Privacy readiness mark Privacy Readiness Programme

The Privacy Act is about to cover your business. Are you ready?

From July 2026, thousands of small Australian businesses will fall under Privacy Act obligations for the first time. Most won't know until it's too late.

ZAK's Privacy Readiness Programme is free until the law changes. It tells you exactly where you stand, what you need to fix, and gives you the paperwork to prove you did it.

No legal jargon. No consultants. No guesswork.

No credit card. No catch. Free for Australian SMEs until the Act transitions.

Free until the law changes
1 / 6

Readiness areas started with source-linked evidence still pending.

Coverage check
Inventory starter
APP gap review
Vendor posture
Evidence pack
Questions answered 1
Review items 0
Evidence tasks 5
Draft artifacts 0
No payment method
No public reference without consent
Human review required
The Programme

A calm path through the work SMEs usually avoid.

Privacy work gets messy when coverage, data handling, vendors, AI tools, retention, breach response, and evidence live in separate documents. The programme turns that into a sequence of reviewable work with owners, source context, and exportable records.

Step 1

Coverage

Answer the threshold questions that decide whether the organisation is covered now, preparing for reform, partly exposed, or needs specialist review.

Step 2

Inventory

Map the personal information handled by customers, staff, vendors, software, and day-to-day business processes.

Step 3

Priorities

Turn gaps into owner-ready tasks across notices, consent, retention, security, vendor review, APP 8, AI use, and breach readiness.

Step 4

Evidence

Export source-linked evidence packs for review without presenting the output as a compliance opinion.

What Changes

Unknowns become managed review items.

The system does not guess whether an organisation is covered, compliant, or exempt. It records what is known, flags what needs human review, and keeps the evidence trail visible before teams rely on the output.

Applicability intake

Coverage questions capture current status, reform readiness, exemptions, high-risk sectors, and unknowns that need review.

Personal information map

Business activities are translated into data categories, purposes, systems, vendors, and evidence expectations.

Vendor and AI review

Software and AI use are checked for allowed use, redaction needs, APP 8 posture, and human approval boundaries.

Breach triage

Incidents can be framed as notification-ready evidence trails without claiming the system decides legal notification obligations.

Source posture

APP and OAIC guidance references stay visible so public wording and evidence expectations can be reviewed when sources move.

Review pack

Exports show what was asked, what was answered, which evidence exists, and which gaps still need a human decision.

Built For Reform Readiness

Useful now, careful about what it claims.

The Privacy Act readiness programme is designed for organisations that need to start organising privacy work before every legal question is settled. It gives teams a practical operating surface while preserving the difference between preparation, review, and legal advice.

Boundary Conditions
No legal advice or compliance guarantee.
No regulator-backed status claim.
Unknown answers become review tasks, not assumptions.
Exportable evidence remains source-linked and human-reviewable.
Why ZAK

Preparation is only useful when the evidence survives review.

ZAK treats the programme as governed work: questions, source references, approvals, evidence tasks, exports, and public wording boundaries can be tracked as state rather than rebuilt later from memory.

Receipts

Show what was asked, answered, exported, reviewed, or still blocked.

Source posture

Keep APP, OAIC guidance, reform, and claim-wording dependencies visible.

Human review

Escalate legal, sector, AI, vendor, and breach unknowns instead of flattening them into false certainty.

Start with the coverage questions.

Move from scattered privacy concern to a structured readiness record, with unknowns, evidence gaps, and review boundaries visible from the start.

Check if your business is covered — it's free