03 9070 9810

Intimate Image Abuse and Doxxing: Civil Claims for Compensation

A direct legal path to damages when private images or personal details are misused against you.

Book a Confidential Assessment ($770)

Max file size: 20MB

When Criminal Law Is Not Enough

If someone has shared intimate images of you without your consent, or published your personal details online to harass or intimidate you, criminal offences may apply. But criminal complaints are handled by police and prosecutors. You do not control the process, and a criminal conviction does not compensate you for what you have suffered.

Since 10 June 2025, Australian law provides a separate civil remedy. The statutory tort for serious invasion of privacy under Schedule 2 of the Privacy Act 1988 (Cth) allows individuals to sue for compensation directly. This includes claims for non-consensual sharing of intimate images, doxxing, and other deliberate misuse of personal information. You do not need to prove financial loss. Truth is not a defence. The person who did this cannot justify it by saying the images were real or the information was accurate.

If you are looking for a privacy lawyer in Australia to pursue a doxxing civil claim or compensation for intimate image abuse, this page explains the legal framework, what you can recover, and how to act before time runs out.

The clock is ticking. You may have as little as 12 months to act. The limitation period runs from the date you became aware of the invasion.

For urgent matters involving the ongoing circulation of intimate images or personal details.

We can apply for an urgent privacy injunction to compel removal. Contact us now.

Distinctions between civil and criminal pathways

Legal intervention and court orders for privacy protection

Court Orders to Stop the Spread

<p>A criminal complaint does not give you the power to seek a court order compelling removal of material. Under the statutory tort, you can apply for an <strong>urgent privacy injunction</strong> to restrain ongoing publication or further distribution of intimate images or personal details. The court can order the defendant, and in some cases third-party platforms, to take material down. This is often the most pressing concern, and it is available only through the civil pathway.</p><p>Where material is still live, speed matters. Injunction applications can be brought urgently, including outside ordinary court hours in appropriate cases.</p>

Financial compensation and damages calculation

Compensation You Control

<p>Criminal proceedings, if they result in a conviction, may lead to a compensation order. But you have no say in whether charges are laid, what penalty is sought, or how long the process takes. Under the statutory tort, you are the plaintiff. You decide whether to commence proceedings, accept a settlement, or proceed to trial.</p><p>Damages for non-economic loss (distress, humiliation, loss of dignity) are capped at $500,000 as at 1 July 2025, and are indexed annually. In exceptional cases, the court may also award exemplary damages where the defendant's conduct was particularly egregious. No proof of financial loss is required. The tort is actionable per se, meaning the invasion itself is the injury.</p>

Direct legal representation and client empowerment

A Broader Range of Defendants

<p>Criminal image-based abuse offences typically apply to the person who shares the material. The civil tort is broader. You can sue any person, corporation, or entity responsible for the invasion, including the person who shared the images, a platform or website operator who refused to remove them after notice, an employer who circulated private material, or a third party who republished doxxed information. The defendant does not need to be an APP entity under the Privacy Act. This means individuals, small businesses, and unincorporated associations are all within reach.</p>

What the Law Covers: Intimate Images and Doxxing Under the Statutory Tort

Non-Consensual Sharing of Intimate Images

The statutory tort for serious invasion of privacy covers the misuse of personal information, which includes the non-consensual sharing of intimate or sexual images. This is sometimes called "revenge porn" or image-based abuse. Under Schedule 2 of the Privacy Act 1988 (Cth), a claim arises where a person intentionally or recklessly misuses private information in a way that a reasonable person would consider a serious invasion of privacy.

Intimate images are, by their nature, among the most private information a person possesses. Courts in comparable jurisdictions have consistently recognised this. In the United Kingdom, the High Court in Gulati v MGN Ltd [2015] EWHC 1482 (Ch) held that the misuse of private information can sound in substantial damages even without proof of financial harm. New Zealand courts have similarly awarded significant damages for serious invasions of privacy in C v Holland [2012] NZHC 2155, which established a tort for intrusion upon seclusion. This case informed the development of privacy law in the region.

To bring a claim, you must be an individual (natural person). The invasion must have been intentional or reckless, not merely accidental. The court will assess whether the invasion was serious having regard to the circumstances, including the nature of the information, the manner of the invasion, and the effect on you. For intimate images shared deliberately, the seriousness threshold will rarely be in doubt.

It does not matter whether the images were originally taken with your consent. What matters is whether the sharing was consented to. If it was not, and the sharing was intentional or reckless, you have a cause of action.

Doxxing: Publication of Identifying Personal Details

Doxxing refers to the deliberate publication of a person's private identifying information, typically their home address, phone number, workplace, or other details, with the intent to harass, intimidate, or expose them to harm. The Commonwealth Criminal Code was amended in 2024 to create specific criminal offences for doxxing (sections 474.17C and 474.17D), with aggravated offences where the doxxing targets a person's membership of a particular group.

The statutory tort provides a parallel civil remedy. Where a person publishes your private identifying information intentionally or recklessly, and the publication constitutes a serious invasion of your privacy, you can claim civil damages. This applies whether the information was published on social media, forums, messaging groups, or any other medium.

The civil pathway is particularly important where the perpetrator is anonymous or uses a pseudonym. In defamation proceedings, Australian courts have developed established procedures for preliminary discovery to unmask anonymous publishers. Those same procedural tools are available in privacy proceedings. If you do not know who doxxed you, that is not necessarily a barrier to commencing action.

The Journalist Exemption Does Not Protect Most Online Publishers

One common concern is whether the person who shared material can claim protection as a journalist. The journalist exemption under the statutory tort is narrow. It generally applies to professional journalists and media organisations subject to recognized codes of practice. Social media users, bloggers, influencers, forum moderators, and citizen journalists do not qualify. The exemption cannot be determined at trial; it is raised by the defendant on application and can be resolved as a preliminary question before trial.

Existing Criminal Offences: What They Cover and Where They Fall Short

Federal, state, and territory laws already criminalise certain conduct involving intimate images. The Criminal Code Act 1995 (Cth) contains aggravated offences for using a carriage service to menace, harass, or offend where the conduct involves private sexual material (section 474.17A). In Victoria, intimate image offences are contained within the Crimes Act 1958. NSW has offences under the Crimes Act 1900 (section 91Q). Queensland has similar provisions under the Criminal Code Act 1899 (section 223).

These offences carry penalties including imprisonment. However, criminal proceedings are controlled by police and prosecutors. Many complaints do not result in charges. Where charges are laid, the process is slow. Victims have limited standing, limited control, and no guaranteed path to compensation. The statutory tort fills this gap. It gives you standing to bring proceedings in your own name, seek injunctive relief, and recover damages directly.

Overlap with Defamation

Where the publication of intimate images or personal details also damages your reputation, you may have a concurrent defamation claim. The statutory tort and defamation law operate independently but can apply to the same conduct. However, there are important differences: truth is a complete defence to defamation but is not a defence to the privacy tort. The damages caps differ. The procedural requirements differ. Where both causes of action are available, the choice of which to pursue (or whether to pursue both) requires careful consideration. Our practice also acts in defamation matters through defamationlawyer.au.

Confidential Initial Assessment: $770 Fixed Fee

We will review your matter, advise whether you have a viable claim, and set out your options clearly. No ongoing obligation.

Why Pursue a Civil Claim

The statutory tort gives individuals direct control over matters that criminal law leaves largely in the hands of police and prosecutors.

No Proof of Financial Loss Required

The tort is actionable per se. You do not need to demonstrate that the invasion caused you quantifiable financial harm. Distress, humiliation, and loss of dignity are compensable in their own right.

Truth Is Not a Defence

Unlike defamation, the defendant cannot justify the invasion by proving the information was accurate or the images were real. The wrong is the invasion itself, not the falsity of what was published.

You Control the Process

You are the plaintiff. You decide whether to commence proceedings, accept an offer, or go to trial. You are not waiting on police to investigate or prosecutors to act.

Injunctions to Stop Further Harm

The court can order the defendant to remove material, refrain from further publication, and destroy copies. This is the fastest route to getting intimate images or personal details taken down.

Damages Up to $500,000 (Indexed)

Non-economic loss damages are capped at $500,000 as at 1 July 2025 (indexed annually). Exemplary damages may also be awarded in exceptional cases of particularly egregious conduct.

Apology Without Admission

An apology provided in the context of a claim typically does not constitute an admission of fault or liability. This may make negotiated resolution more achievable, as defendants can offer an apology without necessarily conceding the legal claim.

Frequently Asked Questions

Yes. Since 10 June 2025, the statutory tort for serious invasion of privacy under Schedule 2 of the Privacy Act 1988 (Cth) provides a civil cause of action for the non-consensual sharing of intimate images. You must be an individual (natural person), and the sharing must have been intentional or reckless. The claim is brought in court. You can seek both injunctive relief (court orders to remove the material and prevent further sharing) and compensation for non-economic loss. Criminal complaints remain available as a separate pathway, and you can pursue both simultaneously.

A criminal complaint is made to police. If police investigate and charges are laid, the prosecution is conducted by the state. You are a witness, not a party. You do not control whether charges proceed, what penalty is sought, or the timeline. A civil claim under the statutory tort is brought by you in your own name. You are the plaintiff. You can seek injunctions to compel removal of material, recover damages for distress and humiliation, and negotiate settlement directly with the defendant. The two pathways are independent and can be pursued at the same time.

Potentially, yes. If the publisher is anonymous, preliminary discovery proceedings can be used to compel platforms or internet service providers to disclose identifying information. Australian courts have well-established procedures for unmasking anonymous online publishers, developed primarily in defamation law. These procedures are available in privacy tort proceedings. The viability of this approach depends on the circumstances, and we can advise on the prospects during an initial assessment.

The statutory tort covers the misuse of personal information and intrusion upon seclusion. Deepfake intimate images, being fabricated intimate depictions of a real person created without consent, are likely to fall within the scope of misuse of personal information. The legislation is new and there is no Australian case law on this point as at early 2026. However, the broad language of Schedule 2, and persuasive authority from overseas jurisdictions, supports the view that deepfakes depicting identifiable individuals in intimate contexts would constitute a serious invasion of privacy. We discuss this further on our deepfake privacy lawyer page.

Yes. Doxxing, the deliberate publication of a person's private identifying information (home address, phone number, workplace, or similar details) to harass, intimidate, or expose them to harm, falls squarely within the misuse of personal information pathway of the statutory tort. The publication must be intentional or reckless and must constitute a serious invasion of privacy. Criminal doxxing offences under the Commonwealth Criminal Code also apply, but the civil tort gives you a direct path to injunctive relief and compensation. See our doxxing lawyer page for further detail.

The Office of the Australian Information Commissioner (OAIC) accepts complaints about breaches of the Australian Privacy Principles by APP entities (generally organisations with annual turnover exceeding $3 million, health service providers, and certain other bodies). If the person who shared your images or doxxed you is an individual, a small business, or another non-APP entity, the OAIC cannot assist. Even where the OAIC can investigate, its powers are limited: it cannot award substantial damages, it does not grant injunctions, and the process is slow. For serious invasions of privacy, the statutory tort is the stronger avenue. We explain the differences in detail on our OAIC complaint vs suing page.

The limitation period is strict: one year from the date you became aware (or ought reasonably to have become aware) of the invasion, or three years from the date the invasion occurred, whichever expires first. The court has a discretion to extend the period to a maximum of six years from the date of the invasion, but extensions are not guaranteed. If you are aware that intimate images or personal details have been shared, do not delay. See our time limits page for a full explanation.

Consent to the taking of images is not consent to their distribution. The relevant question is whether you consented to the specific use that occurred. If you agreed to be photographed but did not agree to the images being shared with third parties or published online, you have not consented to the invasion. The statutory tort assesses consent at the point of the invasion, not at the point the images were originally created.

The defendant may argue that you did not have a reasonable expectation of privacy in the information because it was already in the public domain. This is a factual question assessed by the court on a case-by-case basis. However, the fact that an image may have been briefly visible to a limited audience does not necessarily destroy a reasonable expectation of privacy. Republication to a wider audience, or publication in a different context, can still constitute a serious invasion. The court considers all the circumstances, including the nature of the information, the extent of prior publication, and the manner of the defendant's publication.

We offer a confidential initial assessment for a fixed fee of $770. This covers a review of your matter, an assessment of the viability of a claim, and a clear outline of your options. If you proceed, we can issue a pre-action demand letter for a fixed fee of $990, which often resolves matters without court proceedings. Full court representation is quoted separately based on the complexity of the matter. We are transparent about costs from the outset.

The Limitation Period May Be as Short as 12 Months

If you are aware that intimate images or personal details have been shared without your consent, the time to act is now. Contact us for a confidential assessment.

Call