PARADOX“AI gave me a confident answer.”
Clear language, detailed reasoning and a professional tone do not prove that an AI-generated answer is accurate.
Check the source, test the claim and match the level of review to the consequence of getting it wrong.
Small business.
Real exposure.
You don't need an enterprise-sized problem to lose control of information — or act on an answer that only sounds right.
SOUND FAMILIAR?
Ordinary tasks.
Ordinary tasks.
Unexpected turns.
“Just summarise this client file.”
A useful shortcut can send personal information to a service you have never assessed.
Check what goes in, how it is used and who can retrieve it.
“The meeting bot joined automatically.”
A transcript may capture confidential details beyond the purpose of the meeting.
Decide when recording is appropriate, how people are informed and when records are deleted.
“We still have that old customer list.”
Information can outlive its purpose across inboxes, shared drives and former staff accounts.
Set retention rules and review who still has access.
Privacy follows
the information.
New Zealand's Privacy Act 2020 governs how organisations handle personal information. Using AI does not remove those obligations. The Privacy Commissioner recommends assessing privacy impacts before using AI tools.
Read NZ Privacy Commissioner guidance ↗Check what
applies to you.
Most Australian businesses with annual turnover of A$3 million or less are not covered by the federal Privacy Act, but exceptions apply, including some health service providers and businesses trading in personal information. Other obligations can also matter.
Check OAIC small business guidance ↗General information checked September 2026. Your activities and circumstances determine which obligations apply. A review is not a legal opinion.
Find a way
forward.
Take the free AI Risk Check ↗
A few questions. A practical next step.No personal details required.