1. Try to avoid any VPN providers who are based in any of the 14 eyes countries.
2. Use fake information when signing up for a VPN, such as an email alias (AnonAddy or SimpleLogin), a burner phone number (Hushed), and a credit card alias (Privacy.com although I don't know if it's available in AU or not).
3. If you cannot afford a VPN, look into mixnets like Tor, I2P, or Lokinet.
4. Always get a VPN that is FLOSS.
5. Always pay in privacycoins, i.e Monero.