Insights · 30 October 2026

Australia’s December 2026 automated decision-making changes

From 10 December 2026, certain organisations must include additional information in their privacy policies about specified automated decisions involving personal information. The applicability depends on the Privacy Act and the nature of the decision.

What to consider

A business should map automated decisions, identify the personal information used, assess whether decisions significantly affect individuals’ rights or interests, and review its privacy-policy disclosures with Australian legal counsel. This is not a general AI licensing or certification deadline.

Where to find authoritative guidance

Refer to the OAIC, the Federal Register of Legislation, and the Australian Department of Industry. This article is general information, not legal advice.

Need help assessing your AI systems? Our readiness checker is an indicative starting point, not a certification.
Try the readiness checker →

← All insights