---
title: "Draft a response pack for an OAIC investigation"
url: "https://ailawframework.com/practice/privacy-data-protection-and-cyber/draft-a-response-pack-for-a-privacy-regulator-investigation/commonwealth"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A25-T1-R11-CTH"
practice_area: "Privacy, Data Protection & Cyber"
tier: "red"
lawyer_review: "required"
jurisdictions: ["CTH"]
last_reviewed: "2026-10-02"
---

# Draft a response pack for an OAIC investigation

> From the OAIC’s notice, schedule every question, document category and due date it sets, and index the file’s documents, system logs and policy versions against each item, flagging what is missing and what may be…

Canonical page: https://ailawframework.com/practice/privacy-data-protection-and-cyber/draft-a-response-pack-for-a-privacy-regulator-investigation/commonwealth  
Last reviewed: 2026-10-02

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Privacy, Data Protection & Cyber](https://ailawframework.com/practice/privacy-data-protection-and-cyber.md) |
| Human involvement | Red: Lawyer writes; AI may check, clarify or collect data |
| How AI is used | From the OAIC’s notice, schedule every question, document category and due date it sets, and index the file’s documents, system logs and policy versions against each item, flagging what is missing and what may be privileged. The tool writes no part of the response to the OAIC: no draft, no first draft, no skeleton, no outline, no suggested paragraphs. Once the lawyer has written the submission, check it against the notice question by question and list every assertion the file does not support. |
| What the lawyer must review | Draft and sign everything that goes to the OAIC yourself Verify every citation Do not admit a serious interference (s 13) Check privilege (Optus v Robertson; McClure v Medibank [2025] FCA 167) and 2024 Act powers Use ACL (No 2) [2025] FCA 1224, $5.8m, as the penalty anchor |
| Written for | Commonwealth |
| Applies to | [Draft a response pack for a privacy-regulator investigation](https://ailawframework.com/practice/privacy-data-protection-and-cyber/draft-a-response-pack-for-a-privacy-regulator-investigation.md) |

## Checking plan

**Source-by-source verification**

Trace relied-on content to independent sources and check for relevant material the output has missed.

- What the AI does: Potential support includes preparing preliminary structure or wording and summarising source material. Confirm the tool’s capability and permitted scope.
- What the lawyer does: Set the scope, verify the evidence, resolve exceptions and approve the final output for its intended use.
- Who reviews: Responsible lawyer with competence in the matter
- Basis: Suggested checking approach based on the task guidance. Complete the assessment for the actual tool, information and jurisdiction.
- Why: The plan reflects the described work and review requirements. Policy colours are not used to determine permission or checking.

## Checks the lawyer makes

1. Open each relied-on authority independently. Confirm its existence, current status, proposition and any quotation or pinpoint reference.
2. Trace every relied-on figure to its source, confirm dates and assumptions, and independently recalculate totals or derived amounts.
3. Check the current court or regulator requirements, prescribed form and attachments for the intended document and filing.
4. Confirm that the actual tool, feature and processing terms permit use of this information, including access, retention, training and disclosure conditions.
5. Preserve original files and relevant metadata. Document provenance and handling, and seek forensic review where authenticity needs to be resolved.
6. Verify the applicable jurisdiction and the version of each relevant law, rule or instrument in force at the material time.
7. Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
8. Resolve exceptions and record the responsible lawyer’s approval of the exact output and intended use.

## Notes

- Confirm the required checking with the responsible lawyer before work starts. The checking approach does not establish permission to use AI.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*