Privacy Act
The Privacy Act 1988, the Australian Privacy Principles, and OAIC guidance applied to AI: de-identification, ADM transparency, and consent.
24 articles
Articles about Privacy Act

AI in Reference and Background Checks: Verify Facts, Not Character
AI is arriving in the verification stage of hiring: tools that draft reference questions, summarise calls, scrape digital footprints and score candidates. The admin is worth automating; the judgement, the collection decisions and the fairness are not. Here is the line, a five-step process that holds it, and two ready prompts.
Read article
Your AI Agent Can Remember Now. Govern What It Keeps.
In 2026 the major labs shipped persistent memory as a first-class agent feature, barely six weeks apart. An agent that remembers across sessions is a different thing to govern, and a new attack surface. Treat the memory store as a governed data asset with write rules, provenance, expiry and rollback, not invisible plumbing.
Read article
Every Application Now Reads Perfectly. Assess the Person.
Candidates now write their applications with AI, so the polish and tailoring recruiters once read as effort no longer signal anything. More than a third of Australian hiring managers say AI-generated CVs make candidates harder to assess. Trying to detect the AI is a losing game. Here is how to redesign selection to measure what a person can actually do, and keep it fair.
Read article
Australia Will Not Pass an AI Act. You Are Still Regulated.
The National AI Plan settled the question every GRC team was waiting on. Australia will not pass a standalone AI Act. That is not a reprieve. It means AI is already regulated, spread across the laws and regulators you answer to now. Here is how to stop waiting for an AI law and map every AI use to the obligation it already touches.
Read article
Two Doctors Disagree: AI Can Map the Conflict, Not Resolve It
When a treating doctor and an independent examiner disagree, the delegate has to weigh two medical opinions and determine liability on the balance of probabilities. AI can build the comparison so you spend your time on the judgement, not the sorting. Here is a de-identified workflow that keeps the weighing, and the decision, with the delegate.
Read article
GPT-Live Makes Voice a Work Interface. Check What Gets Recorded
OpenAI's GPT-Live can listen and speak at the same time, making voice feel closer to a continuous work interface than a turn-by-turn chatbot. It is rolling out to consumer ChatGPT plans first, not Business, Enterprise or Edu. That gap makes recording, retention and disclosure rules the immediate workplace question.
Read article
Model Routing Cuts AI Bills. It Also Moves Your Data.
The enterprise AI story has shifted from which model is best to which one you can afford to keep using, and buyers are moving from tokenmaxxing to model routing. The instinct is right. But for Australian regulated work a cheaper model is usually a different provider in a different place, so every routing rule is also a Privacy Act and APRA data-flow decision.
Read article
AI Note-Takers in HR Meetings: Consent Before the Transcript
AI meeting assistants now record HR's most sensitive conversations by default, and often nobody in the room agreed to it. Here is a consent-and-records protocol that keeps the time savings without manufacturing your next privacy breach.
Read article
AI Can Analyse Your Engagement Survey Without Surveilling Your People
AI can read every free-text comment in your engagement survey and turn a thousand of them into themes in minutes. Done well, it finally puts that feedback to use. Done badly, it turns a survey into surveillance. Here is the line, and a workflow that stays on the right side of it.
Read article
OpenAI Built Its Own Chip. The Real Story Is the Cost of Intelligence.
On 24 June, OpenAI and Broadcom unveiled Jalapeño, OpenAI's first custom chip, built to run its models more cheaply. The coverage is about a strike at Nvidia. The useful signal for a practitioner is the opposite of hardware: it is the falling cost of intelligence, and what that does to your AI decisions and your governance. Cost has quietly been holding AI back. That fence is coming down.
Read article
Your AI Assistant Just Became a Shared Teammate. Govern the Channel.
On 23 June, Anthropic launched Claude Tag, a single shared Claude that lives in a Slack workspace with its own memory and admin-scoped access to channels, tools and data. The unit of AI collaboration just moved from the private conversation to the team channel. The thing you now have to govern is no longer a prompt. It is a standing presence. Here is what changes, and the three decisions to make before it is live.
Read article
AI and Permanent Impairment: Organise the Evidence, Keep the Judgement
A permanent impairment claim under section 24 lives or dies on the medical evidence. AI can assemble, de-identify and structure that evidence against the approved Guide, and surface the gaps. It cannot assess the impairment or make the determination. Here is the workflow.
Read article
AI in Workplace Investigations: Organise the File, Not the Finding
AI can compress the administrative weight of a workplace investigation: planning, transcribing, organising evidence, drafting the framework. It cannot assess credibility, weigh the evidence or make the finding. Here is how to use it without compromising procedural fairness.
Read article
The Strongest Open Model Is Now Chinese. Mind Where Your Data Goes.
On 16 June, China's Z.ai released GLM-5.2 under an MIT licence with no regional limits, the highest-ranked open-weights model on its own coding benchmarks. With Anthropic's Fable 5 pulled by a US directive, the strongest model you can simply download and run is now Chinese. The decision that carries your risk is not the model. It is whether you run the open weights yourself or send your data to the hosted API.
Read article
AI Hiring and Performance Tools Under Australia's Positive Duty: What HR Must Control
AI screening, ranking and performance tools sit squarely inside the positive duty under the Sex Discrimination Act, the Fair Work Act and the Privacy Act. Here is the control framework Australian HR teams need before they deploy.
Read article
ChatGPT Just Got Better at Health. Mind the Boundary.
On 18 June OpenAI announced a substantial step up in ChatGPT's health intelligence, free to the 230 million people who already ask it health questions every week. Better answers do not move the boundary between information and a clinical decision. Here is what that means for Australian professionals this week.
Read article
Automated Decisions Now Belong in Your Privacy Policy
From 10 December 2026, APP entities that use personal information in automated decisions affecting people's rights must say so in their privacy policy. For Australian financial services, that is most of the AI already running in underwriting, fraud, collections and claims. Here is the readiness work, with a reusable AI project, prompt library and a worked insurer example.
Read article
AI in Performance Reviews: Draft the Words, Keep the Judgement
AI can synthesise a year of evidence notes into a solid first draft of review feedback. It cannot own the rating, the calibration case or the conversation. Here is the workflow that keeps the line clear.
Read article
Prompt Libraries Make WC AI Safer Only When Human Review Comes First
A practical SRC Act article on de-identification, placeholder prompt libraries, file-note drafting and human review controls for workers compensation communications.
Read article
Workplace AI and Privacy: The Trust Test HR Cannot Outsource
AI productivity tools can reshape workplace data collection, monitoring and employee trust. HR needs a privacy-first governance model before adoption scales.
Read article
AI in Hiring Needs Human Review Before It Needs Another Tool
Australian HR teams can use AI in recruitment, but hiring workflows need privacy discipline, bias checks, candidate transparency and accountable human judgement.
Read article
Privacy-Safe AI for Regulated Work: A Working Practitioner's Guide
Workers compensation, GRC, HR and clinical roles all sit on regulated data. Using AI well in those roles is not optional. Doing it safely is not optional either. This is the practitioner's guide.
Read article
The De-Identification Toolkit for Case Managers Working With AI
A working toolkit for case managers who use AI inside live claim files. Five identifier categories, a placeholder convention, and a daily desk routine.
Read article
On-Device AI at Work: Apple Intelligence and Pixel Gemini Nano
On-device AI is enterprise-ready in narrow ways and not in the ways the demos suggest. Apple Intelligence and Pixel Gemini Nano in April 2026: what works, what does not, and the real privacy story.
Read article