---
title: "Privacy, Data Protection & Cyber: precedents"
url: "https://ailawframework.com/precedents/privacy-data-protection-and-cyber"
type: "precedent_area"
site: "AI Law Framework"
area_id: "A25"
precedent_count: 7
last_reviewed: "2026-10-17"
---

# Privacy, Data Protection & Cyber: precedents

> 7 starting-point precedents for Privacy, Data Protection & Cyber, each with the law behind it and how far AI may help.

Canonical page: https://ailawframework.com/precedents/privacy-data-protection-and-cyber  
Last reviewed: 2026-10-17

Site index for agents: https://ailawframework.com/llms.txt

## Precedents

| Precedent | Kind | Jurisdictions | AI level | Summary | Law stated as at |
| --- | --- | --- | --- | --- | --- |
| [Data breach response plan (Notifiable Data Breaches scheme, with cyber reporting clocks)](https://ailawframework.com/precedents/privacy-data-protection-and-cyber/data-breach-response-plan.md) | Policy | Australia, New Zealand, European Union, United Kingdom (England and Wales) | Yellow | A ready-to-tailor plan that tells the response team how to contain, assess, notify and review a data breach under Part IIIC of the Privacy Act, and lists the other reporting clocks that may run at… | 2026-10-17 |
| [Notifiable data breach statement to the OAIC: completion guide for the online form](https://ailawframework.com/precedents/privacy-data-protection-and-cyber/ndb-statement-to-oaic.md) | Form | Australia | Red | Practical guide to completing the OAIC's online Notifiable Data Breach form: what goes in the mandatory statement (Part one), what to add in the optional Part two, what to attach, and the traps that… | 2026-10-17 |
| [APP privacy policy with AI and automated-decision disclosures (APP 1.4 and APP 1.7 to 1.9)](https://ailawframework.com/precedents/privacy-data-protection-and-cyber/privacy-policy-automated-decisions.md) | Policy | Australia | Yellow | A complete APP privacy policy for an Australian organisation that covers every APP 1.4 heading and the automated-decision disclosures required from 10 December 2026 under APP 1.7 to 1.9, with… | 2026-10-17 |
| [Serious invasion of privacy (statutory tort, Privacy Act Sch 2): claim assessment checklist](https://ailawframework.com/precedents/privacy-data-protection-and-cyber/statutory-privacy-tort-assessment.md) | Checklist | Australia | Yellow | Checklist for assessing a claim, or a threatened claim, under the statutory tort for serious invasions of privacy: limitation, exemptions, each element, defences, remedies and the damages cap,… | 2026-10-17 |
| [Data protection clause for service providers, including AI vendors (no training, retention, offshore disclosure)](https://ailawframework.com/precedents/privacy-data-protection-and-cyber/data-processing-ai-vendor-clause.md) | Clause | Australia | Yellow | An Australian-law data protection clause for a services or SaaS agreement that controls how a supplier, including an AI provider, uses, stores, moves and deletes customer data, with no-training and… | 2026-10-17 |
| [AI and automated decisions clause for privacy policies and collection notices](https://ailawframework.com/precedents/privacy-data-protection-and-cyber/ai-privacy-policy-clause.md) | Clause | Australia | Yellow | Modular privacy policy wording on AI: how AI is used, chatbot labelling, the APP 1.7 to 1.9 automated-decision disclosure required from 10 December 2026, AI-inferred information, training and… | 2026-10-17 |
| [Privacy impact assessment checklist for an AI tool (supplement to the OAIC PIA tool)](https://ailawframework.com/precedents/privacy-data-protection-and-cyber/ai-privacy-impact-assessment.md) | Checklist | Australia, European Union | Yellow | A structured PIA checklist for deploying an AI product: project description, information flows (prompts, outputs, logs, training), an APP-by-APP analysis including APP 1.7, AI-specific risks, vendor… | 2026-10-17 |

The area's guidance on AI use: [Privacy, Data Protection & Cyber](https://ailawframework.com/practice/privacy-data-protection-and-cyber.md). All areas: [Precedents](https://ailawframework.com/precedents.md).

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*