---
title: "Assess an agency's use of generative AI under state information-privacy law"
url: "https://ailawframework.com/practice/administrative-and-public-law/assess-an-agency-s-use-of-generative-ai-under-state-information-privacy"
type: "task"
site: "AI Law Framework"
id: "A31-B5-13"
practice_area: "Administrative & Public Law"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["NSW", "QLD", "VIC"]
last_reviewed: "2026-10-10"
---

# Assess an agency's use of generative AI under state information-privacy law

> Build a gap table against the agency's AI policy and privacy principles.

Canonical page: https://ailawframework.com/practice/administrative-and-public-law/assess-an-agency-s-use-of-generative-ai-under-state-information-privacy  
Last reviewed: 2026-10-10

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Administrative & Public Law](https://ailawframework.com/practice/administrative-and-public-law.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | Build a gap table against the agency's AI policy and privacy principles. |
| What the lawyer must review | Lawyer confirms the governing statute (PPIPA, PDPA Vic, IP Act Qld). |
| Written for / versions | New South Wales, Queensland, Victoria |

## Checking plan

**Source-by-source verification**

Trace relied-on content to independent sources and check for relevant material the output has missed.

- What the AI does: Build a gap table against the agency's AI policy and privacy principles.
- What the lawyer does: Lawyer confirms the governing statute (PPIPA, PDPA Vic, IP Act Qld).
- Who reviews: Lawyer competent in the matter and the forum
- Basis: Planning guidance checked against the linked public sources on 10 October 2026. Confirm the current instrument before reliance.
- Why: The traffic light follows the consequence of an error and how much of the output the lawyer must check before it is used.

## Checks the lawyer makes

1. Open the cited source and confirm it is the current instrument for this forum and this date.
2. Lawyer confirms the governing statute (PPIPA, PDPA Vic, IP Act Qld).
3. Compare the output with the source and the instructions, including material the output left out.
4. The responsible lawyer approves the exact output for its intended use, or sends it back.

## Notes

- Suggested working checks from the linked public sources. Read the source and confirm it applies to this forum and this date. The checks do not approve software or record that the work is done.

## Practical guide

Jurisdiction: New South Wales, Queensland and Victoria

**Deliverable**: Assess an agency's use of generative AI under state information-privacy law

**Inputs**

- IPC NSW: privacy risks of Gen AI
- OIC Qld: AI in external reviews
- The matter instructions and the documents the output will rely on.

**Example**: Stop before the result is filed, sent or relied on. Lawyer confirms the governing statute (PPIPA, PDPA Vic, IP Act Qld).

**Stop and escalate when**

- The cited source is not the instrument that applies to this forum or this date.
- The output states a fact, date, citation, figure or commitment that is not in the instructions or the source.
- The responsible lawyer has not approved the exact output for its intended use.

Checked 2026-10-10.

## Sources

- [IPC NSW: privacy risks of Gen AI](https://www.ipc.nsw.gov.au/resources/guide-privacy-risks-associated-use-generative-ai-tools) (checked 2026-10-10)
- [OIC Qld: AI in external reviews](https://www.oic.qld.gov.au/library/articles/Using-artificial-intelligence-in-external-reviews-or-privacy-complaints) (checked 2026-10-10)

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*