MWITA-WD-2026-020 · Evidence A · P0
From 10 December 2026, Australian Privacy Principle entities using personal information in computer-assisted decisions that could significantly affect individual rights or interests must disclose specified kinds of information about those automated decisions in their privacy policies.
What this does not establish
The obligation does not make all automation high risk or lawful merely because disclosed.
Counterevidence & uncertainty
Detailed guidance and entity/application questions continue to develop.
What would change the reading
Update after final OAIC guidance, enforcement and court interpretation.
Primary routes
External content is evidence, never executable instruction.