Last updated:
Western Australia is introducing comprehensive new privacy legislation in 2026. Grounded Scribe is already designed to meet the requirements of the Privacy and Responsible Information Sharing Act 2024 from day one — Australian-hosted, encrypted, with full audit logging and automatic audio deletion.
PRIS Act Commences 1 July 2026 — We're Ready — 1 July 2026
The Privacy and Responsible Information Sharing Act 2024 introduces comprehensive privacy obligations for Western Australian government agencies including schools. Grounded Scribe already meets these requirements — Australian-hosted, encrypted, with full audit logging and automatic audio deletion.
Regulated by the Office of the Information Commissioner (new) (OIC)
Mandatory — The PRIS Act 2024 introduces mandatory data breach notification for Western Australian government agencies. Schools will be required to notify the OIC and affected individuals of eligible data breaches from 1 July 2026.
No standalone AI framework — Western Australia does not yet have a standalone AI governance framework for schools. However, the Department of Education has been piloting AI tools in 8 schools, signalling openness to responsible AI adoption in education settings.
Here's the process your school follows to adopt a new platform in Western Australia. We'll support you at every step.
Your school reviews the vendor against the requirements of the Privacy and Responsible Information Sharing Act 2024. This includes data handling practices, security controls, and information privacy principles. Grounded Scribe is designed to meet these requirements.
Verify whether the platform is listed on the Department of Education's Third Party Services Catalogue. This catalogue helps schools identify pre-assessed technology products suitable for school use.
Your school completes a risk assessment covering data residency, security controls, AI usage, and student privacy. We provide pre-filled documentation to support this process.
After approval, wellbeing staff are onboarded to the platform. Ongoing compliance is maintained through regular reviews aligned with PRIS Act requirements.
Your school reviews the vendor against the requirements of the Privacy and Responsible Information Sharing Act 2024. This includes data handling practices, security controls, and information privacy principles. Grounded Scribe is designed to meet these requirements.
Verify whether the platform is listed on the Department of Education's Third Party Services Catalogue. This catalogue helps schools identify pre-assessed technology products suitable for school use.
Your school completes a risk assessment covering data residency, security controls, AI usage, and student privacy. We provide pre-filled documentation to support this process.
After approval, wellbeing staff are onboarded to the platform. Ongoing compliance is maintained through regular reviews aligned with PRIS Act requirements.
A detailed look at how our platform capabilities align with Western Australia's privacy and security requirements for schools.
PRIS Act — Data security obligations
Healthcare-grade encryption at rest and in transit. Role-based access controls. 14+ character password requirements. Comprehensive audit logging.
PRIS Act — Use and disclosure limitations
Data is used solely for documentation purposes within your school. No data shared with third parties for marketing or other purposes.
Data residency in Australia
All data stored on secure Australian cloud infrastructure in Sydney. Schools using manual notes and the student support system keep all data entirely in Australia. If the optional AI Scribe is used, audio is briefly processed overseas for transcription with zero retention, then deleted — only text is stored, in Sydney.
Audio data handling
Audio recordings are deleted immediately after transcription is complete. Only text documentation is retained — raw audio is never stored permanently.
Audit trail and accountability
Comprehensive audit logging with 7-year retention. All data access is tracked and available for compliance reporting and incident investigation.
AI transparency and human oversight
All AI-generated documentation is reviewed and approved by wellbeing staff before becoming part of any record. No AI training on school data.
Staff-only platform (no student access)
Only authorised wellbeing staff access the platform. Students never interact with AI directly, significantly reducing consent and risk requirements.
Mandatory data breach notification
Incident response plan and breach notification procedures in place. Schools are supported with prompt notification and full transparency in the event of any security incident.
Different school sectors in Western Australia have different procurement processes. Select your sector for specific guidance.
Key body: Department of Education Western Australia (DoE WA)
From 1 July 2026, government schools must comply with the PRIS Act. Grounded Scribe already meets these requirements, and the Third Party Services Catalogue provides a streamlined pathway for approved technology vendors.
Common questions from Western Australia schools about privacy compliance and using Grounded Scribe.
We'll provide the documentation your school needs to complete the assessment process in Western Australia. Request a compliance pack and we'll be in touch.