Everything written on this page is independent. I don’t sell software and I take no fees from anyone who does.…
Do you need a fractional Chief AI Officer?
Probably not. But the term is worth understanding, because it tells you something useful about what you actually need. What…
Why your IT provider isn’t responsible for your Privacy Act ADM updates
A note before you read: the scenarios below are illustrative, not legal advice. Somewhere in your firm, someone has assumed…
Your regulator already wrote about AI. Did anyone tell you?
Over the past few months, four different Australian regulators have written to the sectors they oversee about AI. Different regulators,…
We automatically score leads / screen CVs / assess claims. Is that covered by the new rules?
Rule-based scoring tools, CV screening software, and automated claims assessment can all be in scope under the new Privacy Act obligations. Here’s how to tell whether yours are.
Do I need to tell customers when AI is involved in a decision about them?
New Privacy Act obligations mean Australian businesses must disclose where computer programs make significant decisions using personal data. Here’s what’s in scope and what your privacy policy needs to say.
A vendor is pitching us an AI tool next week. What should I ask them?
AI vendor pitches are built to impress, not inform. Here are the questions that cut through — on data, liability, and what happens when the tool gets it wrong.
One of our staff is using ChatGPT with client data. Should I be worried?
When staff use public AI tools with client data, the problem isn’t the technology. It’s the absence of a policy — and what that means for your Privacy Act obligations.
Does my business need to do anything about AI before December this year?
From 10 December 2026, Australian businesses must disclose where automated tools are involved in decisions that affect people. Here’s what’s in scope and what you need to do.