacy in all of the circumstances; or
(b) Intrusion upon seclusion.

In determining whether an individual’s privacy has been invaded, the Court would be required to be satisfied that the public interest in maintaining the claimant’s privacy outweighed other matters of public interest (such as the interest of the public to be informed about matters of public concern and the public interest in allowing freedom of expression).

The ALRC recommended that the cause of action may only be brought by natural persons (not companies), be actionable without proof of damage and be restricted to intentional or reckless acts on the part of the defendant.
The ALRC proposals for reform remain under consideration. Reform providing a statutory right to privacy may be introduced under proposed changes to the legislation referred to below.

Data Retention

The Privacy Act 1988 (Cth) (the “Privacy Act”) governs the handling and storage of personal information by Australian companies. “Personal information” means information or an opinion, whether true or not, and whether recorded in a material form or not, about an identified individual, or an individual who is reasonably identifiable.
Australian Privacy Principle 11.2 provides that organisations must take reasonable steps to ensure that personal information is not kept longer than is necessary for any purpose which is permitted under the Privacy Act.

Personal information may be deleted (if in electronic form) or destroyed (if in physical form), but it is also acceptable to de-identify the data so that it is no longer within the definition of “personal information” under the Privacy Act (in other words, so that the individual is no longer reasonably identifiable from the information). Care needs to be taken with any deletion, destruction or de-identification to ensure that any reconstruction or re-identification is not possible.

It should be noted that this is a “reasonable steps” obligation; rather than an absolute obligation to delete every item of personal information as soon as it is no longer needed, it allows businesses some flexibility to manage the deletion or destruction of personal information in a practicable way.

In 2023, the Commonwealth Attorney General’s Department issued the ‘Privacy Act Review’ which made recommendations for reform of the Privacy Act to ensure that privacy laws in Australia are fit for purpose in the digital age. The Commonwealth Government has committed to implementing changes to the Privacy Act in 2024 with the clear expectation that privacy laws will be strengthened to ensure the collection, use and disclosure of people’s personal information is reasonable, reflects community expectations and is adequately protected from unauthorised access and misuse. The Privacy Act does not apply to small businesses or employee records.
There are also legal and commercial considerations which businesses need to take into account when determining how long to retain data, in addition to the Privacy Act.

The business will need to retain records for commercial purposes. A business will generally need to retain records of its commercial relationships and transactions for as long as those relationships and transactions continue.

Certain laws require businesses to retain specified records for a specified period of time. For example, the Corporations Act 2001 (Cth) requires that certain financial records be retained for a minimum of seven years.
It is often also desirable for a business to retain records in case a dispute arises in relation to their subject matter, so that the business can produce those records to assert a claim or in its defence.

All of the above requirements suggest that businesses should retain data for as long as practically possible.

Contributor: Patrick George (Partner)
Level 7, 135 King Street
Sydney NSW 2000

The material in this Guide is for general information only and does not constitute legal advice.

[1] Pullman v Hill & Co Ltd [1891] 1QB 524 at 527; Dow Jones & Company Inc v Gutnick (2002) 210 CLR 575 at [26], [124]
[2] Dow Jones & Co Inc v Gutnick (2002) 210 CLR 575 at [44]
[3] Sim v Stretch [1936] 2 All ER 1237 at 1240
[4] The Limitation Acts in the various states and territories have been amended to reflect this time limitation.
[5] Rofe v Smith’s Newspapers Limited (1924) 25 SR (NSW) 4 at 21
[6] Lange v Australian Broadcasting Corporation (1997) 189 CLR 520
[7] Channel Seven Adelaide Pty Ltd v Manock [2007] HCA 60
[8] Channel Seven Adelaide Pty Ltd v Manock [2007] HCA 60 at [45]; Pervan v North Queensland Newspaper Company Ltd (1993) 178 CLR 309 at 316, 327
[9] Amalgamated Television Services Pty Ltd v Marsden [2002] NSWCA 419 at [1315]
[10] Ali v Nationwide News Pty Ltd [2008] NSWCA 183 at [93]
[11] Australian Broadcasting Corporation v Lenah Game Meats Pty Limited (2001) 208 CLR 199
[12] Grosse v Purvis (2003) QDC 151
[13] Jane Doe v Australian Broadcasting Corporation [2007] VCC 281

Our Newsletter