Last updated:
Queensland has the most advanced AI governance framework for government agencies in Australia. Our platform is designed to align with the Information Privacy Act, the FAIRA risk assessment framework, and ISO 38507 requirements for AI governance.
Regulated by the Office of the Information Commissioner Queensland (OIC)
Mandatory — Queensland government agencies must notify the OIC of data breaches. The Information Privacy Act requires agencies to take reasonable steps to protect personal information, and breach notification is part of ongoing compliance obligations.
FAIRA (Fair, Appropriate, Informed, Responsible AI Assessment) — Queensland leads Australia in AI governance for government. The FAIRA risk assessment is mandatory for all AI tools used by Queensland government agencies, including schools. It evaluates fairness, appropriateness, informed consent, responsible use, and accountability. Queensland also references ISO 38507 (Governance of IT — Governance implications of the use of AI) as a supporting standard.
Here's the process your school follows to adopt a new platform in Queensland. We'll support you at every step.
Your school or department completes a FAIRA assessment for the AI tool. This evaluates fairness, appropriateness, informed consent, responsible use, and accountability. We provide documentation and responses to support this assessment.
The platform is assessed against ISO 38507 governance principles for AI. This covers human oversight, transparency, explainability, and ongoing monitoring requirements for AI systems in the education context.
A security assessment evaluates the platform against Queensland government security standards. For platforms handling sensitive student wellbeing data, an IRAP (Information Security Registered Assessors Program) assessment may be required at the departmental level.
Once FAIRA, ISO 38507, and security assessments are complete, schools deploy the platform with their wellbeing teams. Ongoing compliance is maintained through regular review cycles aligned with Queensland government requirements.
Your school or department completes a FAIRA assessment for the AI tool. This evaluates fairness, appropriateness, informed consent, responsible use, and accountability. We provide documentation and responses to support this assessment.
The platform is assessed against ISO 38507 governance principles for AI. This covers human oversight, transparency, explainability, and ongoing monitoring requirements for AI systems in the education context.
A security assessment evaluates the platform against Queensland government security standards. For platforms handling sensitive student wellbeing data, an IRAP (Information Security Registered Assessors Program) assessment may be required at the departmental level.
Once FAIRA, ISO 38507, and security assessments are complete, schools deploy the platform with their wellbeing teams. Ongoing compliance is maintained through regular review cycles aligned with Queensland government requirements.
A detailed look at how our platform capabilities align with Queensland's privacy and security requirements for schools.
QPP 4 — Storage and security of personal information
Healthcare-grade encryption at rest and in transit. Role-based access controls. 14+ character password requirements. Secure Australian cloud hosting with no offshore data transfer.
FAIRA — Fairness and appropriateness
AI is used solely for documentation assistance — it does not make decisions about students. All AI output is reviewed and approved by wellbeing staff. No automated decision-making about student welfare.
FAIRA — Informed and transparent use
Clear disclosure that AI assists with case note documentation. Schools can inform students and families that documentation tools are used. No AI training on school data.
FAIRA — Responsible and accountable
Comprehensive audit logging tracks all platform activity. Wellbeing staff maintain full accountability for documentation content. 7-year audit trail retention for compliance.
ISO 38507 — Human oversight of AI
All AI-generated documentation requires human review and approval before becoming part of any record. Wellbeing staff can edit, reject, or regenerate any AI output.
Data residency in Australia
All data stored on secure Australian cloud infrastructure in Sydney. Schools using manual notes and the student support system keep all data entirely in Australia. If the optional AI Scribe is used, audio is briefly processed overseas for transcription with zero retention, then deleted — only text is stored, in Sydney.
Audio data handling
Audio recordings are deleted immediately after transcription is complete. Only text documentation is retained — raw audio is never stored permanently.
IRAP-ready security posture
Platform security controls are designed to align with Australian government security standards. If your department requires a formal IRAP assessment, our architecture supports the evaluation process.
Different school sectors in Queensland have different procurement processes. Select your sector for specific guidance.
Key body: Department of Education Queensland (DoE QLD)
Queensland has the most advanced AI governance framework for government agencies in Australia. FAIRA risk assessment is mandatory for all AI tools used in government schools, and ISO 38507 is referenced as the supporting governance standard.
Common questions from Queensland schools about privacy compliance and using Grounded Scribe.
We'll provide the documentation your school needs to complete the assessment process in Queensland. Request a compliance pack and we'll be in touch.