Open for consultation: Guide to undertaking Privacy Impact Assessments on AI systems and projects

The Information and Privacy Commission (IPC) has released its new Guide to undertaking Privacy Impact Assessments on AI systems and projects for consultation and feedback.

The Guide has been developed to support agencies in understanding, assessing and mitigating privacy risks in relation to the use of AI systems and projects when undertaking Privacy Impact Assessments (PIAs). It also supports agencies in undertaking privacy related assessments under the NSW AI Assessment Framework (AIAF) and the National framework for the assurance of artificial intelligence in government.

The new Guide builds on and is complementary to the Guide to Privacy Impact Assessments in NSW, to provide more specific guidance on AI-related privacy risks.

The IPC values the input of privacy practitioners in NSW and is seeking feedback on this updated guidance. In particular, feedback would be appreciated for the following focus questions:

1. Would this guidance assist you in navigating AI projects from a privacy perspective?
2. Are there areas in the guidance that you believe are missing?
3. Is the guidance relevant, useful, clear, and practical?

The IPC recognises that your feedback is critical to ensuring that the guidance is comprehensive and effective in supporting the protection of privacy when using AI across the NSW public sector.

Please submit any feedback in writing to ipcinfo@ipc.nsw.gov.au by COB Monday, 9 September 2024.