An AI scribe’s FAQ says patient data isn’t used for training. Sounds good, but its privacy policy tells a more involved story. A reminder to read the fine print.

On 1 May 2026, the new information privacy principle 3A took effect. If your organisation uses AI tools to process personal information, this change could affect you. And it could do so in two quite different scenarios.

Information sharing MOU templates in circulation that would or could allow secondary use and disclosure if permitted by law, may now need to be reconsidered in the light of AI.

Have you thought about how, when the new IPP comes into force, it might affect one’s use of generative AI tools, when you’re asking an AI tool to supplement personal information you include in a prompt?

In this article, I discuss an example of nuanced questions that can arise when we assess various uses of AI tools against the Privacy Act’s information privacy principles.

From my time in PIA → AI rabbitholes, I share 10 of the many issues that have arisen, ranging from the application of section 11 to retaining peoples’ trust and confidence and checking applicable guidelines and codes.

If you’re proposing to include third party personal information in prompts to AI tools/LLMs, an important issue that can arise under the Privacy Act is whether section 11 applies.