Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Instagram is a powerful way to reach customers in Australia. Whether you’re selling products, running a service-based business or building your brand with creator partnerships, commercial content on Instagram can drive real results.
But once your posts cross into “advertising” territory, you take on specific legal obligations. From avoiding misleading claims to disclosing paid partnerships, running compliant giveaways and handling customer data responsibly, there’s more to a good Instagram strategy than slick visuals.
This guide walks you through the key advertising and consumer law issues relevant to Instagram in Australia, explains how disclosure and competitions work in practice, and outlines the core legal documents that help protect your business as you grow.
What Counts as Commercial Content on Instagram?
“Commercial content” is any Instagram activity designed to promote or sell products or services, or to build brand awareness for a commercial benefit. In practice, that can include:
- Posting about your products or services to encourage sales
- Partnering with influencers or creators (paid, gifted or value-in-kind)
- Running paid ads or boosting posts
- Launching giveaways or trade promotions to grow your audience
- Using affiliate links or discount codes that earn you a commission
If your content is likely to influence a consumer’s decision (even indirectly), it’s safest to treat it as “advertising” and apply the rules covered below.
What Laws Apply to Instagram Advertising in Australia?
Several legal frameworks apply to commercial content on Instagram. The big ones are the Australian Consumer Law (ACL), industry advertising standards, privacy law and intellectual property. Here’s how they fit together.
Australian Consumer Law (ACL): No Misleading or Deceptive Conduct
Under the ACL, it’s unlawful to make false or misleading claims about your products, services, prices or competitors. This applies to captions, Stories, Reels, carousels, pinned highlights and comments.
In practice, that means:
- Claims must be accurate and able to be substantiated (e.g. performance, health or environmental claims)
- Prices and discounts must be genuine and clearly explained (including any material conditions)
- Reviews and testimonials must be truthful and not cherry‑picked in a misleading way
- Important terms (e.g. subscription renewals, exclusions) must be clear and not hidden
The ACL is enforced by the ACCC (the Australian Competition and Consumer Commission) and state/territory consumer regulators. To understand how the law treats misleading conduct in practice, it’s worth revisiting the basics of section 18 of the Australian Consumer Law and the elements of misleading or deceptive conduct.
Industry Standards: AANA Code and Ad Standards
Alongside the ACL, there’s a self‑regulatory framework managed by Ad Standards under the Australian Association of National Advertisers (AANA) Codes (including the Code of Ethics). These Codes expect that advertising is “clearly distinguishable” from organic content.
In plain English: if a post is advertising (for example, because there’s payment, gifting or a commercial arrangement), it should be obvious to the average Instagram user that it’s an ad. Complaints about influencer and social content often go to Ad Standards, while misleading conduct issues may attract ACCC attention. Both frameworks matter, and you should comply with both.
Intellectual Property: Use Only What You Own or Have Permission To Use
Photos, video, music, graphics and logos are protected by copyright and other IP rights. If you use someone else’s content without permission, you risk takedowns and infringement claims.
Stick to assets you created, content you’ve licensed, or UGC (user‑generated content) you have permission to repost. If you’re building a brand on Instagram, consider registering your name or logo as a trade mark to protect it as you scale - Sprintlaw can help you register your trade mark.
Privacy and Data Protection: When the Privacy Act Applies
If you collect personal information via Instagram (for example, through DMs, lead generation forms or links to your website), you may have obligations under the Privacy Act 1988 (Cth). As a general rule, the Australian Privacy Principles apply to “APP entities”, which typically includes businesses with an annual turnover above $3 million.
Some small businesses under the $3 million threshold are still covered, including those that provide health services, trade in personal information, hold Tax File Number information, or provide services to a Commonwealth contract, among other limited cases. Many startups also choose to adopt a privacy framework voluntarily because it builds trust with customers and supports future growth.
If the Privacy Act applies to you - or you decide to opt in - make sure you publish a clear, accessible Privacy Policy and use a Privacy Collection Notice whenever you collect personal information (including via Instagram links). Your policy should explain what you collect, why, how you use and store data, and how users can contact you about privacy.
Do I Need To Disclose Paid Partnerships and Affiliate Links?
Yes. Transparency is essential both under the AANA Codes (“clearly distinguishable” requirement) and the ACL (which prohibits misleading conduct). If content is paid, gifted or otherwise incentivised, the relationship needs to be obvious to viewers.
What Counts as “Paid” or “Incentivised”?
Any material benefit can trigger disclosure. That includes money, free products or services, discounts, value‑in‑kind, affiliate commissions, or where you’ve had editorial control over the content.
What Does Good Disclosure Look Like on Instagram?
- Use clear labels such as “Ad”, “Sponsored”, “Paid Partnership” or “Gifted” - placed at the start of the caption and/or directly on the content
- Don’t bury disclosures among a block of hashtags, in comments, or deep in a multi‑line caption
- Use platform tools (e.g. Instagram’s “Paid partnership” tag) as a supplement, not a substitute, for clear wording
- For affiliate links or codes, say so plainly (e.g. “affiliate link” or “I may earn a commission”)
If you’re engaging creators, set expectations in writing. An Influencer Agreement can cover disclosure wording, content approvals, usage rights, and compliance with the ACL and AANA Codes.
Can I Run Giveaways and Competitions on Instagram?
Yes - but plan them properly. “Trade promotions” (competitions used to promote your business) are regulated at state and territory level, and rules vary across Australia.
Games of Skill vs Games of Chance
- Games of skill are judged on merit (e.g. best caption). They typically don’t require a permit, but you still need clear terms and to run a fair process.
- Games of chance involve random draws or luck (e.g. “like, follow and tag for a chance to win”). These often have stricter rules, and in some jurisdictions may require permits depending on prize pool and format.
Permits and State/Territory Rules
Rules change from time to time, but as a general guide, some jurisdictions (for example, South Australia and the ACT) may require permits for certain chance‑based promotions above specified prize thresholds, while others have conditions you must follow even if a permit isn’t needed. Because these requirements are state‑based and can be updated, always check the current rules before launch.
Your Competition Checklist
- Write clear, accessible terms and conditions that cover eligibility, entry steps, opening/closing dates and times, judging/draw method, prize details and notification
- Comply with Instagram’s promotional rules (for example, don’t inaccurately tag content or encourage users to tag themselves in content they’re not in)
- Make it easy for entrants to find your T&Cs (link in bio, Story highlights, landing page)
- If a permit is required in any state/territory, obtain it before you go live
- Keep records of entries, the draw and winner notifications
For a deeper look at common rules and pitfalls, see our guide to giveaway laws in Australia, and consider using professionally drafted Competition Terms & Conditions for consistency and compliance.
Do Privacy Laws Apply To My Instagram Marketing?
They can. The Privacy Act doesn’t automatically apply to every small business, but many Instagram strategies involve activities that make privacy compliance good practice (and sometimes required).
When You’re Likely Covered
- Your annual turnover is more than $3 million (you’re generally an APP entity)
- You provide health services and hold health information (even if small)
- You trade in personal information (for example, selling or renting customer data)
- You handle Tax File Number information or provide services under a Commonwealth contract
- You’ve chosen to opt in to be covered by the Privacy Act
Practical Steps for Instagram Marketers
- Collect only what you need and be upfront about why you’re collecting it
- Link to your Privacy Policy wherever you collect personal information (e.g. sign‑up forms, landing pages)
- Provide a concise Privacy Collection Notice at the point of collection
- Store data securely and limit internal access
- Let users opt out of marketing and honour those requests promptly
Even if you fall under the small business exemption, many brands adopt privacy best practices early to build customer trust and prepare for growth (or future law reform).
What Legal Documents Should You Have in Place?
Strong contracts and clear policies reduce risk, set expectations and help you stay compliant as your Instagram presence grows. The right mix depends on your model, but most businesses will benefit from the following.
- Influencer Agreement: Sets out deliverables, timing, disclosure wording, approvals, IP ownership/licences, usage rights, and payment terms when engaging creators or ambassadors. Link expectations to the ACL and AANA Codes. Try Sprintlaw’s Influencer Agreement.
- Privacy Policy: Explains what personal information you collect, why and how you use, store and disclose it, plus how users can access or correct their data. Helpful even if you’re a small business. Start with a tailored Privacy Policy.
- Website Terms & Conditions: If you drive Instagram traffic to your site, have Website Terms & Conditions covering acceptable use, IP, disclaimers and liability limits.
- Competition Terms & Conditions: Standardised rules for trade promotions make compliance easier across jurisdictions and platforms. Use Competition Terms & Conditions and adjust per campaign.
- Copyright Licence (UGC/Creator Content): If you want to repost user‑generated content or use creator assets beyond the original post, get clear rights in writing. A Copyright Licence Agreement avoids disputes over scope and duration.
- Terms of Sale / Customer Terms: For ecommerce, set clear product descriptions, pricing, shipping, returns and warranty processes in your online terms (for example, Terms of Sale or platform terms).
- NDA (Confidentiality): When discussing campaigns, pricing or unreleased products with contractors or partners, a simple Non‑Disclosure Agreement helps protect confidential information.
You won’t need every document for every phase. Start with the essentials that match your activity, then build out your “legal stack” as your Instagram strategy scales.
Best Practices To Stay Compliant (And Build Trust)
Think of compliance as part of your brand experience. Clear, honest and transparent content performs better over time - and reduces your legal risk.
- Make disclosures obvious and consistent across formats (feed, Stories, Reels, Lives)
- Substantiate claims (especially performance, health or environmental claims) before posting
- Keep a checklist and internal approvals process for campaigns and collaborations
- Use platform tools (e.g. “Paid partnership” tag) as an extra layer - not your only disclosure
- Standardise your competition process: templated T&Cs, jurisdiction checks, record‑keeping
- Map your data flows and keep your Privacy Policy and notices up to date
- Protect your brand assets early - consider trade mark registration for your name and logo
Finally, remember that both the ACL and industry Codes evolve. Set a regular cadence to review your internal guidelines and update them as rules (and Instagram’s features) change.
Key Takeaways
- Instagram advertising in Australia sits under the ACL (no misleading or deceptive conduct) and the AANA Codes (ads must be clearly distinguishable), so treat transparency as non‑negotiable.
- Disclose paid, gifted and affiliate content clearly and prominently - use plain‑English labels and don’t bury disclosures.
- Competitions are regulated at state/territory level; write robust T&Cs, follow platform rules and check if any permits are required for chance‑based promotions.
- Privacy obligations depend on whether you’re covered by the Privacy Act; many brands still adopt best practice and publish a clear Privacy Policy and Collection Notice.
- Use only content you own or have licensed, and consider trade mark registration to protect your brand as you grow.
- Core documents for Instagram activity include an Influencer Agreement, Privacy Policy, Website Terms & Conditions, Competition T&Cs, a Copyright Licence for UGC and clear Terms of Sale.
- Build simple internal processes for approvals, disclosure and record‑keeping - it protects your business and builds customer trust.
If you’d like a consultation on making your business compliant for commercial activities on Instagram, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.








