Australia’s Privacy Act Forces AI Decision Mapping Into Disclosure Work

Australia’s updated Privacy Act requires legal teams to map how AI and other systems influence significant decisions, identify the personal data used, and disclose whether those decisions are fully automated.

• •Privacy policies now need decision-level AI mapping, not just a yes/no disclosure.
• •Teams must trace which systems and data feed consequential decisions before drafting notices.
• •Incomplete inventories or logic maps can turn the disclosure itself into legal risk.
• •The rule pushes legal work from governance checks into front-end discovery and documentation.
• •Counsel must distinguish fully automated decisions from systems that only substantially contribute.