Free self-check

Where does your client data go?

A quick, private self-assessment for Australian migration agents. Answer honestly about AI tools, online tools, storage and who has access, and see where your practice stands against the OMARA Code of Conduct and the Use of AI guidance, with the exact clauses to read.

Indicative only, not legal advice or an official OMARA assessment. Nothing you answer is sent anywhere or saved. Always read the source: Code of Conduct (March 2022) ↗ and OMARA: Use of Artificial Intelligence ↗.

AI tools1 / 10
Do you paste client details (names, dates of birth, passport or document numbers, document text) into consumer AI tools like ChatGPT, Gemini or Copilot?

FAQ

Common questions

Does this mean I can't use AI in my practice?+
No. OMARA's guidance says registered migration agents may use AI while giving immigration assistance. What it requires is that you stay responsible for the result, get the client's written consent before entering their personal details into an AI tool, explain your AI use to the client in advance, and review what the AI produces. This check is built around those expectations.
Is uploading client details to ChatGPT really a breach?+
It can be. OMARA's AI guidance states that sharing a client's personal details using AI tools may breach your Duty of confidentiality (section 35 of the Code), which prevents you disclosing a client's personal information to a third person without their written consent. Consumer tools may also retain or train on what you enter. If you use AI on client matters, get written consent first and use tools that keep the data in Australia and don't train on it.
Do I really need written consent before using AI?+
Yes. OMARA's guidance is explicit that RMAs need the client's written consent before they enter the client's personal details into an AI platform or system, and that you should explain your AI use in advance to comply with privacy principles. A short clause in your engagement paperwork usually covers it.
Are free online PDF tools (merge, compress, convert) a problem?+
They can be. Uploading a client's documents to a free online tool sends their personal information to a third party, which engages the Duty of confidentiality (section 35) and your duty to keep client documents securely (section 53). Prefer tools that process files in your browser or on your machine so nothing leaves your control.
What about offshore staff, VAs or contractors?+
Giving anyone outside your business access to client files is a disclosure to a third person under section 35, so it needs the client's written consent and a confidentiality agreement. You also remain responsible for the quality and accuracy of work done by anyone acting for you under section 24.
What's the difference between the Code of Conduct and the AI guidance?+
The Code of Conduct (current from 1 March 2022) is the binding instrument that sets out your duties as a registered migration agent. OMARA's 'Use of Artificial Intelligence' guidance does not create new rules; it explains how the existing Code, especially the Duty of confidentiality, applies when you use AI. This check links both so you can read the source.
Is this an official OMARA assessment or legal advice?+
No. This is an indicative self-check to help you spot gaps, not legal advice and not an official OMARA assessment. It points you to the relevant clauses of the Code of Conduct and OMARA's AI guidance so you can read them yourself. If you are unsure about your obligations, seek your own advice.
Is anything I enter saved or sent anywhere?+
No. The check runs entirely in your browser. Your answers are not sent to a server or stored, and there is no login or sign-up. Refreshing the page clears everything.