/**
 * AU Privacy Act 1988 — Australian Privacy Principles (APPs 1-13)
 *
 * Primary statutes:
 *   - Privacy Act 1988 (Cth); Australian Privacy Principles (Schedule 1)
 *   - Privacy Legislation Amendment (Enhancing Online Privacy and Other Measures)
 *     Act 2021
 *   - Privacy and Other Legislation Amendment Act 2024 (royal assent October 2024,
 *     phased commencement 2026-2027)
 *
 * Entities covered: Australian Government agencies; private sector organisations
 * with annual turnover exceeding AUD 3 million; health service providers
 * regardless of size; operators of certain websites and online services with an
 * Australian link; credit reporting bodies; tax file number recipients. 2024
 * amendments expand coverage to small businesses that trade in personal
 * information.
 *
 * Key AI obligations:
 *   - APP 3: Collect only what is reasonably necessary (purpose limitation).
 *   - APP 6: Secondary uses (AI analytics, training) require separate basis.
 *   - APP 8: Overseas transfers require reasonable steps for comparable protection;
 *     AU entity liable for offshore recipient breaches.
 *   - APP 9: Government identifiers (TFN, Medicare) not adopted as internal IDs.
 *   - APP 11: Security measures; destroy or de-identify when no longer needed.
 *   - APP 12: Individual access within 30 days.
 *   - NDB Scheme (Part IIIC): 30-day internal assessment from awareness;
 *     OAIC + affected individuals notified on eligible breach.
 *   - 2024 amendments: AUD 50M penalty for serious/repeated interference;
 *     statutory tort for serious invasions of privacy.
 *
 * Cross-pack interactions:
 *   - au-privacy-act + au-cdr: CDR Privacy Safeguards are lex specialis for
 *     CDR data; APPs fill gaps. Dual OAIC + ACCC oversight.
 *   - au-privacy-act + au-cps234: APRA entities must meet CPS 234 for APP 11.
 *     CPS 234 is floor; APPs remain independently applicable.
 *   - au-privacy-act + gdpr: Both apply where AU organisation targets EU data
 *     subjects. GDPR Art. 6 lawful basis does not substitute for APP compliance;
 *     dual obligations; stricter governs per category.
 *   - au-privacy-act + hipaa: Where AU SaMD/clinical AI processes US patient data
 *     on AU infrastructure, HIPAA covers US-side; Privacy Act APPs cover AU-side.
 *
 * Authority: Office of the Australian Information Commissioner (OAIC)
 * Sovereignty: Australian Federal
 *
 * @connexum/ai-governance
 */
import { CompliancePack } from './index';
import { CategoryClassifiers } from '../classification/pack-driven-classifier';
export declare const AU_PRIVACY_ACT_CATEGORY_CLASSIFIERS: CategoryClassifiers;
export declare const AU_PRIVACY_ACT_PACK: CompliancePack & {
    categoryClassifiers: CategoryClassifiers;
    subjectKeyedCategories: string[];
};
//# sourceMappingURL=au-privacy-act.d.ts.map