From 10 December 2026, businesses covered by the Privacy Act must explain automated decisions in their privacy policy. Here's how to check if it applies to you, and what to do before then.