Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Launching or running a business in Australia means making daily choices about how you operate, who you work with, and how much information you share. You’ll hear terms like “private company,” “private agreement,” or “private information” - but what does “private” really mean in a business and legal context, and why does it matter for your day-to-day decisions?
If you’re asking whether certain documents should be confidential, who can access your company details, whether your company is “private,” or how to legally protect sensitive information, you’re in the right place. This guide explains what “private” means under Australian business and commercial law, where it matters most, and the practical steps you can take to protect your interests.
If this feels complex, don’t worry - with a clear plan and the right legal tools, managing privacy and confidentiality is absolutely doable. Let’s break it down in plain English and help you set strong foundations.
What Does “Private” Mean In Business And Commercial Law?
In Australian business settings, “private” generally means limited access, restricted disclosure, or confidentiality. The precise meaning depends on context:
- Private company: A proprietary limited company (Pty Ltd) that isn’t listed on a stock exchange and can’t offer shares to the public.
- Private agreement: A contract whose terms are not made public and often include confidentiality obligations.
- Private information: Non-public information (such as financials, pricing, client lists, trade secrets, or source code) that is protected by law, contract, or both.
- Private dealings: Negotiations or transactions conducted confidentially between selected parties.
Think of “private” as the opposite of “public.” Public implies broad access and transparency; private implies limited access and a need-to-know approach.
Why does this distinction matter? Because whether something is private or public can change your rights, your obligations, and how your business must operate under Australian law.
How Does “Private” Apply To Business Structures In Australia?
One of the most common places you’ll see “private” used is in company structures. If you operate through a company, you’ll likely be deciding between proprietary (private) and public models.
What Is A Private Company (Pty Ltd)?
A proprietary limited company is the most common incorporated structure for Australian SMEs. Key characteristics include:
- No public fundraising - you cannot offer shares to the general public or list on a stock exchange.
- Shareholder limits - generally capped at 50 non-employee shareholders.
- More limited public disclosure than public companies - though you still have reporting and record-keeping obligations.
- Ownership typically concentrated among founders, family members, and trusted investors.
If you set up a “Pty Ltd,” you’re forming a private company. This usually gives you more control over ownership and visibility of your internal information. If you’re weighing names and registration, it helps to understand the difference between a business name and a company name when planning your structure and branding.
How Is A Public Company Different?
Public companies can raise capital from the public and may list on an exchange. They face stricter disclosure, governance, and reporting obligations. Choosing between private and public affects growth, control, and privacy trade-offs - most early-stage businesses opt for private.
For a quick comparison of structures, it’s helpful to understand what a public company is and how it differs from a proprietary entity.
Do You Need A Company Constitution?
Private companies commonly adopt a Company Constitution that sets governance rules (director powers, share transfers, meetings). If you have multiple owners, you may also want a Shareholders Agreement covering decision‑making and information rights (including who can access sensitive company information and when).
What Does “Private” Mean In Commercial Contracts?
Outside of structure, “private” shows up in the way you contract and negotiate. Most business-to-business contracts are “private” in the sense that terms aren’t published. What matters is how you protect specific information inside those private dealings.
Confidentiality Clauses And NDAs
To keep information private, you’ll typically use either a confidentiality clause within a contract or a standalone non‑disclosure agreement (NDA). An NDA identifies confidential information, sets permitted uses, and restricts disclosure, while confidentiality clauses do the same within a broader agreement (like a services or supply contract).
Important nuance: NDAs and confidentiality clauses don’t impose “penalties” in the criminal sense. They create contractual obligations. If someone breaches them, you can seek civil remedies such as injunctions (to stop further disclosure) and damages (to compensate loss). In serious cases, other laws may also apply, but the NDA itself is a contract, not a fine.
Private Doesn’t Override The Law
Even if an agreement says information is confidential, certain disclosures might still be permitted or required by law - for example, whistleblower protections under the Corporations Act or lawful requests from regulators. A well-drafted clause will recognise these limits.
How Is Private Information Protected Under Australian Law?
Different legal regimes protect different kinds of information. It’s useful to separate “privacy” (personal information about individuals) from “confidentiality” (commercial secrets).
Privacy Law (Personal Information)
The Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs) apply primarily to “APP entities,” which generally includes businesses with an annual turnover of more than $3 million, as well as some smaller businesses in specific categories (for example, private health service providers, credit reporting bodies, or contractors to the Commonwealth). Some small businesses voluntarily opt in to the APPs.
There’s also a private sector employee records exemption that can apply to personal information in employee records when used directly in relation to current or former employees. That exemption is limited - it doesn’t cover job applicants, independent contractors, customers, or marketing databases.
If you collect personal information (such as customer names, emails, IP addresses or payment details), it’s best practice to publish a clear, accessible Privacy Policy and to handle data in line with the APPs, even if you’re a small business that may be exempt. It’s also worth understanding the difference between privacy and confidentiality so you apply the right protections to the right information.
Confidential Information And Trade Secrets
Confidentiality is about valuable business information that isn’t public (pricing models, client lists, product formulas, source code, go‑to‑market strategy). It’s protected by a mix of contract (e.g. NDAs, confidentiality clauses) and equitable obligations (duties of confidence). You strengthen protection when you:
- Label confidential documents and restrict access to a need‑to‑know basis.
- Use NDAs before sharing sensitive information with suppliers, partners, or potential investors.
- Include confidentiality and IP clauses in your Employment Contracts and contractor agreements.
- Implement internal policies for information security and data handling.
Consumer Law And “Private” Practices
Keeping terms or dealings private doesn’t sidestep your obligations under the Australian Consumer Law (ACL). For example, you must avoid misleading or deceptive conduct under section 18 of the ACL, and you must honour consumer guarantees. Your customer‑facing statements, advertising, and policies need to align with your legal duties - regardless of how private your backend arrangements are.
What Business Information Isn’t “Private” (Even If You’d Prefer It Was)?
Some information about your business must be recorded or shared, either publicly or with regulators, regardless of private preferences:
- ASIC registers: The Australian Securities and Investments Commission maintains company registers that make certain details available (e.g., company name and ACN, registered office, directors, and other prescribed particulars). Some information may be available only via a paid extract. Shareholder information for proprietary companies may be limited, and access typically depends on the type of extract and statutory entitlements to inspect the company’s own register.
- Reporting and record‑keeping: Companies must keep proper financial records and meet reporting obligations. You will also have obligations to the ATO. This article doesn’t provide tax advice - speak with your accountant or tax adviser about your specific reporting duties.
- Employment records: Employers must keep certain employment records and protect personal information appropriately. The employee records exemption is narrow, so don’t assume all staff information is exempt from privacy obligations.
- Regulatory disclosures: Some industries require licences, notifications, or public‑facing statements. Even private agreements cannot contract out of those requirements.
- Whistleblowing and lawful disclosures: Certain disclosures are permitted or protected by law, even where confidentiality clauses exist.
The key is knowing where you have a genuine right to keep information private and where the law requires transparency.
Practical Legal Tools To Protect Your Private Interests
Privacy and confidentiality don’t happen by accident - they’re built into your contracts, policies, and daily processes. Here are the core tools most businesses should consider.
Core Documents And Policies
- Non‑Disclosure Agreement (NDA): A standalone agreement for pre‑deal conversations or due diligence that defines confidential information, permitted purposes, and handling obligations. Use an NDA before you share valuable know‑how.
- Service or Supply Agreement: Your customer and supplier contracts should include confidentiality, IP ownership, data security, and limitation of liability clauses tailored to how you operate.
- Employment Contract: Protects your business with confidentiality, IP assignment, restraint (where appropriate), and return‑of‑property clauses. Start with a solid Employment Contract for each role type.
- Privacy Policy: Explains how you collect, use, and store personal information, and the rights individuals have to access and correct their data. Publishing a clear Privacy Policy builds trust and supports APP compliance.
- Shareholders Agreement: If you have co‑founders or investors, a Shareholders Agreement can set rules around access to information, reporting, decision‑making, and share transfers - protecting both privacy and governance.
- Company Constitution: Your Company Constitution works with your Shareholders Agreement to manage who can view records, how meetings are held, and how sensitive information flows to stakeholders.
Not every business needs every document on day one, but most will need several. It’s worth getting these tailored to your model rather than relying on generic templates.
Operational Practices That Support “Private”
- Need‑to‑know access: Restrict access to sensitive files and systems to those who genuinely need it.
- Mark and segregate: Label confidential materials and store them separately with permissions set appropriately.
- Onboarding and offboarding: Train staff on confidentiality; collect devices and revoke access promptly when people leave.
- Vendor diligence: Check that suppliers handling your data meet your security standards and sign appropriate terms.
- Data life‑cycle: Implement retention and deletion processes consistent with your obligations and any data retention commitments.
“Private” With Customers And The Public
Your public‑facing materials (marketing, website, customer terms) should match your legal obligations. Keep “private” details private, but ensure you’re transparent where the law expects it - for example, clear pricing, refund rights, and fair representations to comply with the ACL under section 18.
Key Takeaways
- In business and commercial law, “private” generally means restricted access or confidentiality - whether that’s your company structure, your contracts, or your sensitive information.
- Most Australian SMEs use a private (Pty Ltd) company for control and flexibility, supported by governance tools like a Company Constitution and a Shareholders Agreement.
- Confidentiality clauses and NDAs help keep information private; they create contractual obligations with remedies like injunctions and damages if breached.
- Privacy law covers personal information and often requires a clear Privacy Policy; confidentiality protects commercial secrets through contracts and equitable duties.
- Some information must be disclosed (ASIC registers, regulatory reporting, lawful disclosures), so know what can remain private and what can’t.
- Strong contracts, clear policies, and disciplined operational practices are the best way to protect your private business interests over time.
If you’d like a consultation on setting up your privacy, confidentiality and contract framework the right way for your business, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.








