Step 1

Which describes your organisation?

An Australian Government agencyAn organisation with annual turnover over $3 millionA health service provider, or otherwise covered regardless of turnoverTurnover of $3 million or less, and not otherwise coveredNot sure

Step 2

Where does software decide things about people?

Tick each that applies, then answer three questions about it. "Computer program" includes rule-based workflows and spreadsheet formulas, not only AI.

Credit, payment terms or account approvalFor example, an automated score approves or declines an account or sets its terms.Recruitment screeningFor example, a system filters or ranks applicants before a person looks.Eligibility or pricingFor example, rules in a quoting or onboarding system decide who qualifies, or at what price.Fraud or risk flagsFor example, a flag blocks a transaction or closes an account.Health or service triageFor example, a booking system allocates urgent appointments from questionnaire answers.

Want this done properly, with the inventory kept current?

We build the AI and automated-decision inventory in your own Microsoft 365, map it to the privacy policy, and keep both reviewed. A 30-minute call tells you how much of it you already have.

Book a 30-min call

General information, not legal advice. Based on APP 1.7 to 1.9 and the OAIC's guidance of 30 September 2026. Whether a decision "significantly affects" someone, and whether software "substantially and directly" informs it, are judgements to make and record for your own systems.

Does your privacy policy need to describe automated decisions?

Which describes your organisation?

Where does software decide things about people?

Draft wording for your privacy policy

Before 10 December

Want this done properly, with the inventory kept current?