Privacy Act 1988 Copilot
The Australian Privacy Principles and the NDB scheme, in one workspace.
What the Privacy Act 1988 Copilot Can Do
Walk the 13 Australian Privacy Principles (APP 1 to APP 13) as titled in Schedule 1
Draft APP 1 privacy policies and APP 5 collection notices in your own words
Map APP 8 cross-border disclosure questions without treating EU hosting as a substitute for the APP 8 test
Prepare Notifiable Data Breaches scheme records under Part IIIC
Cross-map the Privacy Act to Essential Eight and ISO 27001 so one ISMS produces the cyber and the privacy pack
Track the 2024 amendment themes (statutory tort, children's online privacy code, OAIC powers) as titled facts, not as legal advice
About Privacy Act 1988 Copilot
Privacy Act 1988 Copilot helps Australian organisations work through the 13 Australian Privacy Principles and the Notifiable Data Breaches scheme in Part IIIC. It is a documentation assistant for APP notices, collection, use and disclosure, APP 8 cross-border disclosure, access and correction, and eligible-data-breach records. It is not legal advice and it is not the OAIC.
Cross-framework mappings
Working across Privacy Act 1988 and another standard? ISMS Mappings is a free public directory of control maps (ISO 27001, SOC 2, NIST, GDPR, and more). A Better ISMS tool, separate from the chat assistant.
Browse free mappingsFrequently Asked Questions
What is the Privacy Act 1988 Copilot?
It is the specialist assistant for Australia's federal Privacy Act 1988 (Cth) and the Australian Privacy Principles. It drafts APP documentation and NDB-scheme records. It does not replace Australian privacy counsel or an OAIC determination.
Does the $3 million turnover threshold mean we are out?
Not automatically. The Act applies to Australian Government agencies and to private-sector organisations over the turnover threshold, and also to specific lower-threshold entities such as private health service providers and entities that trade in personal information. Confirm your class against the statute. The Copilot helps you walk that question. It does not decide it.
Is this the same as Essential Eight?
No. Essential Eight is eight technical mitigation strategies. The Privacy Act is the federal privacy statute. Most Australian SaaS programmes need both. See /frameworks/essential-eight and /regions/australia.
Ready to do compliance work faster?
Built for speed, accuracy, and audit-ready output.