AI compliance // EP13

Ep13: Australia's Privacy Act Requires AI Disclosure from Dec '26

What Your Business Must Do

A Privacy Act amendment is coming that changes how Australian businesses must handle AI, and most owners either haven't heard of it or aren't sure what it actually asks of them. In this episode Kim Fernandez breaks down who it applies to, what the penalties look like, and the one practical step worth taking this week, before the compliance window closes.

Based on AI Your Business Podcast2026-06-10

The short version

New Privacy Act obligations come into force on 10 December, and they land on more businesses than expect it, often through tools you'd never think of as "AI". The work isn't to panic or lawyer up overnight. It's to find where AI already touches customer data, get honest about what you disclose, and take one concrete step now rather than in the compliance scramble later.

Three new legal obligations start on 10 December. In plain English, they're about transparency: telling people when AI is involved in decisions that affect them.
Australia's approach is different from most other countries, so overseas playbooks won't map neatly. Whether you're in scope now or caught by the next round of reforms, the direction is clear.
You can't disclose what you can't see. Mapping where AI touches customer data is the one action worth taking this week.

Why this matters

For most established businesses the risk isn't a dramatic breach, it's quiet non-compliance: AI shaping hiring, marketing or service decisions with no record and no disclosure. The cost of getting it wrong isn't only the fine, it's the trust you lose when customers feel something happened to them without their knowledge.

  • Customer data may be flowing through tools no one has reviewed
  • Staff may not know which tools are approved or in scope
  • Customers may not be told when AI is involved in a decision
  • A policy may exist on paper but not match daily behaviour

What to do with this insight

Treat 10 December as a deadline you plan back from, not a date to react to. The goal is a business that can honestly say where AI is used, what data it touches, and who is accountable, before anyone has to ask.

  • Map where AI is used across the business, including tools you don't label as AI
  • Document approved tools and the data rules around them
  • Build human review points into any AI-assisted decision that affects people
  • Get legal advice on your specific Privacy Act obligations

How AI Collab thinks about it

Compliance is a floor, not the goal. We help businesses adopt AI in the right order, strategy first, then capability and governance, so disclosure and safe use are built in rather than bolted on. Do it that way and the December deadline becomes a prompt to get organised, not a fire to fight.

Frequently asked questions

Is this legal advice?
No. It's general business guidance based on the podcast episode. Get legal advice for your specific obligations.
Why does AI disclosure matter?
Disclosure helps customers, staff and stakeholders understand when AI is involved in processes that may affect them.
What should a business do first?
Map where AI is used, what data it touches and who's responsible for review.

Want to turn this into a practical AI plan?

AI Collab helps established Australian businesses move from interest to implementation: strategy, team capability, governance and custom builds that fit the way the business actually works.

Talk to AI CollabListen to the episode