Last updated:
South Australia is the most AI-forward state in Australia for education, with EdChat as a sanctioned AI tool setting a clear precedent for AI use in schools. Our platform is designed to align with the SA privacy framework and SACSF cloud security guidelines.
Regulated by the Privacy Committee of South Australia (PCSA)
Not currently mandatory — South Australia does not currently have mandatory data breach notification legislation for state government agencies. However, the SA government follows the Australian Government's best practice guidelines for breach response, and agencies are expected to notify affected individuals of significant breaches as a matter of good practice.
No standalone AI framework — South Australia does not have a formal AI governance framework for schools. However, the Department for Education has taken a proactive approach by sanctioning EdChat as an approved AI tool for school use, establishing a clear precedent that AI tools can be deployed in SA schools when appropriate safeguards are in place. The SACSF provides cloud security guidelines that apply to all SaaS platforms.
Here's the process your school follows to adopt a new platform in South Australia. We'll support you at every step.
Your school or department assesses the platform against SACSF cloud security guidelines. This evaluates data handling, hosting location, encryption, access controls, and incident response capabilities. We provide documentation to support this review.
A privacy assessment is conducted to verify alignment with the 10 IPPs under PC012. This covers collection, use, disclosure, storage, and security of student personal information. We provide pre-filled privacy documentation.
The school principal or relevant departmental authority reviews the security and privacy assessments and approves the platform for deployment. For government schools, this may involve regional or central office sign-off.
Once approved, schools deploy the platform with their wellbeing teams. Ongoing compliance is maintained through regular review aligned with SACSF update cycles and departmental guidance.
Your school or department assesses the platform against SACSF cloud security guidelines. This evaluates data handling, hosting location, encryption, access controls, and incident response capabilities. We provide documentation to support this review.
A privacy assessment is conducted to verify alignment with the 10 IPPs under PC012. This covers collection, use, disclosure, storage, and security of student personal information. We provide pre-filled privacy documentation.
The school principal or relevant departmental authority reviews the security and privacy assessments and approves the platform for deployment. For government schools, this may involve regional or central office sign-off.
Once approved, schools deploy the platform with their wellbeing teams. Ongoing compliance is maintained through regular review aligned with SACSF update cycles and departmental guidance.
A detailed look at how our platform capabilities align with South Australia's privacy and security requirements for schools.
IPP 4 — Storage and security (PC012)
Healthcare-grade encryption at rest and in transit. Role-based access controls. 14+ character password requirements. Secure Australian cloud hosting with no offshore data transfer.
IPP 2 — Use and disclosure limitations (PC012)
Data is used solely for wellbeing documentation purposes within your school. No data shared with third parties for marketing, research, or any purpose beyond service delivery.
SACSF cloud security compliance
Platform security controls align with SACSF requirements for cloud-hosted services, including data residency, encryption, access management, logging, and incident response.
Data residency in Australia
All data stored on secure Australian cloud infrastructure in Sydney. Schools using manual notes and the student support system keep all data entirely in Australia. If the optional AI Scribe is used, audio is briefly processed overseas for transcription with zero retention, then deleted — only text is stored, in Sydney.
Audio data handling
Audio recordings are deleted immediately after transcription is complete. Only text documentation is retained — raw audio is never stored permanently.
AI transparency and human oversight
All AI-generated documentation is reviewed and approved by wellbeing staff before becoming part of any record. No AI training on school data. Consistent with the precedent set by EdChat's sanctioned use in SA schools.
Audit trail for compliance
Comprehensive audit logging with 7-year retention. All data access is tracked and available for compliance reporting and incident investigation.
Staff-only platform (no student access)
Only authorised wellbeing staff access the platform. Students never interact with AI directly, significantly reducing consent requirements and aligning with SA privacy expectations.
Different school sectors in South Australia have different procurement processes. Select your sector for specific guidance.
Key body: Department for Education South Australia (DoE SA)
South Australia is the most AI-forward state for education in Australia. The Department for Education has sanctioned EdChat as an approved AI tool, setting a clear precedent that AI platforms can be deployed in SA schools when appropriate safeguards are in place. SACSF cloud security guidelines apply to all SaaS procurement.
Common questions from South Australia schools about privacy compliance and using Grounded Scribe.
We'll provide the documentation your school needs to complete the assessment process in South Australia. Request a compliance pack and we'll be in touch.