Privacy Policy — Automated Decision-Making Addendum

AI That Works · AI6 Guidance

AI6-T04.2

Policy Addendum — Pillar 04

Document No.	AI6-T04.2	Version	[1.0]
Document Owner	[Name / Role]	Date	[DD/MM/YYYY]
Review Date	[DD/MM/YYYY]	Status	[ Draft / In Review / Approved ]
Organisation	[Organisation Name]

Insert this addendum into your existing Privacy Policy before December 2026. Have legal counsel review the final wording against your specific AI systems and the Privacy Act 1988 amendments. Plain language is mandatory — avoid technical jargon.

Template Addendum — Insert into Existing Privacy Policy

Use of Artificial Intelligence and Automated Decision-Making

[Organisation Name] uses artificial intelligence (AI) tools and automated processes in some parts of our business. This section explains what AI we use, what decisions it helps us make, and your rights in relation to those decisions.

AI systems we currently use:

[System name] — used for [purpose, e.g. reviewing and classifying tender documents to flag potential risks]. This system recommends actions, which are always reviewed by a qualified person before any decision is made.
[System name] — used for [purpose]. [Describe how humans review outputs.]

What AI does not do: Our AI systems do not make final decisions about [employment / contracts / safety classifications] without human review and sign-off.

Your rights: If you believe an AI-assisted process has produced an outcome that affects you, you have the right to request a human review. Contact [Name / email / phone] to make a request. We will acknowledge your request within [2 business days] and provide a written response within [10 business days].

Questions: Contact our Privacy Officer at [email address] or [phone number].

This template must be customised to accurately reflect the AI systems your organisation operates. Ensure all system names, use cases, and contact details are current before publication.