Automated Decision-Making transparency (Privacy Act 2024 reforms)
APP entities making decisions about individuals using ADM must disclose this in privacy policy from December 2026.
Who must comply
APP entities using significant automated decision-making.
What triggers it
Use of ADM with significant impact on individuals.
When due
Privacy policy update by 10 December 2026.
Evidence required
Privacy policy + ADM register + transparency notice.
Max penalty
—
Effective from
10 December 2026
Summary
Privacy and Other Legislation Amendment Act 2024. APP entities must disclose in privacy policy where ADM significantly affects individuals. In force 10 December 2026. Builds on European GDPR Article 22 model.
Enforced by
Source legislation
Topics
Related obligations
- CWLTHAutomated Decision-Making transparency under Privacy Act (phased)From a phased commencement, APP entities using ADM must disclose in Privacy Policy.
- CWLTHNotifiable Data Breach (NDB) schemeUnder the NDB scheme, APP entities must notify the OAIC and affected individuals of an eligible data breach likely to cause serious harm — assessed within 30 days.
- CWLTHAPP 3 collection of sensitive informationAPP 3 bars collecting sensitive information — health, race, religion, sexual orientation and more — without consent. What counts as sensitive, the exceptions and penalties.
- CWLTHPrepare for the proposed removal of the small business exemptionRemoving the Privacy Act small business exemption (<$3M turnover) is proposed for a future reform tranche — agreed in principle, not yet law.
- CWLTHPrivacy Act Reform — information controllers regime (proposed Tranche 2)Tranche 2 reforms in scoping — information controllers + processors regime.
- CWLTHPublish a Privacy Policy compliant with APP 1Every APP entity needs a clearly-expressed Privacy Policy covering APP 1.4 requirements.
Frequently asked questions
- Who must comply with Automated Decision-Making transparency (Privacy Act 2024 reforms)?
- APP entities using significant automated decision-making.
- What triggers Automated Decision-Making transparency (Privacy Act 2024 reforms)?
- Use of ADM with significant impact on individuals.
- When is Automated Decision-Making transparency (Privacy Act 2024 reforms) due?
- Privacy policy update by 10 December 2026.
- What evidence is required for Automated Decision-Making transparency (Privacy Act 2024 reforms)?
- Privacy policy + ADM register + transparency notice.
Source: https://oaic.gov.au/privacy/the-privacy-act/changes-to-the-privacy-act. Rules Mate is not a law firm. Always verify against the live regulator source before acting.