The Privacy Act 1988 and the Spam Act 2003 are Australian’s main privacy laws. Neither law makes any reference to Internet cookies, which means that Australia doesn’t require consent for cookies and that you will not be violating any laws if you don’t implement a cookie consent solution.
However, since it’s implied under the Australian Privacy Principles that the information collected by cookies might constitute personal information if a person could be identified from it, disclosing your use of cookies in a Privacy Policy page would still be necessary under Australian law.
Australia's Privacy Act and its Australian Privacy Principles (APP) require your website to have a privacy policy, in which you also inform your users of all cookies and trackers that collect, process or share personal information.
The Cookie Law requires users' informed consent before storing or accessing information on user's devices. This means that if you use cookies, you must: ... obtain informed consent prior to the storing of those cookies on the user's device.
However, since it’s implied under the Australian Privacy Principles that the information collected by cookies might constitute personal information if a person could be identified from it, disclosing your use of cookies in a Privacy Policy page would still be necessary under Australian law.
General Data Protection Regular (GDPR). The e-Privacy Directive requires the consent of users for cookies that gather personal information and track user behaviours. Meanwhile, the GDPR is a comprehensive data protection legislation that establishes strict rules on how a website requests and obtains consent. Consent must be earned via a user’s specific, clear, and affirmative action, which means that opt-out models of consent are not allowed.
Cookie use pop up is a must consent for using the website. Informed consent
A Cookies Policy is used to inform your site's visitors that you're using cookies on your website, web app, or mobile app. It should include information about the types of cookies you're using, how you're using them, and how users can control the way cookies are managed on their devices
Upload Cookie policy in Sydney website as well. Cookie policy should specify compliance with privacy law, Only after providing informed consent they will be allowed to use the website, no opt out model allowed.