Back to the database
Record STMT-W1F0972Advisory

Checklist: Privacy considerations when selecting a commercially available AI product

Guidelines State lawOceania · AUin force

This checklist provides privacy considerations for organizations selecting commercially available AI products. It outlines key issues related to accuracy, training data, security risks, operating environments, and data disclosures under the Australian Privacy Principles. The guidance helps deployers assess compliance and privacy obligations when using AI systems that handle personal information.

Summary and content fields are drawn from the document text and are pending editorial review.

Who issued it

Information CommissionerRegulator · GB
Lead issuer
Office of the Australian Information CommissionerRegulator · AU
Lead issuer
Legal forceAdvisory
Under whose authorityState law
Judged fromfull text

Who it governs

CompaniesRegulatorsPublic sector bodiesAI deployers and users

This guidance is targeted at organisations that are deploying AI systems that handle personal information.

Sectors
Cross-sector

What the document contains

What's covered

The document covers privacy and security considerations for selecting commercial AI products, focusing on Australian Privacy Principles regarding accuracy, security, and personal information disclosure.

What's missing

Not stated.

Key takeaways
  • Organisations must consider whether commercially available AI products are appropriate and reliable for their intended uses.
  • Deployers need to understand training data sources to ensure output accuracy and compliance with Australian Privacy Principles.
  • Entities must evaluate security measures and potential past security incidents associated with the AI system.
  • Organizations should check whether system terms of use allow developers access to personal information inputted or generated.
IssuedNot recorded
Length550 words · 2 pages
FormatNot recorded
Scopenational

How it scores

Pending review

Each score is backed by a quote verified against the document text. Editorial review has not yet confirmed them.

Accountability

3/5

Clear responsibility for AI outcomes

To assist with meeting your organisation’s privacy obligations, particularly regarding accuracy under APP 10, consider

Considerations

screening score · 2026-10-23

Fairness

0/5

Non-discrimination and equitable treatment

screening score · 2026-10-23

Human Dignity

0/5

Respect for the inherent worth of persons

screening score · 2026-10-23

Human Oversight

0/5

Humans remain in control of consequential decisions

screening score · 2026-10-23

Privacy

5/5

Protection of personal data and private life

Checklist Privacy considerations when selecting a commercially available AI product

Title

screening score · 2026-10-23

Transparency

3/5

Openness about how AI systems work and are used

Will your organisation be able to understand and explain these outputs and how the system works?

Privacy issue

screening score · 2026-10-23

Enforcement

0/5

Consequences and compliance mechanisms with real force

screening score · 2026-10-23

Impact Assessment

2/5

Required assessment of an AI system's risks/impacts before or during use

Is the intended use of the AI system likely to be a high privacy risk activity, such as making decisions that may have a legal or similarly significant effect on an individual’s rights?

Privacy issue

screening score · 2026-10-23

Topics

privacy procurement data_protection compliance risk_assessment