Australia: the instruments named
The Privacy Act 1988 (Cth) sets the federal privacy duty through the Australian Privacy Principles, and the reform programme has added and proposed AI-specific duties. This page names them and does not state their text.
What this page covers
- The Privacy Act 1988 (Cth) and the Australian Privacy Principles: collection, notice, use and disclosure, access and correction.
- The Notifiable Data Breaches scheme, which can be triggered by an AI system that exposes personal information.
- The automated decision-making transparency measures that apply to government agencies, and the proposals for broader transparency.
- State and territory privacy and health records law where it applies.
How to use it
Record the Australian Privacy Principle basis for each system that handles Australian personal information, and check whether a decision about a person is covered by an automated decision rule.
What it does not add
This page does not state the Privacy Act and is not legal advice. The reform programme is in progress; verify the current provisions.
The instruments are named only.
Read across
Source for this reference page: Australia: the instruments named on the reference page, retrieved 22 October 2026. The note is limited to what the public record states. Every source.