TwinEthos homeRequest access

Catalog

Australia Privacy Act APP 1.7-1.9 (automated decisions in privacy policies)

Office of the Australian Information Commissioner (OAIC) · pack 0.2.0 · verified against the official source as of 2026-10-02. AI-adjacent group: general privacy or biometric law, included only where AI data flows trigger it. Open it in the explorer.

Binding law — not yet in force or stayed

State in the APP privacy policy the personal information computer programs use and the decisions they make or substantially help make (Australia, APP 1.7-1.9)

From 2026-12-10, Australian Privacy Principle 1.7 (inserted by the Privacy and Other Legislation Amendment Act 2024, Sch. 1 Pt 15) requires an APP entity that has arranged for a computer program to make, or do a thing substantially and directly related to making, a decision that could reasonably be expected to significantly affect an individual's rights or interests, using their personal information, to state in its APP privacy policy the kinds of personal information used, the kinds of decisions made solely by such programs, and the kinds of decisions they substantially and directly help make (APP 1.8). Decisions include refusals and failures to decide, and adverse or beneficial effects; examples are benefits under legislation, contractual rights and access to a significant service or support (APP 1.9). It applies to decisions made after commencement, and APP 1.7 is an infringement-notice provision. Detect a privacy policy with no automated-decisions statement.

au-privacy-app-1-7.privacy-policy-automated-decisions · POLA Act 2024, Sch. 1 item 88 (APP 1.7-1.9, automated decisions) · official source · applies from 2026-12-10 · jurisdictions: AU

The guard to add, and how far to trust this rule