Privacy
A Privacy Impact Assessment for the whole activity.
Collection, use, sharing, overseas handling, security, retention, rights and incidents, assessed against Australian law.
What you get
Describe a project, system or change in your own words. Preflight confirms what it understood, asks only the questions that could change the answer, and gives you a privacy risk rating, up to three specific changes with owners, the obligations that apply in plain words, and a PIA sized to the activity, as a printable page and an editable Word document.
The whole activity
Collection and notices, purposes and later uses, marketing and messages, suppliers and overseas access, automated decisions, security and retention, access and correction requests, and incidents. Findings separate what you reported, what is supported by evidence, what is still open and what needs professional judgment.
Australian law in depth
The Australian Privacy Principles 1 to 13 and the notifiable data breaches scheme, including the 2024 amendments: civil penalty tiers, the statutory privacy tort and automated-decision disclosure from 10 December 2026. Privacy and health records law in all eight States and Territories; surveillance, listening-device and workplace surveillance law; and the related regimes a PIA should not miss: biometrics, tax file numbers, My Health Record, credit reporting, AML/CTF tranche 2, ransomware payment reporting, social media age checks, Digital ID and WA breach notification.
Reviewed by a lawyer
The method and every rule are reviewed and approved by a qualified Australian lawyer, each against its exact wording and source. Sources are re-checked every 90 days.
When the law changes
Each PIA keeps the law as at its own date. When newer rules would change what a saved PIA says, Preflight shows what would be added and lets you reassess with your answers carried over. Proposed reforms are shown for awareness and never change a result.
What it does not do
Preflight is decision support, not legal advice. It flags, but does not decide, exemptions such as the small business and employee records exemptions, and it does not cover specialised regimes such as FOI administration or secrecy provisions. Credit reporting and the substance of the Children’s Online Privacy Code (still a draft) are identified, not yet assessed. A topic being covered does not establish complete legal coverage.
Free to assess · Pay only for the PIA document · See pricing
Questions? Contact us