AI Transparency and Automated Decisions: What Australian SMEs Should Prepare For Before December 2026

Artificial intelligence is moving from experimentation into customer service, recruitment, fraud checks, marketing, operations and other decisions. When software influences an outcome, a business needs to know what information was used, why it was used and how a person can question the result.

Why December 2026 matters

OAIC guidance says new APP 1 obligations for certain automated decisions commence on 10 December 2026. Smaller businesses should not wait for the deadline. A clear inventory of automated tools, data flows and decision points makes later compliance and customer conversations much easier.

Map decisions and information

List tools that score, rank, recommend, approve, reject or prioritise people. Record the purpose, data sources, vendor, retention period, access permissions and the person responsible for each process. Include spreadsheets, CRM rules and supplier platforms, not only branded AI products.

Make explanations practical

Customers and staff should be able to understand when automation has materially influenced an outcome. Prepare a plain-language explanation, a contact point, a correction process and a record of the relevant inputs and approval steps. Avoid claiming that a system is objective when its data or rules have not been tested.

Keep humans accountable

Use human review for disputed, sensitive or high-impact outcomes. Define when a worker must pause an automated result, what evidence they can check and who can override it. Keep an audit trail that records the decision, review and final action without collecting unnecessary personal information.

Test vendors and controls

Ask providers how data is stored, used for model improvement, deleted, accessed and protected. Check identity and access controls, logging, security updates, incident notification and business continuity. Run sample cases that test accuracy, bias, unexpected inputs and failure recovery before expanding a workflow.

Sources

• OAIC: APP 1 automated decision obligations
• OAIC: Australian Community Attitudes to Privacy Survey 2026, overview