Notice · Privacy, Data Protection & Cyber
Collection notice (APP 5) for forms, websites, apps and call scripts
Collection notice covering each APP 5.2 matter (identity, third-party collection, legal authority, purposes, consequences, usual disclosures, access and complaints, overseas disclosure), with a layered short version and a build sheet.
- Kind
- Notice. A formal notice to serve or publish.
- Where it applies
- Australia, Commonwealth
- AI use
- Green AI can do most of the drafting. A lawyer still reviews the result.
- Law stated as at
- 18 October 2026
- Status
- Maintained. Checked on 18 October 2026 against the 3 authorities it cites, for Australia and Commonwealth.
- Version
- 1
- Source
- Written for this library
When to use it
Use whenever an APP entity collects personal information through a form, website, app, call centre, intake process or from a third party. Prepare one notice per collection point, because purposes and disclosures differ. Pair it with the APP privacy policy; for AI or automated decision disclosures use the AI clause in this library as well.
Used for these tasks
Each task page says how far AI may help with the task and what the lawyer must review.
How AI may be used
With the notice template and build sheet settled by the firm, AI may fill each collection point’s notice from the confirmed build sheet; the lawyer or privacy officer signs off the build sheet facts once for each collection point.
AI may
- Fill the notice for a collection point from its completed build sheet, matter by matter
- Check the notice against the privacy policy for consistent purposes, disclosures and overseas countries, and list differences
- Produce the layered short version for small screens or call scripts from the full notice
AI must not
- Must not invent or broaden purposes, recipients or overseas countries that are not in the build sheet
- Must not state that collection is required by a law without the law named in the build sheet
- Must not omit an APP 5.2 matter because it is inconvenient; a matter may be left out only where the build sheet records why it is not reasonable to notify it
The lawyer checks
- The build sheet for each collection point reflects what the business actually collects, why, and who receives it, confirmed with the system owner
- Purposes in the notice cover every intended use, so later uses fit APP 6 as a primary or related secondary purpose
- Overseas recipients and countries match the vendor and hosting arrangements
- The notice is shown at or before collection (or as soon as practicable after) at the point where the individual will see it
Method: how the Green, Yellow and Red levels are decided. This is guidance for planning, not legal advice.
Read the full text
The full text is for signed-in accounts. It is free. When you sign in you can:
- read the whole precedent, with its drafting notes beside it;
- copy it, or download it as a Word file or Markdown;
- add it to your firm’s knowledge base, so colleagues can find it;
- let the AI tools you connect read it from that knowledge base.
The summary, the law it rests on and the AI-use guidance above stay public. Privacy.
More in Privacy, Data Protection & Cyber
- Response to a request for access to personal information (APP 12), with refusal notice and correction options (APP 13)
- Data breach response plan (Notifiable Data Breaches scheme, with cyber reporting clocks)
- Notification of an eligible data breach to affected individuals (Privacy Act s 26WL), with the public-notice option
- Notifiable data breach statement to the OAIC: completion guide for the online form
- APP privacy policy with AI and automated-decision disclosures (APP 1.4 and APP 1.7 to 1.9)
- Letter of demand for a serious invasion of privacy (statutory tort, Privacy Act Sch 2): take-down, undertakings and remedies
- Serious invasion of privacy (statutory tort, Privacy Act Sch 2): claim assessment checklist
- Data protection clause for service providers, including AI vendors (no training, retention, offshore disclosure)
- AI and automated decisions clause for privacy policies and collection notices
- Privacy impact assessment checklist for an AI tool (supplement to the OAIC PIA tool)
All precedents for Privacy, Data Protection & Cyber · Tasks and AI use in this area