Do You Need to Disclose Automated Decision-Making?
New Australian privacy law introduces disclosure requirements for automated decision-making systems by December 2026. This check helps you understand whether it may apply to your business.
Does your software make decisions about people?
If your business is covered by the Privacy Act, you may need to disclose how your systems make decisions about people.
Your software decides who gets access — to credit, insurance, tenancy, or a service.
Pricing, eligibility, or contract conditions are shaped by what your system knows about the individual.
The Privacy Act just got teeth.
New automated decision-making rules require Australian businesses to update their privacy policies before December 10, 2026.
Australian businesses must disclose how automated systems make decisions about people in their privacy policies.
OAIC has increased enforcement activity and continues to investigate privacy breaches across Australian businesses.
Financial penalties can apply for non-compliant privacy policies, including infringement notices and higher penalties for serious breaches.
Everything you need to get compliant
Comprehensive tools and resources to help you meet the new ADM disclosure requirements.
Tools
Interactive compliance assessment with 4 worksheets and checklists to guide you through the process.
Guides
8 step-by-step PDF guides covering everything you need to know, start to finish.
Templates
10 industry-specific privacy policy disclosures, editable Word docs, ready to copy and paste.
Everything you need to meet the deadline
One-time purchase with lifetime access. No subscription required.
$97
ADM system identifier checklist
Privacy policy templates
Impact assessment framework
Compliance verification checklist
Plain-language guidance for business owners
Industry-specific examples
Instant digital download
Frequently asked questions
If you have any other questions, feel free to reach out to our support team.
It depends. While businesses under $3M annual turnover are generally exempt from the Privacy Act, you're already covered if you work with larger companies, handle sensitive data (health, finance, children), or trade in personal information. The exemption may also change in future.
OAIC can issue infringement notices up to $66,000 for non-compliant privacy policies. For serious breaches, civil penalties can reach $330,000. Privacy policies are public documents—OAIC reviews them as part of their privacy compliance work.
You can. This kit gives you a structured way to identify your ADM systems and draft disclosure language before involving a lawyer. If you do engage a lawyer, you'll have done the groundwork, making their job faster and potentially reducing your legal costs.
The kit includes a simple decision framework and real-world examples across multiple industries. If your software makes or helps make decisions about people using their personal information, it's likely ADM. You can also take our free assessment to find out.
Yes. This is built specifically for Australia's Privacy Act amendments and OAIC requirements. It references the exact Australian Privacy Principles (APPs) and uses OAIC's guidance on what constitutes "significantly affects rights or interests."
The kit includes a step-by-step ADM system identifier checklist, privacy policy templates that meet the new disclosure requirements, an impact assessment framework, and a comprehensive compliance checklist to ensure you've covered all requirements.
No. The kit is written for business owners, not lawyers or developers. You'll identify systems you're already using (like your applicant tracking system or fraud detection tool) and get plain-language templates to add to your privacy policy.
While this kit provides templates and guidance, it's not a substitute for legal advice. We recommend having your privacy policy reviewed by a lawyer familiar with Australian privacy law, especially if your business processes sensitive personal information or uses complex ADM systems.
Prefer help with this?
If you'd rather not work through this yourself, we can help identify your automated decision-making systems and draft the required disclosures for your business.