Most Australians Suspect Their Private Data Is Being Misused But Can’t Explain How, Monash Study Finds

More than half of Australians suspect their personal data is being misused online but cannot identify how it is actually happening, according to the first national study of its kind conducted by Monash University researchers.

The study describes a phenomenon the researchers call “fractured awareness” – a gap between the strong sense people have that their privacy is being compromised and their ability to understand or explain what is taking place. The result is a population that is anxious, confused and largely unable to take meaningful action.

A privacy knowledge crisis

Lead Author and Software Engineering Researcher, Dr Omar Haggag, from Monash’s Faculty of Information Technology, warned that fewer than one in five Australians understand how online data misuse actually works.

“Our findings highlight a growing disconnect between how digital systems operate and how people understand them,” Dr Haggag explained.

“Many Australians have a strong sense that their privacy is being compromised, but they don’t have the tools or knowledge to explain what’s happening.

“This creates fractured awareness, where people feel uneasy and distrustful, but also powerless to act because the systems are too complex or opaque.”

The research comes as Australia reviews its Privacy Act and faces increasing concerns over data misuse by global technology platforms.

Three types of users

The study, based on a survey of 239 Australians across a range of genders, ages, education levels and income distributions, identifies three distinct types of users: those who trust too much, those who have given up and a small minority actively trying to protect themselves.

Participants were surveyed on themes including knowledge of privacy laws, understanding of online tracking and consent mechanisms, perceptions of how personal data is accessed and trust in government, technology companies and employers handling private data.

More than 50 per cent of participants lacked a clear understanding of online tracking and consent, including whether privacy policies protect companies or users.

Older respondents were more likely to lack awareness of technical aspects of digital privacy, while younger participants expressed higher suspicion of microphone listening and device tracking. More than 60 per cent of lower-income participants reported they had given up on controlling their data.

An illusion of protection

The research also found widespread misconceptions about how privacy protections work. More than two-thirds of participants incorrectly believed that privacy policies prevent companies from sharing their data, while many assumed explicit consent is always required before tracking occurs.

These misunderstandings contribute to what the researchers describe as an “illusion of protection”, where the presence of privacy settings, policies and legal frameworks gives users a false sense of security.

Study Co-author and Human-centric Software Engineering Expert Professor, John Grundy, pointed to a deeper, systemic issue in how digital privacy is designed and communicated.

“Current systems often assume users are informed and able to make meaningful choices, but our research shows this assumption does not hold,” Professor Grundy noted.

“When privacy tools and consent mechanisms are confusing or misleading, they don’t empower users, they can actually reinforce misunderstanding and erode trust.”

Misplaced trust

The study also reveals that Australians exhibit relatively high trust in institutions compared to their American counterparts, but this trust is often misplaced and not matched by actual understanding of privacy protections.

Participants reported feeling overwhelmed by the pace of technological change, with many expressing resignation about their ability to control how their data is collected and used.

A human challenge, not just a technical one

The researchers argue that addressing this gap requires more than stronger regulation or technical fixes. Instead, they call for a shift towards designing digital systems that are transparent, understandable and aligned with how people actually experience privacy.

“Protecting digital privacy is not just a technical or legal box to tick, it is a human challenge that requires clearer communication, better understanding and stronger trust,” Dr Haggag stated.

“If we want people to make informed choices, we need systems that genuinely communicate what’s happening with their data, not just bury it in policies or settings.”

The findings carry implications for policymakers, technology companies and software engineers, particularly as Australia continues to review and reform its privacy laws.

The researchers argue that improving public understanding and designing for real-world user behaviour will be critical to restoring trust and enabling meaningful digital consent.

“If this gap is not addressed, millions will continue to navigate digital systems they do not understand, making consent meaningless and privacy protections ineffective,” Dr Haggag added.

The research paper was presented at the 48th International Conference on Software Engineering in Rio de Janeiro, Brazil.

Last Updated on May 8, 2026 by Nick Ross