Australian surveillance laws & ANPR legality

The federal layer: Privacy Act 1988

Australia has no single “surveillance law.” The closest national framework is the Privacy Act 1988 (Cth), which sets out 13 Australian Privacy Principles (APPs). The Act covers Commonwealth agencies and most private businesses turning over more than A$3 million a year, but it explicitly excludes state and territory government agencies — which is where most road-side ANPR and public CCTV operates.

Number plates are treated as personal information once they can be linked to a person, so an ANPR system that stores or shares plate reads is generally handling personal information under the APPs — collection must be reasonably necessary, use must be for the purpose it was collected for, and security safeguards must be in place.

Enforcement cameras vs surveillance cameras

Australian law distinguishes cameras that are enforcing a traffic offence (speed, red light, mobile-phone use, seatbelt, bus-lane, tolling) from cameras that are simply watching a public space (council CCTV, transport hubs, shopping centres).

• Enforcement cameras are authorised by each state’s road-transport legislation and can only issue an infringement for the offence they were gazetted for.
• Public CCTV is generally authorised under local council by-laws or transport-authority policy, and is subject to the state’s surveillance devices act plus privacy law.
• Police ANPR (mobile and fixed) is authorised under state law-enforcement powers, usually with retention limits that vary sharply between jurisdictions.

State by state: what’s different

New South Wales

NSW operates one of the most active enforcement-camera programs in the country. The Road Transport Act 2013 (NSW) authorises fixed and mobile speed cameras, red-light and combined red-light/speed cameras, heavy-vehicle safety cameras, and — since 2019 — mobile-phone detection cameras that use machine-learning image analysis. Surveillance devices are separately regulated by the Surveillance Devices Act 2007 (NSW).

Victoria

Victoria’s Road Safety Act 1986 (Vic) underpins fixed, mobile, and point-to-point speed enforcement plus red-light cameras, while the Surveillance Devices Act 1999 (Vic) governs listening and optical devices. Victoria was also the first state to publicly deploy mobile-phone detection cameras alongside NSW, and its camera-generated data is overseen by the Road Safety Camera Commissioner — a statutory office that publishes annual reports.

Queensland

QLD relies on the Transport Operations (Road Use Management) Act 1995 for enforcement cameras, including the state’s mobile-phone and seatbelt cameras rolled out from 2021. Surveillance more broadly is governed by the Invasion of Privacy Act 1971 (Qld), which is unusually narrow compared to other states — it primarily addresses listening devices, so visual and ANPR surveillance falls back on general privacy principles and specific enabling statutes.

Other jurisdictions

WA, SA, TAS, ACT, and NT each have their own surveillance-devices legislation and road-transport enabling laws. The pattern is similar: enforcement cameras are gazetted under road-safety law, and everything else sits under a state Surveillance Devices Act plus the APPs where private operators are involved.

Common legal questions

Is it legal to photograph a police ANPR vehicle?

Yes. There is no general prohibition on photographing police, their vehicles, or their equipment from a public place in Australia. Obstructing an officer or trespassing to get the shot is a different matter.

How long can ANPR plate reads be kept?

Retention is set by each police force’s internal policy, shaped by the relevant surveillance-devices act. It ranges from days (for “no-hit” reads in some jurisdictions) to years for hits linked to an investigation.

Can a private business run ANPR in its car park?

Yes, if it complies with the APPs (where the Privacy Act applies) and the state Surveillance Devices Act. In practice this means a clear notice at entry, a documented purpose (typically parking enforcement or fraud prevention), and safeguards on how long reads are retained and who they’re shared with.

Can I request footage of myself?

Under APP 12 you can ask a covered organisation for access to personal information they hold about you, including CCTV footage in which you’re identifiable. State agencies are generally covered by equivalent state freedom-of-information regimes.

Where OzWatch fits in

OzWatch doesn’t store or process any camera output. It visualises the locations of enforcement and surveillance cameras that are already recorded in public sources — OpenStreetMap and state open-data portals — so people can see the shape of the network the law authorises. Open the map →

Primary sources

• OAIC — Australian Privacy Principles
• Privacy Act 1988 (Cth) — full text
• Surveillance Devices Act 2007 (NSW)
• Surveillance Devices Act 1999 (Vic)