When AI Writes the Privacy Act Request

Artificial Intelligence is rapidly changing the way organisations create, store, analyse, and use information. While much of the discussion has focused on productivity, automation, and innovation, another trend is beginning to emerge behind the scenes, a noticeable increase in Privacy Act requests for copies of personal information.

Part of this increase appears to be driven by AI itself. People no longer need to understand the intricacies of the Privacy Act or spend time carefully drafting requests. With a simple prompt, AI can generate a comprehensive Privacy Act request in seconds. As a result, organisations are not only seeing more requests, but requests that are broader, more detailed, and more sophisticated than they may have encountered in the past.

Requests that might once have been limited to customer records or correspondence are now extending into AI-generated outputs, automated decision-making processes, chatbot interactions, metadata, and information that has been analysed, summarised, or transformed by AI systems. It is becoming increasingly common for requesters to seek "all information held" across a wide range of systems and channels.

This shift is having a significant impact on the way organisations need to manage privacy requests. Many requests are no longer simple exercises involving a search through a handful of systems. Instead, they now often require organisations to consider information spread across multiple platforms, cloud environments, collaboration tools, archives, and AI-enabled applications.

The result is that privacy requests are becoming larger in scope and considerably more complex to manage. Privacy requests now regularly involve multiple teams collaborating on the same request where information is needed from multiple business units. This then needs to be reviewed for redactions, assessed redaction grounds, and coordinated through a series of approvals before a response can be released.

For organisations still relying on email chains, spreadsheets, and manual tracking, the administrative burden can quickly become significant. It becomes harder to maintain visibility of deadlines, understand where a request is sitting, identify bottlenecks, and demonstrate a clear audit trail of decisions and actions taken.

As the volume of requests grows, workflow tools also help organisations scale their response capability without proportionally increasing administrative effort. A well-designed workflow provides structure to what can otherwise become a fragmented and time-consuming process. Requests can be tracked from receipt through to completion, responsibilities can be clearly assigned, deadlines monitored, and supporting information captured in a single location.

Using tools allows teams to gain visibility across active requests, managers can identify bottlenecks earlier, and organisations can maintain consistency even as requests become more complex.

The introduction of AI is creating enormous opportunities for organisations, but it is also raising expectations around transparency and access to information. At the same time, AI is lowering the barriers for individuals to exercise their privacy rights.