Privacy Act 1988 / Australian Privacy Principles
Personal information handled by or through an AI tool falls under the same collection, use, disclosure and security rules as any other personal information.
- Status
- In force · Australia (Commonwealth) · OAIC
- Applies to
- APP entities: most businesses with annual turnover over $3m, plus some others regardless of size
- Primary source
- Official document →
- Last reviewed
- 17 July 2026
Certrak’s verdict
The short version
One or two plain sentences: what this is, and whether it bites for a typical business.
What it actually requires
The substance in plain language. Quote the source where the exact wording matters.
Does this reach your business?
Who it applies to, and the common situations where it does or does not.
What sensible looks like
Practical, proportionate steps. Not legal advice: what a reasonable operator would do.