Checklist: Privacy considerations when using commercially available AI products
This checklist provides guidance for organisations deploying commercially available AI products that handle personal information. It outlines privacy considerations mapped against Australian Privacy Principle (APP) obligations, covering use and disclosure, collection and generation, data accuracy, transparency, accountability, and ongoing lifecycle assurance. The resource aims to assist entities in complying with the Privacy Act when utilizing artificial intelligence technologies.
Summary and content fields are drawn from the document text and are pending editorial review.
Who issued it
Who it governs
This checklist is for organisations deploying commercial AI products that collect, store, use, or disclose personal information to help them comply with privacy obligations.
What the document contains
The document addresses privacy obligations, transparency measures, data accuracy, and ongoing lifecycle assurance processes for organisations deploying commercial AI systems that handle personal information.
The text lacks detailed technical definitions for AI terminology, specific penalty schemes for non-compliance, and instructions on how to technically alter commercial black-box models.
- Organisations deploying commercial AI products must ensure their use and disclosure of personal information complies with Australian Privacy Principle (APP) 6 requirements.
- The collection, generation, or inference of personal information using AI must be necessary, lawful, fair, and where sensitive, accompanied by individual consent.
- Organisations must take reasonable steps under APP 10 to verify input data quality and maintain human oversight to ensure accuracy of probabilistic AI outputs.
- Transparency and accountability measures require informing individuals about AI use in privacy policies and maintaining procedures to explain AI systems.
- Ongoing assurance throughout the AI lifecycle involves establishing permitted use policies, training staff, and performing regular monitoring and audits.
· Who is this guidance for? · Privacy issue: Are you using or disclosing personal information in the context of an AI system? · Privacy issue: Are you collecting, generating or inferring personal information using an AI system? · Privacy issue: Have you taken reasonable steps to ensure the accuracy of personal information in relation to the AI system? · Privacy issue: Has your organisation put in place appropriate transparency and accountability measures? · Privacy issue: What ongoing assurance processes need to be put in place? · Examples of personal information · Learn more
How it scores
Each score is backed by a quote verified against the document text. Editorial review has not yet confirmed them.
Accountability
3/5Clear responsibility for AI outcomes
Has your organisation put in place appropriate transparency and accountability measures?
Privacy issue
screening score · 2026-10-23
Fairness
0/5Non-discrimination and equitable treatment
Checklist
screening score · 2026-10-23
Human Dignity
0/5Respect for the inherent worth of persons
Checklist
screening score · 2026-10-23
Privacy
5/5Protection of personal data and private life
Checklist Privacy considerations when using commercially available AI products Who is this guidance for? This guidance is targeted at organisations that are deploying AI systems that were built with, collect, store, use or disclose personal information.
Checklist
screening score · 2026-10-23
Enforcement
0/5Consequences and compliance mechanisms with real force
Checklist
screening score · 2026-10-23
Impact Assessment
2/5Required assessment of an AI system's risks/impacts before or during use
To assess whether you will be compliant with your entity’s obligations under APP 6, consider
Privacy issue
screening score · 2026-10-23