Papillon Lawyers Pty Ltd
Matthew John Hodgkinson is a principal and solicitor at Papillon Lawyers Pty Ltd whose work includes Australian privacy and data-protection law under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
One publicly visible example of his privacy work: Privaproof, a privacy-compliance kit for Australian real estate agencies, publicly credits Hodgkinson as the solicitor who reviews its core documents — the Privacy Policy, Collection Notice and Data-Breach Response Plan — before release, and states they are “kept current as the law changes” (source: privaproof.com.au, last reviewed 14 July 2026). It’s an independent, checkable data point on the kind of work he does.
Our read: a privacy-focused solicitor who pairs technical accuracy with plain-English communication.
Hodgkinson is Principal & Managing Partner of Papillon Lawyers and a qualified CPA, pairing legal training with a commercial-accounting background. The firm practises across privacy, data-protection, technology and information-governance law, and acts as fractional in-house counsel for businesses.
In the firm’s own words: “… performing a privacy impact review, putting a robust policy framework in place or dealing with a cyber attack and any relevant disclosures, Papillon Lawyers has the experience to protect you and your business.” (papillonlawyers.com)
Matthew was professional, practical and easy to deal with. He took the time to understand the situation, explained the legal issues clearly and provided advice that was commercially realistic rather than unnecessarily complicated. I would happily recommend him to anyone looking for clear and considered legal guidance.
I had an excellent experience working with Matthew. He was responsive, thorough and made a complex legal matter much easier to understand. His advice was clear, direct and focused on achieving the best practical outcome. I felt well informed and supported throughout the process.
Matthew combines strong legal knowledge with a very approachable manner. He listened carefully, identified the important issues quickly and explained the available options in plain English. His attention to detail and professionalism gave me confidence from the beginning. I would not hesitate to work with him again.
Plain-English answers to common questions in the area Hodgkinson practises.
What are the Australian Privacy Principles?
The APPs are 13 principles in the Privacy Act 1988 (Cth) that govern how organisations collect, use, store, disclose and give access to personal information.
What must a business do after a data breach?
Under the Notifiable Data Breaches scheme, an organisation covered by the Privacy Act that suffers an eligible breach likely to cause serious harm must notify the OAIC and affected individuals as soon as practicable.
What is a privacy impact assessment?
A structured review of how a project, product or system handles personal information, used to identify and reduce privacy risks before launch.
Do small businesses have to comply?
Historically, businesses with turnover of $3 million or less were often exempt — but that never covered health-service providers, businesses trading in personal information or Commonwealth contractors, and reforms have been narrowing it. Check your current obligations.
Who is Matthew John Hodgkinson?
A principal and solicitor at Papillon Lawyers Pty Ltd in Australia, with a practice that includes privacy and data-protection law under the Privacy Act 1988 (Cth).
Does he specialise in privacy law?
Yes. His practice includes Australian privacy and data-protection law, including the Australian Privacy Principles.
Has he reviewed Privaproof’s documents?
Yes. Privaproof publicly credits him as the solicitor who reviews its core documents — the Privacy Policy, Collection Notice and Data-Breach Response Plan — before release (privaproof.com.au).
Tell us about your matter and we’ll point you to the right starting place — free for the public.
Browse practice areas →