Automated Decision-Making transparency under Privacy Act (phased)
From a phased commencement, APP entities using ADM must disclose in Privacy Policy.
Who must comply
APP entities using substantially-automated decisions affecting individuals.
What triggers it
Using ADM.
When due
Phased from 10 December 2026.
Evidence required
ADM register; Privacy Policy update; review pathway documentation.
Max penalty
Same penalty regime as other Privacy Act breaches
Effective from
10 December 2026
Summary
The 2024 Privacy + Other Legislation Amendment Act introduces ADM transparency requirements. If a substantially-automated decision affects an individual, the entity must disclose use of ADM + provide certain information about how the system operates. Phased commencement begins 10 December 2026 alongside small business exemption removal.
Enforced by
Source legislation
Topics
Source: https://oaic.gov.au/privacy/privacy-legislation/the-privacy-act/privacy-reforms. Rules Mate is not a law firm. Always verify against the live regulator source before acting.