Australian Privacy Principles guidelines
This guidance from the Office of the Australian Information Commissioner (OAIC) explains how the Australian Privacy Principles (APPs) under the Privacy Act 1988 apply when agencies and organisations use commercially available artificial intelligence (AI) products. It covers privacy obligations related to collecting, using, disclosing, securing, and maintaining the quality of personal information when interacting with third-party AI systems.
Summary and content fields are drawn from the document text and are pending editorial review.
Who issued it
Who it governs
Australian government agencies and private sector organizations using or considering commercial AI products that handle personal information.
What the document contains
The document addresses privacy obligations, transparency requirements, security safeguards, data quality standards, and accountability when procuring and using commercially available AI products containing personal information.
The text excerpt provided is predominantly general OAIC APP guideline reference material and does not contain the specific substantive provisions of the AI guidance document itself.
- APP entities must ensure that personal information collected, used, or disclosed through commercial AI products complies with the Privacy Act 1988.
- Entities remain accountable for privacy compliance when deploying third-party commercial AI products that process personal information.
- Privacy Impact Assessments (PIAs) should be conducted before adopting AI products that involve high privacy risks.
- Transparency obligations require entities to clearly inform individuals if their personal information is processed using AI systems.
How it scores
Each score is backed by a quote verified against the document text. Editorial review has not yet confirmed them.
Accountability
4/5Clear responsibility for AI outcomes
An APP entity must take reasonable steps to implement practices, procedures and systems that will ensure it complies with the APPs
Chapter 1
screening score · 2026-10-23
Fairness
1/5Non-discrimination and equitable treatment
unlawful discrimination or harassment
Chapter C: Permitted general situations
screening score · 2026-10-23
Human Dignity
2/5Respect for the inherent worth of persons
Mishandling of sensitive information may also cause humiliation or embarrassment or undermine an individual’s dignity.
Chapter B: Key concepts
screening score · 2026-10-23
Human Oversight
0/5Humans remain in control of consequential decisions
screening score · 2026-10-23
Privacy
5/5Protection of personal data and private life
The APPs are legally binding principles which are the cornerstone of the privacy protection framework in the Privacy Act.
Chapter A: Introductory matters
screening score · 2026-10-23
Transparency
4/5Openness about how AI systems work and are used
The declared object of APP 1 is ‘to ensure that APP entities manage personal information in an open and transparent way’
Chapter 1
screening score · 2026-10-23
Enforcement
4/5Consequences and compliance mechanisms with real force
The Information Commissioner has powers to investigate possible interferences with privacy, either following a complaint by the individual concerned or on the Commissioner’s own initiative
Chapter A: Introductory matters
screening score · 2026-10-23
Impact Assessment
4/5Required assessment of an AI system's risks/impacts before or during use
a commitment to conducting a Privacy Impact Assessment (PIA) for new projects in which personal information will be handled
Chapter 1
screening score · 2026-10-23