Australia to Mandate AI Transparency
Australia is set to implement amendments to its Privacy Act that will require increased transparency in automated decision-making. The changes will compel organizations, including universities, to disclose the use of AI in processes like admissions, grading, and student support, affecting how they document and audit these systems.
- The new transparency obligations for automated decision-making are set to come into effect on December 10, 2026. The Office of the Australian Information Commissioner (OAIC) will enforce these rules and is already undertaking "compliance sweeps" of privacy policies. - These amendments stem from the 2023 Privacy Act Review Report, which recommended greater transparency for "substantially" automated decisions that have a legal or similarly significant effect on an individual's rights. - The changes will require organizations to update their privacy policies to disclose the types of personal information used in automated decision-making, the specific kinds of decisions made, and the categories of decisions that could significantly impact an individual's rights. - The term "computer program" is broadly defined, meaning the rules apply not only to complex AI and machine learning systems but also to simpler automation, such as pre-programmed rule-based processes. - Individuals will have the right to request meaningful information about how automated decisions affecting them are made, a proposal modeled on the EU's GDPR but potentially broader in scope. - This initiative is part of a larger government strategy on AI, which includes the development of voluntary AI Safety Standards and proposed mandatory "guardrails" for AI systems used in high-risk settings. - The push for a consistent legal framework was influenced by the findings of the Robodebt Royal Commission, which highlighted the need for transparency and review pathways for automated government decision-making. - Failure to comply with the new transparency requirements can lead to civil penalties, and the OAIC has the authority to issue infringement and compliance notices.
