Framework library · Australia

Privacy Act 1988

Privacy Act 1988 (Australian Privacy Principles). Published by OAIC, version incl. 2024 reforms. Kapālins maps it at category level: the assessment’s 5 AI-risk areas, each tied to this framework, rather than clause by clause. 1 of 5 risk areas are proved by a live signal from the platform, and 4 by the assessment.

Read the source document

Risk areas mapped
LLM Security controlsAssessment
Agentic AI Risk controlsAssessment
AI Privacy & Data Governance controlsLive signal
Model Integrity & Supply Chain controlsAssessment
AI Governance & Risk Management controlsAssessment

Live signal: a signal from the gateway, probes or device sensor proves it continuously. Assessment: it is evidenced by answers to the assessment. Both are exported in the regulator evidence pack.

History

How the Privacy Act 1988 got here.

  1. Adopted

    The Privacy Act 1988 received Royal Assent. Federal Register of Legislation

  2. Amended

    Private sector amendments commenced, extending the Privacy Act to many private sector organisations. OAIC

  3. Amended

    The Privacy Amendment (Enhancing Privacy Protection) Act 2012 commenced, introducing the Australian Privacy Principles. OAIC

  4. In force

    The Notifiable Data Breaches scheme commenced under the Privacy Act. OAIC

  5. Amended

    The Privacy Legislation Amendment (Enforcement and Other Measures) Act 2022 commenced, strengthening enforcement and penalties. OAIC

  6. Amended

    Most Privacy and Other Legislation Amendment Act 2024 changes within the Information Commissioner’s remit commenced. OAIC

  7. In force

    The statutory tort for serious invasions of privacy (Schedule 2 of the Privacy Act) commenced. OAIC

  8. In force · upcoming

    Automated decision-making transparency obligations in privacy policies (APP 1) take effect. OAIC