Unadhi · Australia & New Zealand

APP 1.7 automated decisions: what your privacy policy must say by 10 December 2026

From 10 December 2026, Australian APP entities that use a computer program to make, or substantially and directly assist, a decision that could significantly affect someone's rights or interests, using that person's personal information, must say so in their privacy policy (APP 1.7–1.9).

What you must disclose (APP 1.8)

1. The kinds of personal information the programs use.
2. The kinds of decisions made solely by a program.
3. The kinds of decisions a program substantially and directly assists.

Who's caught

Rule-based systems as well as AI. That includes tools that recommend or guide a human decision. Common examples: credit approvals, insurance pricing and claims, candidate screening, tenancy applications, fraud flags.

A 30-minute way to start

1. List every system that touches a decision about a person (the inventory).
2. For each one, mark: personal information used, decision type, solely automated (Y/N), significant effect (Y/N).
3. Turn the "Y/Y" rows into plain-English policy wording.

Official sources: OAIC announcement · OAIC fact sheet · APP 1 Guidelines

Free sample: send us your product or website link and we'll reply with a one-page draft inventory of your automated decisions, written from your public pages. Questions or corrections: mininglife7@gmail.com Price: EURO AI Register, free for your first system, then US$19/month or US$190/year. Cancel any time. This guide is general information, not legal advice. Sources are official and were checked on 13 Oct 2026.