Privacy policies must explain automated decisions (APPs 1.7 to 1.9)
Organisations covered by the Privacy Act must describe in their privacy policy when computer programs, including AI, make or help make decisions that could significantly affect people, using their personal information.