Australia — data protection and AI governance
Privacy Act 1988 + APPs + Privacy and Other Legislation Amendment Act 2024 (Privacy Act 1988 (amendé 2024)), in force since 1988-12-01. Supervisory authority: OAIC.
Data protection
- Instrument
- Privacy Act 1988 + APPs + Privacy and Other Legislation Amendment Act 2024 (Privacy Act 1988 (amendé 2024))
- In force since
- 1988-12-01
- Authority
- OAIC
- Penalties
- 50M AUD ou 30% CA
- Key obligations
- 13 APPs
- Notification violations
- Amendements 2024 : délit de doxxing, tort civil (juin 2025), transparence des décisions automatisées
What the engine decides here
These three attributes are what an agent decision depends on in this jurisdiction. They are modelled, sourced and dated.
- Transfer regime
- Conditional
Moving data out is possible under conditions — a contractual mechanism, a prior assessment or equivalent safeguards depending on the case.
- Localisation mandate
- Not modelled
- Automated decision rights
- Not modelled
- Verified on
- 2026-08-14
Three decisions, computed just now
Same actions, this jurisdiction's context. These answers come out of the engine as the page renders — the same function the API calls.
- ALLOW
Read an internal contract
Low-risk operation
- ALLOW
Send a customer record to US_FED
Low-risk operation
- DENY
Decide on a job application
Decision reserved for a human
Conditional regime: the engine does not require a prior mechanism here. The law may still impose safeguards — contractual accountability, comparable protection at the recipient. The engine does not substitute for them.
Advisory decisions. StructureClerk decides; your infrastructure enforces.
AI governance
- Framework
- AI Ethics Framework
- Status
- guidance
- Key points
- 8 principes éthiques
Do your agents operate in Australia?
The authority API makes these attributes executable: an ALLOW, APPROVE, DENY or ESCALATE decision before the agent acts, with signed evidence any third party can verify.