Choose a package
A defined result in weeks, not months.
Every package ends with something you can use: a register, a policy, a plan or a briefing. If it shows you need more, we recommend the right next step, and you are under no obligation to take it.
ADM Disclosure Sprint
Know which automated decisions your privacy policy must describe, with draft wording ready for your lawyer.
For: Organisations covered by the Privacy Act that use software to make or support decisions about people.
- Structured interview with the people who run your key systems
- Inventory of decisions made or substantially assisted by computer programs
- Assessment of which ones could significantly affect individuals
- Draft privacy policy wording for APP 1.7 to 1.9, for your lawyer to confirm
- Timeframe
- 2 weeks
- Fee
- Fixed fee, quoted after a free call
Book the ADM Disclosure Sprint →Privacy Policy Health Check
A marked-up policy and a short, ranked list of what to fix.
For: Organisations that have not reviewed their privacy policy and collection notices in the last two years.
- Review of your privacy policy and up to three collection notices
- Check against the Australian Privacy Principles and recent amendments
- Marked-up copy with plain-English comments
- 30-minute walkthrough call
- Timeframe
- 5 business days
- Fee
- Fixed fee, quoted after a free call
Book the Privacy Policy Health Check →03For teams using AI toolsAI Use Policy Starter
Clear rules for staff, a named owner and a register of the AI tools in use.
For: Teams already using ChatGPT, Copilot or other AI tools without agreed rules.
- 60-minute discovery session on how AI is used today
- Tailored AI acceptable use policy
- One-page staff guide
- AI tool register, pre-filled with the tools we find
- Timeframe
- 2 weeks
- Fee
- Fixed fee, quoted after a free call
Book the AI Use Policy Starter →04Be ready before it happensBreach Readiness Pack
A response plan your team has practised, aligned to the Notifiable Data Breaches scheme.
For: Organisations holding sensitive or large volumes of personal information without a tested breach plan.
- Data breach response plan with roles and decision points
- Assessment and notification templates (individuals and OAIC)
- Contact sheet for internal and external responders
- 60-minute tabletop exercise with your response team
- Timeframe
- 3 weeks
- Fee
- Fixed fee, quoted after a free call
Book the Breach Readiness Pack →Board & Executive Briefing
Leaders who know what is law, what is coming, and what to ask management.
For: Boards and executive teams who need to understand their privacy and AI obligations and the questions to ask.
- 60-minute briefing, in person or online
- Current-state summary tailored to your sector
- Ten questions directors should ask management
- Slide pack and one-page summary to keep
- Timeframe
- Booked within 2 weeks
- Fee
- Fixed fee, quoted after a free call
Book the Board & Executive Briefing →06Privacy, data and AI in oneGovernance Health Check
A short report with your top ten priorities across all three areas.
For: Organisations that want one view of privacy, data and AI governance before committing to a larger review.
- Half-day facilitated workshop with your key people
- Light-touch review of your main policies and registers
- Report with a maturity snapshot and top ten priorities
- Recommendation of the right next engagement, if any
- Timeframe
- 2 weeks
- Fee
- Fixed fee, quoted after a free call
Book the Governance Health Check →