---
title: "Privacy policy clause on automated decisions (APP 1.7 to 1.9, from 10 December 2026)"
url: "https://ailawframework.com/precedents/ai-decision-systems/adm-privacy-policy-clause"
type: "precedent"
site: "AI Law Framework"
id: "a45-adm-privacy-policy-clause"
area_id: "A45"
kind: "clause"
ai_level: "yellow"
version: 1
law_stated_as_at: "2026-10-17"
---

# Privacy policy clause on automated decisions (APP 1.7 to 1.9, from 10 December 2026)

> Privacy policy wording describing the kinds of personal information used, and the kinds of significant decisions made solely or substantially and directly by computer programs, as APP entities must from 10 December…

Canonical page: https://ailawframework.com/precedents/ai-decision-systems/adm-privacy-policy-clause  
Law stated as at: 2026-10-17

Site index for agents: https://ailawframework.com/llms.txt

Privacy policy wording describing the kinds of personal information used, and the kinds of significant decisions made solely or substantially and directly by computer programs, as APP entities must from 10 December 2026, with a short mapping guide and law-firm examples.

## Key facts

- Kind: Clause. Wording to drop into a longer document.
- Practice area: [AI decision systems](https://ailawframework.com/precedents/ai-decision-systems.md)
- Jurisdictions: Australia, United Kingdom (England and Wales), European Union
- AI level: Yellow. AI can help in set ways. A lawyer checks specific points before use.
- Law stated as at: 2026-10-17
- Status: Maintained. Checked on 2026-10-17 against the 6 authorities it cites, for Australia, United Kingdom (England and Wales) and European Union.

## When to use it

Use for the firm's own privacy policy and when advising clients that are APP entities. Complete the mapping in Part A first: the clause must describe what the entity actually does. If no in-scope decisions are made, the clause is optional.

## How AI may be used

AI can draft the clause from a completed decision map and check it against APP 1.8, but identifying which decisions are in scope (the mapping task) is lawyer-led.

**AI may:**

- Turn the completed decision map into draft clause wording in plain English.
- Check the draft covers each APP 1.8 element and is consistent with the collection notices.
- List systems in the firm's AI tools register that may need to be mapped.

**AI must not:**

- Must not decide which decisions significantly affect individuals or are "substantially and directly related" to a decision.
- Must not describe systems or decision types that have not been confirmed with their owners.
- Must not publish the privacy policy.

**The lawyer checks:**

- The decision map has been completed with system owners and reviewed by a lawyer.
- The clause describes kinds of information and decisions accurately and in plain language.
- The clause is published by 10 December 2026 and diarised for review when systems change.

## Authorities

- [Privacy Act 1988 (Cth) Sch 1 APP 1.7, 1.8 and 1.9 (inserted by the Privacy and Other Legislation Amendment Act 2024 (Cth); commencing 10 December 2026)](https://www.legislation.gov.au/C2024A00128/asmade)
- [OAIC, Australian Privacy Principles guidelines, chapter 1: APP 1 (open and transparent management of personal information), including APP 1.7 to 1.9](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-1-app-1-open-and-transparent-management-of-personal-information)
- [OAIC, New resources on transparency for use of AI and automated decision-making (30 September 2026)](https://www.oaic.gov.au/news/media-centre/new-resources-on-transparency-for-use-of-ai-and-automated-decision-making)
- [Privacy Act 1988 (Cth) s 6D (small business operators)](https://www.legislation.gov.au/C2004A03712/latest/text)
- [EU: Regulation (EU) 2016/679 (General Data Protection Regulation) art 22 (automated individual decision-making)](https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng)
- [UK: Data (Use and Access) Act 2025 Pt 5 ch 1 (automated decision-making amendments to the UK GDPR)](https://www.legislation.gov.uk/ukpga/2025/18/contents)

## Official form

[Official form](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-1-app-1-open-and-transparent-management-of-personal-information)

## Full text and drafting notes

The full text and the drafting notes are not part of this public page. Signed-in firm accounts can read them at https://ailawframework.com/precedents/ai-decision-systems/adm-privacy-policy-clause and through the signed-in MCP connector https://ailawframework.com/mcp/firm.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*