Who it is for
Businesses with 20–200 staff that use AI and have no rules yet.
Professional services, health and care, education and training, finance, construction and trades. If your turnover is above A$3 million, or you handle health information at any size, the Privacy Act applies to you and the 10 December duty may too. If you are smaller and outside the Act, the policy and the data-safety rule are still the two documents most likely to prevent an expensive mistake.
Not for: enterprises with legal teams (you need advice, not templates), and businesses that do not use AI at all.
What it is built from
Sources, not opinions.
- Privacy Act 1988 (Cth) and the Australian Privacy Principles, including APP 1.7–1.9 as amended in 2024
- OAIC guidance on privacy and commercially available AI products (Oct 2024) and on developing and training AI
- National AI Centre, Guidance for AI Adoption, six essential practices (Oct 2025)
- Voluntary AI Safety Standard
- Official vendor pricing and data-handling terms, checked 3 Sep 2026. Anything we could not verify is marked so, not guessed
Not legal advice. These are general-information templates and training resources prepared by AI Economy Index. Before adopting them, have them checked against your business, your industry rules and your contracts by a qualified adviser.