You Cannot Disclose What You Cannot See: Data and the New ADM Disclosure Rules

From 10 December, companies and institutions covered by the Privacy Act must describe in their privacy policies the kinds of personal information and decisions involved when automated systems make or substantially assist significant decisions. The OAIC has signaled a broad reading, and human sign-off may not take a system out of scope. The harder problem is visibility: most enterprises cannot say which systems are in scope or what personal information they can reach. This session gives privacy teams a practical method to inventory systems, map the decisions they feed, test the human's role, and classify and minimize the data behind them, so every disclosure is backed by evidence.

Sponsored by RecordPoint