---
title: "Privacy Act 1988 (Cth) — ADM transparency + APPs — KYE Protocol™ coverage"
description: "Privacy Act 1988 (Cth) — ADM transparency + APPs coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it."
url: https://kyeprotocol.com/compliance/privacy-act-1988/
lang: en
source: "KYE Protocol"
---

> Privacy Act 1988 (Cth) — ADM transparency + APPs coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.

Privacy Act 1988 (Cth) — ADM transparency + APPs

# Privacy Act 1988 (Cth) — ADM transparency + APPs — 100% of in-scope requirements covered.

4 requirements · 4 in scope (4 enforced). The 100% is weighted over the in-scope base.

**Source:** Privacy Act 1988 (Cth), Schedule 1 Australian Privacy Principles, as amended by the Privacy and Other Legislation Amendment Act 2024 introducing automated-decision-making transparency obligations (ADM provisions commence December 2026).

## By category

| Category | Reqs | Enforced | Designed | Advisory | Deferred | Coverage |
| --- | --- | --- | --- | --- | --- | --- |
| Automated decision-making transparency | 2 | 2 | 0 | 0 | 0 | **100%** |
| Security of personal information (APP 11) | 1 | 1 | 0 | 0 | 0 | **100%** |
| Open and transparent management (APP 1) | 1 | 1 | 0 | 0 | 0 | **100%** |

## Every requirement → the KYE™ artefact that enforces it

| ID | Title | Status | KYE™ enforcement |
| --- | --- | --- | --- |
| `privacy-act-1988.apa-1` | Privacy Act 1988 (as amended by the Privacy and Other Legislation Amendment Act 2024) — automated decision-making transparency: privacy policy must describe the kinds of personal information used in substantially automated decisions that could reasonably be expected to significantly affect an individual's rights or interests | enforced | **audit\_events**: `kye.evidence.decision_map.v1`, `kye.evidence.pack.v1` **engines**: `internal`, `internal` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md` |
| `privacy-act-1988.apa-2` | Automated decision-making — an individual significantly affected by an automated decision can be given a meaningful explanation reconstructable from the record | enforced | **audit\_events**: `kye.replay.proof.v1`, `kye.replay.context_seal.v1` **engines**: `internal`, `internal` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md` |
| `privacy-act-1988.app-11` | Australian Privacy Principle 11 — take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure | enforced | **audit\_events**: `kye.purpose.admissibility.v1`, `kye.evidence.tool_call.v1` **engines**: `internal`, `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md` |
| `privacy-act-1988.app-1` | Australian Privacy Principle 1 — open and transparent management of personal information, including an up-to-date and accessible privacy policy | enforced | **audit\_events**: `kye.compliance.attestation.v1`, `kye.evidence.decision_map.v1` **engines**: `internal` **constitution\_refs**: `constitution/31-DATA-GOVERNANCE-PACK.md` |

Canonical KYE™ surfaces referenced on this page: [KYE Protocol™](https://kyeprotocol.com/).