---
title: "APP privacy policy with AI and automated-decision disclosures (APP 1.4 and APP 1.7 to 1.9)"
url: "https://ailawframework.com/precedents/privacy-data-protection-and-cyber/privacy-policy-automated-decisions"
type: "precedent"
site: "AI Law Framework"
id: "a25-privacy-policy-automated-decisions"
area_id: "A25"
kind: "policy"
ai_level: "yellow"
version: 1
law_stated_as_at: "2026-10-17"
---

# APP privacy policy with AI and automated-decision disclosures (APP 1.4 and APP 1.7 to 1.9)

> A complete APP privacy policy for an Australian organisation that covers every APP 1.4 heading and the automated-decision disclosures required from 10 December 2026 under APP 1.7 to 1.9, with plain-English AI and…

Canonical page: https://ailawframework.com/precedents/privacy-data-protection-and-cyber/privacy-policy-automated-decisions  
Law stated as at: 2026-10-17

Site index for agents: https://ailawframework.com/llms.txt

A complete APP privacy policy for an Australian organisation that covers every APP 1.4 heading and the automated-decision disclosures required from 10 December 2026 under APP 1.7 to 1.9, with plain-English AI and chatbot sections.

## Key facts

- Kind: Policy. A policy or procedure for a firm or client.
- Practice area: [Privacy, Data Protection & Cyber](https://ailawframework.com/precedents/privacy-data-protection-and-cyber.md)
- Jurisdictions: Australia
- AI level: Yellow. AI can help in set ways. A lawyer checks specific points before use.
- Law stated as at: 2026-10-17
- Status: Maintained. Checked on 2026-10-17 against the 7 authorities it cites, for Australia.

## When to use it

Use when drafting a new privacy policy or rebuilding an old one before the automated-decision rules start on 10 December 2026. If the client only needs to add AI and automated-decision wording to an existing policy, use the AI and automated decisions clause instead.

## How AI may be used

AI may produce a first draft mapped to the APP 1.4 and APP 1.8 headings from facts the client has supplied. Every statement must match the client's verified data inventory and its inventory of computer programs used in significant decisions.

**AI may:**

- Map an existing policy against APP 1.4 and APP 1.7 to 1.8 and list what is missing.
- Draft plain-English descriptions from the client's own system list, vendor contracts and decision inventory.
- Compare the policy with the client's collection notices and chatbot notices and flag inconsistencies.

**AI must not:**

- Must not invent or assume data flows, overseas locations, AI uses or automated decisions the client has not confirmed.
- Must not state that the client does not use AI or automated decisions without the client's written confirmation.
- Must not copy another organisation's published privacy policy.

**The lawyer checks:**

- Each entry in clause 7.2 matches the client's inventory of computer programs used in decisions that could significantly affect individuals.
- Overseas countries in clause 6 match the vendor contracts and hosting locations.
- Every promise (human review, no training, deletion periods) is true and backed by a contract or process.

## Authorities

- [Privacy Act 1988 (Cth) Sch 1 APP 1.3 to 1.6 (APP privacy policy: content and availability)](https://www.legislation.gov.au/C2004A03712/latest/text)
- [Privacy Act 1988 (Cth) Sch 1 APP 1.7 to 1.9 (automated decisions; in force from 10 December 2026)](https://www.legislation.gov.au/C2024A00128/asmade/text)
- [Privacy and Other Legislation Amendment Act 2024 (Cth) Sch 1 Pt 15 and s 2 (commencement of APP 1.7 to 1.9)](https://www.legislation.gov.au/C2024A00128/asmade/text)
- [Privacy Act 1988 (Cth) s 13K(1) (infringement notices for breaches of APP 1.3, APP 1.4 and, from 10 December 2026, APP 1.7)](https://www.legislation.gov.au/C2004A03712/latest/text)
- [Privacy Act 1988 (Cth) Sch 1 APPs 5, 8, 11, 12 and 13](https://www.legislation.gov.au/C2004A03712/latest/text)
- [OAIC, Australian Privacy Principles Guidelines, Chapter 1 (APP 1), updated for APP 1.7 to 1.9](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-1-app-1-open-and-transparent-management-of-personal-information)
- [OAIC, New resources on transparency for use of AI and automated decision-making (30 September 2026)](https://www.oaic.gov.au/news/media-centre/new-resources-on-transparency-for-use-of-ai-and-automated-decision-making)

## Official form

[Official form](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-1-app-1-open-and-transparent-management-of-personal-information)

## Full text and drafting notes

The full text and the drafting notes are not part of this public page. Signed-in firm accounts can read them at https://ailawframework.com/precedents/privacy-data-protection-and-cyber/privacy-policy-automated-decisions and through the signed-in MCP connector https://ailawframework.com/mcp/firm.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*