Data stays inside the Privacy Act, not around it.
Data Governed is the guardrail behind the most common AI incident we see: customer or staff data flowing somewhere it should not. It means data feeding an AI system is mapped, permissioned and checked against the Privacy Act before deployment, not after a complaint.
Photo: 123net, CC BY-SA 3.0, via Wikimedia Commons
What data governance actually looks like
Data is mapped
What data flows into a system, where it came from and who is allowed to see it is documented before anything goes live.
Checked against the Privacy Act
Handling is assessed against the Privacy Act 1988 and the Australian Privacy Principles as a standard step, not a special request.
Minimum access by design
Agents see the minimum data a task actually needs, and permissions follow the user, not the system.
Third-party tools included
Commercial AI tools like ChatGPT or Copilot are checked for where your data actually goes when staff use them.
Using a commercial AI tool does not remove this obligation
The OAIC’s own guidance on commercially available AI products makes the point directly: using someone else’s AI tool still means your data governance responsibilities apply. This guardrail is about your data, wherever it is processed.
Grounded in
- Australia’s Voluntary AI Safety Standard, guardrail 3 (data governance)
- The Privacy Act 1988, the Australian Privacy Principles and OAIC guidance on AI (October 2024)
The rest of the framework
All ten guardrails run through every engagement. Here are the other nine.
Frequently asked questions
We just use ChatGPT or Copilot, does this still apply?
Yes. Using a commercial AI tool still means your data governance obligations apply, which is exactly what the OAIC’s own guidance on commercial AI products says.
What about data we send overseas?
We check it as part of the audit. Cross-border data flows are one of the more common gaps we find in an otherwise well-run business.
Find out where your governance actually stands. Governance is one of six things the free audit scores.
Get the free audit