Only 19% of Australian businesses have started preparing for the changes to the privacy legislation, according to a report commissioned by the Federal Privacy Commissioner.

The report into consumer, business and government attitudes towards privacy shows that 91% of businesses have not yet started preparing for the laws believing they do not have enough information to begin preparation for the implementation of the legislation. 

The 12-month grace period expires in December. But the report said many Australian businesses are exposing themselves to the risk of legal action and “damage to reputation and credibility” through their ignorance of the changes.