Small businesses with an annual turnover of $3 million or less, which are currently exempt from having to protect personal information may have to comply with the Privacy Act if proposed changes tot he Privacy ...