---
title: "Advise a small business whether the Privacy Act applies to it"
url: "https://ailawframework.com/practice/privacy-data-protection-and-cyber/advise-a-small-business-whether-the-privacy-act-applies-to-it"
type: "task"
site: "AI Law Framework"
id: "A25-Y20261018-5"
practice_area: "Privacy, Data Protection & Cyber"
tier: "yellow"
lawyer_review: "required"
last_reviewed: "2026-10-22"
---

# Advise a small business whether the Privacy Act applies to it

> From the client's financial statements, business description, contracts and group structure, complete a checklist of the turnover test and each exception that brings a small business under the Act, recording the…

Canonical page: https://ailawframework.com/practice/privacy-data-protection-and-cyber/advise-a-small-business-whether-the-privacy-act-applies-to-it  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Privacy, Data Protection & Cyber](https://ailawframework.com/practice/privacy-data-protection-and-cyber.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | From the client's financial statements, business description, contracts and group structure, complete a checklist of the turnover test and each exception that brings a small business under the Act, recording the document behind each answer. |
| What the lawyer must review | Decide whether annual turnover is $3 million or less across all income sources, whether any exception applies (health service provider, trading in personal information, Commonwealth contractor, related to a covered business, opted in), and advise on the result and on best practice if the business is outside the Act. |
| Written for / versions | 1 jurisdiction versions below |

## Checking plan

**Source-by-source verification**

Trace relied-on content to independent sources and check for relevant material the output has missed.

- What the AI does: From the client's financial statements, business description, contracts and group structure, complete a checklist of the turnover test and each exception that brings a small business under the Act, recording the document behind each answer.
- What the lawyer does: Decide whether annual turnover is $3 million or less across all income sources, whether any exception applies (health service provider, trading in personal information, Commonwealth contractor, related to a covered business, opted in), and advise on the result and on best practice if the business is outside the Act.
- Who reviews: Responsible lawyer with competence in the matter
- Basis: Practical workflow informed by the linked primary sources; the traffic light and working checks are editorial guidance, not a court classification.
- Why: The level reflects what the work is, the consequence of an error, and how much of the output the lawyer must independently re-derive.

## Checks the lawyer makes

1. Confirm the instructions, the jurisdiction and the complete relevant material before starting.
2. Confirm turnover includes income from all sources and excludes assets and capital proceeds.
3. Check each exception against the business's actual activities and contracts.
4. Confirm whether the business is related to an entity the Act covers.
5. Check the output against the source documents named in it before it is relied on.

## Notes

- These are suggested working checks. Confirm the required checking with the responsible lawyer before work starts; the checking approach does not establish permission to use AI.

## Sources

- [OAIC: Small business](https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/organisations/small-business) (checked 2026-10-18)

## Forms and precedents for this task

| Form or precedent | Kind | AI level | Summary |
| --- | --- | --- | --- |
| [Does the Privacy Act apply? Small business exemption assessment checklist and advice note (Privacy Act ss 6C to 6EA)](https://ailawframework.com/precedents/privacy-data-protection-and-cyber/small-business-exemption-assessment-checklist.md) | Checklist | Yellow | Checklist and advice note on whether a business is a small business operator outside the Privacy Act: the $3 million turnover test, the s 6D(4) exceptions (health services, data trading,… |

Signed-in accounts can read the full text of each one.

## Jurisdiction versions

| Jurisdiction | Level |
| --- | --- |
| [United States](https://ailawframework.com/practice/privacy-data-protection-and-cyber/advise-a-small-business-whether-the-privacy-act-applies-to-it/united-states.md) | Yellow |

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*