Automated Decision-Making Disclosure Checker for Australian Business
Answer eight quick questions to see whether the December 2026 automated decision-making disclosure rules (ADM) may affect your business, and what to review first.
What Is the December 2026 ADM Requirement?
From 10 December 2026, organisations covered by the Privacy Act must explain in their privacy policy when they use computer programs to make decisions, or to substantially and directly assist decisions, that could significantly affect an individual’s rights or interests. They must describe the kinds of personal information used and the kinds of decisions involved.
If your result shows exposure, an AI strategy and governance review can map where automated decisions happen, and new builds can be designed with disclosure in mind through custom AI development. Results are general information only; see our disclaimer. Explore all free tools or return to the agency homepage.
The change came from the Privacy and Other Legislation Amendment Act 2024. It is a transparency requirement: it doesn’t ban automated decisions, but it requires businesses to be open about them. Many small businesses with annual turnover of A$3 million or less are exempt from the Privacy Act, although exceptions apply, for example to health service providers.
How This Checker Reaches Its Result
| Step | What it considers |
|---|---|
| Coverage | Turnover and common exceptions to the small business exemption |
| Relevance | Whether software or AI makes or substantially assists significant decisions using personal information |
| Disclosure | Whether your privacy policy already describes those decisions |
| Safeguards | Whether people can ask for human review |
The result is one of four levels: Unlikely to be affected, Review recommended, Action likely needed, or On track.
Where Automated Decisions Often Appear
Credit and finance
Automated loan pre-assessment or credit checks.
Property
Tenant application scoring or screening tools.
Recruitment
Software that ranks or filters job applicants.
Health and services
Systems that decide eligibility, priority or access to a service.
What This Checker Can and Can’t Do
- It gives a general self-check, not legal advice
- It cannot confirm whether the small business exemption applies to you
- It does not review your privacy policy wording
- It does not cover every exception or industry rule
- Use the result to prepare questions for your lawyer or privacy adviser
ADM Readiness FAQs
When does the ADM disclosure requirement start?
Does it apply to small businesses?
What counts as an automated decision?
Does using ChatGPT count?
Is this checker legal advice?
Are my answers stored?
Using AI in Decisions About Customers or Staff?
We can help you map where automation is used and design human review into your systems. Your lawyer handles the legal wording.
Tell Us What You Need
Share a few details and we’ll review your requirements.