When organizations first embark on their journey to implement data and AI governance, a common misconception is that tools are the solution. A shiny data catalogue, an advanced metadata repository, or a state-of-the-art data quality tool often becomes the goal rather than the means.

New guides for businesses published by the Office of the Australian Information Commissioner (OAIC) seek to articulate how Australian privacy law applies to artificial intelligence (AI) and set out the regulator’s expectations.