Regulation Guide
8 min read
By Pedro Carreira
Updated 25 June 2026
Standards Australia / Privacy Act obligations
Regulating Authority
Privacy Act breaches from impr
Max Penalties
All businesses handling person
Who It Affects
Information Destruction Standard (AS/NZS 4774) affects All businesses handling personal information, financial institutions, healthcare providers, legal firms, government agencies, and any business subject to the Privacy Act 1988. While not a Victorian regulation per se, the Australian Standard for information destruction combined with Privacy Act obligations creates a de facto compliance requirement for businesses destroying confidential documents and data-bearing devices. Understanding and complying with this regulation is essential to avoid penalties and ensure responsible waste management.
What Is Information Destruction Standard (AS/NZS 4774)?
While not a Victorian regulation per se, the Australian Standard for information destruction combined with Privacy Act obligations creates a de facto compliance requirement for businesses destroying confidential documents and data-bearing devices.
Key Requirements for Businesses
- Confidential documents must be destroyed to prevent reconstruction
- Secure destruction chain of custody required
- Certificate of destruction must be provided
- Cross-cut shredding to P-4 or higher security level for sensitive documents
- Hard drive destruction must render data unrecoverable
- Destruction service providers should hold NAID AAA certification or equivalent
Penalties and Enforcement
Privacy Act breaches from improper document destruction can result in fines up to $50 million for corporations. Notifiable Data Breach scheme requires reporting.
How to Ensure Compliance
To ensure compliance with Information Destruction Standard (AS/NZS 4774), businesses should: maintain accurate waste records, use licensed waste transporters, and conduct regular waste audits. Bundle Waste includes a compliance review as part of every free waste audit.
Related Waste Services
Related Resources
Frequently Asked Questions
What are the main waste management laws in Victoria?+
Key legislation: Environment Protection Act 2017, Environment Protection Regulations 2021, Climate Change Act 2017, Circular Economy (Waste Reduction and Recycling) Act 2021. The EP Act 2017 introduced a general environmental duty (GED) requiring all businesses to minimise risks of harm from pollution and waste.
What is the General Environmental Duty in Victoria?+
The GED under Section 25 of the EP Act 2017 requires businesses to take reasonably practicable steps to minimise risks of harm to human health and the environment from pollution and waste. This is proactive — you must manage risks before harm occurs. Penalties reach about $2.03 million for corporations.
Do I need an EPA licence for waste management in Victoria?+
You need an EPA licence if you operate a scheduled premises (landfill, transfer station, waste treatment facility) or transport prescribed industrial waste. General businesses generating standard commercial waste do not need a licence but must use licensed transporters and disposal facilities.
What is prescribed industrial waste in Victoria?+
Prescribed Industrial Waste (PIW) includes: chemicals, solvents, pesticides, heavy metals, asbestos, clinical waste, contaminated soil, and waste oils. PIW is classified under the EP Regulations 2021 and must be tracked through EPA's waste tracking system. Penalties for illegal PIW disposal reach about $2.03 million.
What are the penalties for illegal waste disposal in Victoria?+
Penalties under the EP Act 2017: indexed in penalty units (one unit = $203.51 in 2025-26) and rising each 1 July: aggravated littering can reach about $407,000 (2,000 penalty units) and serious pollution offences about $2.03 million for corporations (10,000 penalty units), while lower-level littering attracts smaller on-the-spot fines. Criminal penalties can include imprisonment.
What is the EPA waste tracker system?+
EPA Victoria's waste tracker system digitally tracks prescribed industrial waste (PIW) from generation to disposal. Waste generators must create a consignment for each PIW movement; transporters confirm pickup and delivery. Non-compliance is an offence under the EP Regulations 2021.
Need Help With Compliance?
Bundle Waste ensures your waste management setup meets all Victorian regulatory requirements. Free compliance review included with every audit.
Get Your Free Audit →
Updated 25 June 2026
