No. Doxxing—publishing private or identifying information without consent—is illegal in Australia under multiple federal and state laws, including the Enhanced Protective Security Act 2026 and Privacy Act 1988. Offenders face penalties up to $500,000 for individuals or $2.5 million for corporations, with state-based cyberstalking and harassment provisions imposing additional liabilities.
Key Regulations for Doxxing in Australia
- Enhanced Protective Security Act 2026: Criminalizes the disclosure of personal information with intent to harm, enforceable by the Australian Security Intelligence Organisation (ASIO) and Federal Police.
- Privacy Act 1988 (Cth): Prohibits the misuse of personal information under the Notifiable Data Breaches Scheme, mandating 30-day reporting to the Office of the Australian Information Commissioner (OAIC).
- State Cyberstalking Laws: Victoria’s Crimes Act 1958 (s 21A) and NSW’s Crimes Act 1900 (s 13) impose penalties up to 5 years imprisonment for online harassment, including doxxing.
Enforcement prioritizes intent to intimidate, with aggravating factors such as targeting vulnerable groups or public officials. The eSafety Commissioner also issues takedown notices under the Online Safety Act 2021, requiring platforms to remove doxxing content within 24 hours. Jurisdictional overlaps demand compliance with both Commonwealth and state regimes, particularly for cross-border digital conduct.