Back to Articles
New Resources on Transparency for Use of AI and Automated Decision-Making

Office of the Australian Information Commissioner

READ

Description

Information that must be included in a privacy policy for APP entities who have arranged for a computer program to make or inform decisions that significantly affect individuals’ rights or interests

Summary

This announcement details new Australian regulatory requirements under the Privacy and Other Legislation Amendment Act 2024, mandating transparency for automated decision-making systems that significantly affect individual rights. While primarily focused on privacy and individual harms, these guidelines represent a foundational step in establishing government oversight for AI systems used in high-stakes environments. The framework requires entities to disclose the types of personal information and decisions handled by algorithms, contributing to broader AI governance structures in Australia. Such transparency mechanisms are essential precursors to identifying and mitigating more severe systemic or catastrophic risks arising from autonomous decision-making in public and private sectors.

Body

New resources on transparency for use of AI and automated decision-making Published:   30 September 2026 On 10 December 2026, APP entities must include information in their privacy policy where they have arranged for a computer program to make or inform decisions that significantly affect individuals’ rights or interests.This transparency obligation was introduced by the Privacy and Other Legislation Amendment Act 2024 within APP 1 of the Australian Privacy Principles (APPs) to include information about computer program usage in an APP entities’ privacy policy.APP 1.7 requires APP entities to include the information outlined in APP 1.8 in their APP Privacy Policy if:the entity has arranged for a computer program to make, or do a thing that is substantially and directly related to making a decision (APP 1.7(a)); andthe decision could reasonably be expected to significantly affect the rights or interests of an individual (APP 1.7(b)); andpersonal information about the individual is used in the operation of the computer program to make the decision or do the thing that is substantially and directly related to making the decision (APP 1.7(c)).APP 1.8 outlines the information which must be included in an entity’s APP privacy policy if the conditions in APP 1.7 are met. This includes:the kinds of personal information used in the operation of such computer programs; andthe kinds of such decisions made solely by the operation of such computer programs; andthe kinds of such decisions for which a thing, that is substantially and directly related to making the decision, is done by the operation of such computer programs.To assist entities, the Office of the Australian Information Commissioner has created targeted resources to support compliance and published an update to the APP 1 Guidelines. These resources are:APP 1.7-1.9 Transparency Obligation - Fact Sheet (PDF, 179 KB)Supplementary fact sheet for government agencies (PDF, 143 KB)APP 1.7-1.9 Transparency Obligation Flowchart (PDF, 246 KB)The published resources reflect the feedback received from 90 written submissions during our consultation, from a diverse range of stakeholders including academia, civil society, government, industry, industry bodies, and other interested parties. Did you find this helpful? Yes No We'd love to hear more! Please tell us more Rate your experience We'd love to hear more about your rating What did you come here to do? How can we improve this information? ⨯ Share Facebook Twitter Linkedin