For years, most small legal practices sat outside the Privacy Act under the small business exemption. For many firms, that quietly ended on 1 July 2026. The change arrived through anti-money-laundering reform, not privacy reform, which is why so few firms noticed. This is general information, not legal advice.
The Privacy Act's small business exemption has always had carve-outs, and one of them is for reporting entities under the anti-money-laundering laws. On 1 July 2026, the AML/CTF tranche 2 reforms commenced, and legal practitioners, conveyancers and accountants providing designated services became reporting entities. The practical effect: firms that were exempt from the Privacy Act because they sit under the $3 million turnover threshold are exempt no longer.
Whether your firm is captured depends on the services it provides, and that is a question for your own AML advice. But the designated services list reaches most of what small firms do: conveyancing, trust account work, company and trust formation, and more. A large share of Australian small legal and accounting practices crossed into Privacy Act coverage this winter, and the change arrived under an AML headline, so plenty of firms are still catching up.
A firm covered by the Privacy Act is an APP entity, and the Australian Privacy Principles come with it:
None of this is exotic. Larger firms have lived with it for decades. What is new is that a two-partner suburban practice now carries the same obligations, with the same regulator able to receive complaints about it.
Here is where the change bites hardest. Every cloud AI tool your firm uses involves sending information to a third party's computers, usually overseas. Before 1 July, for an exempt firm, that was a professional conduct question about confidentiality. Now it is also a regulated privacy question: a disclosure of personal information to a third party, potentially across a border, by an APP entity.
The professional bodies saw this coming. Queensland Law Society's guidance on AI in legal practice tells practitioners to establish where an AI tool processes data, who can access it, and whether the provider guarantees confidentiality, and to be very hesitant where the answers are unclear. The AI selection checklist released with interstate law societies in early 2026 goes further and asks firms to run a privacy impact assessment before deploying an AI system. For a firm newly inside the Privacy Act, those are no longer best-practice suggestions. They are the working method for staying on the right side of obligations that now apply.
We compared the two architectures in detail in cloud AI versus self-hosted AI, but the short version for a newly covered firm: with a cloud tool, the hardest privacy questions are about someone else's infrastructure, and you are relying on their answers.
A self-hosted system runs on hardware the firm owns, inside the firm's own walls. Client files and personal information never leave the building, so the privacy impact assessment's hardest questions answer themselves: no disclosure to a third party occurs, no border is crossed, no vendor retains anything, and there is no overseas recipient to analyse under APP 8. The reasonable steps that APP 11 asks for become concrete, inspectable properties: a machine with no route to the internet, access restricted by role, and a tamper-evident log of every document ingested, every answer given and every human approval. What that architecture looks like as a working system, precedent search, document processing and matter admin, is on our AI for law firms page.
That last part matters more than it first appears. If a client, a regulator or your insurer ever asks how personal information has been handled, the answer is not a reconstruction from memory. It is a verifiable record, produced on the spot, from a machine you own.
Honesty about scope: coming under the Privacy Act touches your whole practice, not just AI. Your existing practice management software, your email, your file storage and your staff's habits all sit inside the same obligations, and a self-hosted AI system fixes none of that for you. It fixes one thing, completely: it takes the newest and least understood category of tool, AI, out of the third-party disclosure problem entirely. For the rest, talk to your AML and privacy advisers. The firms that treat this winter's change as a checklist, not a crisis, will be fine.
The first conversation is thirty minutes, what you're protecting, and whether Wild Systems is the right answer.
Book a 30-minute diagnosis or email info@wildsystems.com.au