Privacy Compliance Guide
School Privacy Compliance Across Australia
Every state has different requirements for adopting new platforms. We've mapped them so your school doesn't have to.
States & Territories
Each jurisdiction has its own privacy legislation and vendor assessment process. Select yours for detailed guidance, or read using AI with student information, state by state.
Victoria
Privacy and Data Protection Act 2014 School-led risk review supported with privacy, security, and PIA documentation. Government schools also follow the Department's generative AI policy. View details → NSW Evidence availableNew South Wales
PPIP Act 1998 Privacy, security and data-handling evidence for marketplace, Assessed IT and privacy reviews. Government schools also follow the Department's generative AI guidelines. View details → QLD Evidence availableQueensland
Information Privacy Act 2009 Privacy, security and data-handling evidence for information security assessments and consent for sensitive information. State schools also follow Queensland Government rules on AI tools. View details → SA Evidence availableSouth Australia
Information Privacy Principles (Admin) Privacy, security and data-handling evidence for the Department's SACSF cloud and supplier risk assessments. Government schools also follow the Department's AI guidance. View details → WA Evidence availableWestern Australia
PRIS Act 2024 Privacy rules in effect from 1 July 2026; the breach notification scheme starts on 1 January 2027. Privacy, security and data-handling evidence for your PRIS Act review. View details → TAS Evidence availableTasmania
Personal Information Protection Act 2004 Student records stored and processed in Australia. Evidence for your PIPA and ITS reviews. DECYP's AI procedure bars identifiable information in generative AI tools. View details → NT Evidence availableNorthern Territory
Information Act 2002 Privacy, security and data-handling evidence for the Department's assessment. Its generative AI policy bars personal and sensitive information in AI tools. View details → ACT Evidence availableAustralian Capital Territory
Information Privacy Act 2014 Privacy, security and data-handling evidence for the Directorate's review. Its AI position bars student personal information in generative AI. View details →School Sectors
Non-government schools follow the federal Privacy Act. Select your sector for specific procurement guidance.
Catholic Schools
1,700+ schools nationally Diocese-level procurement and AI rules. Governed by the federal Privacy Act and Australian Privacy Principles. View guidance →Independent Schools
1,200+ schools nationally Individual school decision-making with the most procurement autonomy. Includes Anglican, Jewish, Muslim, and other faith-based schools. View guidance →Built for Compliance
Why Schools Trust Descant
We give schools the privacy, security and data-handling evidence they need for their own reviews.
Records Stored in Australia
Student records are encrypted and stored in Australia (Sydney). Speech-to-text and AI drafting also run in Australia.
Staff Platform, No Student AI
Staff use the platform. Students only use secure links, for a short check-in or a questionnaire; parents and carers use secure links for consent and questionnaires, and educators sign in to add evidence. Students do not use AI.
Audio Deleted After Transcription
Recordings are deleted once transcribed. Only text documentation is retained.
Encryption In Transit and At Rest
Data is encrypted in transit and at rest.
7-Year Audit Logging
Views of student records and sensitive notes, and every change, are logged. Audit logs are kept for at least 7 years.
Human-in-the-Loop AI
Staff review, edit, and approve every AI draft before it is saved. The AI makes no decisions about students.
Need Help With Your School's Vendor Assessment?
We'll provide the documentation your school needs — privacy, security and data-handling evidence for your privacy impact assessment, security specifications, and support through your procurement process.
See Descant with your school in mind
Tell us a little about your school and we'll show you how it would work for your team.
- A made-up school like yours to explore for 14 days
- We check each request by hand and reply within two school days
- Made-up students only: no real student information needed
Prefer email? Write to [email protected].
(03) 4422 2284: answered any time by Descant's AI receptionist, which keeps a written record of the call. Please don't share student details. Our team replies within two school days.