OAIC, generative AI training guidance, Example 3: a bank giving customer queries to a developer (Office of the Australian Information Commissioner, Guidance on privacy and developing and training generative AI models, Example 3)
The closest worked example to a holder licensing support tickets: ask first whether the data can be de-identified, and if not, whether APP 6 permits the disclosure to the third-party developer.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“The bank should first consider whether the fine-tuning dataset needs to include the personal information or if the customer queries can be de-identified. If the customer queries cannot be de-identified, the bank will need to consider whether APP 6 permits the customer queries to be disclosed to the third party developer.”
Where it was read
Also read from the same source
- OAIC, Guidance on privacy and developing and training generative AI models (October 2024): AI training as a secondary purpose (Office of the Australian Information Commissioner, Guidance on privacy and developing and training generative AI models (published 21 October 2024))
- OAIC, generative AI training guidance: de-identifying personal information is itself a use for a secondary purpose (Office of the Australian Information Commissioner, Guidance on privacy and developing and training generative AI models, 'Using de-identified information')
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide