# Automated Decision-Making Disclosure Template

**For Australian businesses. For use in or alongside your privacy policy.**
Provided free by VibeZero (https://www.vibe0.com.au). Edit freely.

This is a **starter template, not a completed disclosure, and not legal advice.**
It is designed to help Australian organisations meet the automated decision-making
(ADM) transparency obligations that commence on 10 December 2026 under the
Privacy and Other Legislation Amendment Act 2024 (Cth). Your specific obligations
depend on your circumstances. Have this reviewed against your own operations
before you rely on it.

---

## What the obligation requires

From 10 December 2026, organisations subject to the Australian Privacy Act 1988
(Cth) must disclose in their privacy policy where personal information is used in
computer programs or automated processes to make, or substantially assist in
making, decisions that could significantly affect individuals.

This template gives you the language to make that disclosure. Replace anything in
[square brackets] with your own details.

---

## Section: Automated Decision-Making Disclosure

**[Insert section heading in your privacy policy, e.g. "Use of automated
decision-making"]**

[Organisation name] uses automated processes and computer programs (including
artificial intelligence tools) in the following ways that may significantly affect
individuals. Where we use your personal information in these processes, we disclose
that use below.

### [Decision area 1 - e.g. "Application screening"]

**What we decide:** [Brief description of the decision, e.g. "Whether to progress
your application to a human review stage."]

**How automation is involved:** [Describe the automated process, e.g. "We use
[tool name] to score applications against defined criteria. The output is reviewed
by a staff member before any final decision is made."]

**Personal information used:** [List the categories of personal information used,
e.g. "Name, employment history, qualifications."]

**Human involvement:** [Describe the human review step, e.g. "All automated
outputs are reviewed by [role name] before a final decision is communicated."]

**Outcome:** [Describe what happens next, e.g. "If your application does not
progress, you will receive notice and may request a manual review."]

---

### [Decision area 2 - e.g. "Customer risk assessment"]

**What we decide:** [E.g. "Whether to offer a product or service, or on what
terms."]

**How automation is involved:** [E.g. "We use [tool name] to assess eligibility
based on the information you provide. The process produces a recommendation, not
a final decision."]

**Personal information used:** [E.g. "Contact details, usage history, financial
indicators provided at application."]

**Human involvement:** [E.g. "A staff member reviews the recommendation before
any offer or decline is communicated."]

**Outcome:** [E.g. "You may request an explanation of any outcome and ask for
human reconsideration."]

---

### [Decision area 3 - add or remove as needed]

**What we decide:**

**How automation is involved:**

**Personal information used:**

**Human involvement:**

**Outcome:**

---

## Where we do not use automated decision-making

[Optional but useful: state the contexts where you do not use automated
decision-making, to reduce ambiguity for individuals. E.g. "All complaints,
appeals and enforcement-related decisions are made by staff without automated
assistance."]

---

## Your rights

If a decision significantly affects you and an automated process was involved,
you may:

- Request information about how the decision was made
- Ask for human review of the decision
- Correct personal information we hold that was used in the process

To make a request, contact [privacy contact name or role] at [email address].

---

## Review of this disclosure

We review our automated decision-making processes and update this disclosure when
processes change. This section was last reviewed on [date].

---

## How to use this template

1. Read the OAIC guidance on the ADM transparency obligations at oaic.gov.au
   before adapting this template.
2. Map every automated process in your organisation that uses personal information
   to make or significantly assist decisions affecting individuals.
3. Complete a section above for each process. Be specific: vague disclosures do
   not meet the obligation and do not help individuals understand their situation.
4. Embed the completed sections in your privacy policy (or reference them from it).
5. Have the completed disclosure reviewed by a qualified privacy professional
   before 10 December 2026.
6. Update the disclosure whenever your automated processes change.

---

## References

- Privacy and Other Legislation Amendment Act 2024 (Cth)
- Office of the Australian Information Commissioner (OAIC): oaic.gov.au
- Attorney-General's Department: ag.gov.au

---

*This template is provided as general information only. It is not legal advice and
does not constitute a legal opinion on your obligations. VibeZero Pty Ltd is not a
law firm and does not provide legal services. Consult a qualified privacy lawyer
for advice specific to your organisation.*