New AI Transparency Requirements Just One Month Away

The Office of the Australian Information Commissioner (OAIC) has released updated guidance to help organisations understand their obligations and ensure their privacy policies meet the new requirements.

Introduced through amendments to the Privacy Act 1988, the changes to Australian Privacy Principle (APP) 1 require affected organisations to disclose specified information in their privacy policies when computer programs make, or substantially and directly contribute to, decisions that could reasonably be expected to significantly affect individuals' rights or interests.

The requirements aim to improve transparency around automated decision-making, particularly as artificial intelligence (AI) and automated technologies become increasingly embedded in organisational processes.

To support compliance, the OAIC has published updated APP 1 Guidelines, fact sheets and a flowchart to help organisations determine whether the new obligations apply and what information must be disclosed.

For records and information management (R&IM) professionals, these changes reinforce the importance of effective information governance. Identifying automated decision-making systems, understanding how personal information is collected and used, maintaining accurate information asset registers and documenting decision-making processes can all support organisational compliance.

With the 10 December deadline fast approaching, organisations should be reviewing their automated systems, assessing existing privacy policies and working across information management, privacy, legal and ICT teams to ensure they are prepared.

Find out more: OAIC – Australian Privacy Principle 1 Guidelines