Is your privacy policy ready for 10 December 2026?
From 10 December 2026, Australian businesses that use personal information in automated decisions have to say so in their privacy policy. The obligation is broader than most people expect. It catches rule-based scripts and spreadsheets, not just AI. The OAIC started checking privacy policies proactively in January 2026 rather than waiting for complaints.
Ten questions. One page back. No charge.
Request your privacy policy check
Tell us your business name, website and what you currently automate. We will send back one page covering what is in scope, what needs disclosing and what to hand your lawyer.
Form not loading? Email us at info@aistack.com.au with your name, business name, website and what you currently automate.
Why this matters for automated businesses
The obligation is not limited to AI. A rule-based script that sorts enquiries, a spreadsheet that scores leads or a workflow that decides who gets a follow-up all use personal information to make decisions, and all of them can need disclosing.
AI Stack's own agents are supervised, with human approval on client-facing messages and material record changes. The same disclosure now sits in AI Stack's privacy policy.
Already running automation and want it supervised properly?
The fit check maps what your automation touches, where approval sits and what should never run unattended.