---
title: "Australia — Global AI Monitor"
canonical: https://artificial-intelligence.gi/jurisdictions/australia/
source_html: /jurisdictions/australia/index.html
description: "Australia AI governance record: 7 instruments, 0 obligations and 11 evidenced claims across 12 modules. Research as of 12 Nov 2026."
generated_at: 2026-11-12T17:20:02Z
content_sha256: e565e4745fa76fcb6d7dac68b3033162ecec7f9e38e776a43032528dd0f66114
generator: "fe-fleet/md-twin@1.0"
---
# Australia AI Regulation & Governance

5 active modules 7 quiet

Last updated 11 Nov 2026 · 12 modules · 7 instruments · 11 claims · 50 sources in the cumulative register

Download report (PDF) Collapse all

Framework status National AI Plan (In force since 2025-12-02).

Main regulator Regulator [Department of Industry, Science and Resources (AI policy lead) — no statutory AI regulator](https://www.industry.gov.au/science-technology-and-innovation/technology/artificial-intelligence)

Next milestone 10 Dec 2026 : Privacy Act APP 1.7-1.9 commencement ([01 AI Framework Law](#sec-mod-ai_framework_law))

Record status Live · Periodic active record · 50 sources (30 retrieved) · 5 under review · Not yet expert-reviewed

✦ AI-assembled from cited sources

Evidence-gated · [How we verify](/methodology/#ai-content-disclosure) · Disclosure Not yet expert-reviewed · Not legal, compliance or investment advice. Facts are machine-assembled from cited public sources. Individual claims have not each been independently verified by a human reviewer. See [methodology](/methodology/).

Source tiers: T1 enacted statute, regulation, or binding supervisory order · T2 official regulator guidance, consultation, or registry · T3 international standard-setter or peer-reviewed analysis · T4 practitioner commentary or secondary reporting. Confidence: high = corroborated by retrieved T1/T2 text · medium = single official source or secondary corroboration · low = preliminary or unverified. [Full definitions →](/methodology/#source-tiers)

Research checked 12 Nov 2026 · Updated 11 Nov 2026 Record history Research as of 12 Nov 2026 · Record last changed 11 Nov 2026 · Published 11 Nov 2026 · Page built 12 Nov 2026

7 Instruments

6 Current instruments

4 Binding, in force +1 more binding, in-force date not recorded

0 Obligations

11 Claims

1 Upcoming milestones

50 Sources

## Next milestones in this record

- 10 Dec 2026Privacy Act APP 1.7-1.9 commencement Scheduled · [01 AI Framework Law](#sec-mod-ai_framework_law)

Jump to module (12)

### 01AI Framework LawActive Derived: Probable▾#

National AI Plan (In force since 2025-12-02).

3 instruments (3 current) · 0 obligations · 6 claims · 3 milestones · Next: 10 Dec 2026 (Privacy Act APP 1.7-1.9 commencement)

Binding law in force: The Privacy and Responsible Information Sharing Act 2024 (WA) has been in force since 1 July 2026. From that date, Western Australian public sector entities subject to the state's Information Privacy Principles that use an automated decision-making process to make a significant decision must notify the affected individual that such a process was used, provide information about the decision on request, and offer a process through which the individual may request human intervention. This is a sub-national, sector-specific automated decision-making regime that is broader than the Commonwealth Privacy Act's disclosure-only approach.

Enacted, not yet in force: The Privacy and Other Legislation Amendment Act 2024 (Cth) introduces new Australian Privacy Principles 1.7 to 1.9. From 10 December 2026, APP entities will be required to disclose in their privacy policy automated decisions that could reasonably be expected to significantly affect an individual's rights or interests.

Regulatory expectations and guidance: In the absence of a dedicated AI statute, the Office of the Australian Information Commissioner applies the Privacy Act 1988 (Cth) to AI developers and deployers through non-binding guidance published 21 October 2024. The government's National AI Plan, released 2 December 2025, sets policy direction without itself creating new statutory obligations. In December 2025 the government stated it would not proceed with mandatory AI guardrails legislation and would instead rely on existing laws to address AI-related harms. A Commonwealth consultation on AI and copyright, covering a possible paid collective licensing framework, remains open.

Proposed legislation, pre-bill: On 10-11 November 2026 the Prime Minister announced that the government intends to legislate six mandatory AI safety and security obligations for frontier AI companies -- security controls, risk identification and management, independent model evaluation, rapid incident notification, published safety and security frameworks, and responsiveness to updated standards -- to be enforced by a proposed new AI safety regulator working with the Australian AI Safety Institute. As at the run date, no bill implementing these Australian AI Standards had been introduced into Parliament; the announcement follows acceptance of recommendations from a rapid review triggered by an incident involving unauthorised access to non-public Medicare statistics by an AI agent.

Read full sub-brief · 355 words

Instruments (3)
- National AI Plan In force since 2025-12-02Binding
- Privacy and Other Legislation Amendment Act 2024 (Cth) In force from 2026-12-10Binding
- Privacy and Responsible Information Sharing Act 2024 (WA) In force since 2026-07-01Binding

Milestones

- 2 Dec 2025National AI Plan released MetNational AI Plan
- 1 Jul 2026WA PRIS Act Principle 10 ADM duties commencement MetPrivacy and Responsible Information Sharing Act 2024 (WA)
- 10 Dec 2026Privacy Act APP 1.7-1.9 commencement UpcomingPrivacy and Other Legislation Amendment Act 2024 (Cth)

Claims and evidence (6)
- In December 2025, the Australian Government announced it would not proceed with mandatory guardrails for artificial intelligence and would instead rely on existing laws to address AI harms.Confidence: Probable (capped: best source is T1) · As of 2 Dec 2025 · EvidencedEvidence and sources[Global Shield Policy](https://www.globalshieldpolicy.org/guardrails-gap-analyses/) T3 · Retrieved · retrieved 4 Nov 2026In December 2025, the Australian Government announced it would not proceed with mandatory guardrails for artificial intelligence (AI) and instead rely on existing laws to address AI harms.
- [regulations.ai](https://regulations.ai/regulations/RAI-AU-NA-PPIMGXA-2024) T3 · Retrieved · retrieved 4 Nov 2026On December 2, 2025, the proposal was superseded when Australia's National AI Plan formally dropped the standalone mandatory guardrails in favor of enforcing existing, technology-neutral laws across sectors.
- [Minister for Industry and Innovation (Commonwealth of Australia)](https://www.minister.industry.gov.au/charlton/media/national-ai-plan-empowering-all-australians) T1 · Surfaced · retrieved 4 Nov 2026Today, the Albanese Labor Government is releasing the National AI Plan, a comprehensive roadmap to build an AI-enabled economy

- Derived: Probable From 10 December 2026, APP entities must disclose in their privacy policy automated decisions that could reasonably be expected to significantly affect an individual's rights or interests, under new APP 1.7-1.9.Confidence: Confirmed · As of 10 Dec 2024 · EvidencedEvidence and sources[Office of the Australian Information Commissioner](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-1-app-1-open-and-transparent-management-of-personal-information) T1 · Retrieved · retrieved 4 Nov 2026require entities to include additional information relating to automated decisions in an entity's privacy policy (APP 1.7-1.9).
- [Policai](https://policai.org/policies/federal-privacy-and-other-legislation-amendment-act-2024) T3 · Retrieved · retrieved 4 Nov 2026New APP 1.7 to 1.9 require privacy policies to disclose automated decisions that significantly affect individuals, from 10 December 2026.
- [Corrs Chambers Westgarth](https://www.corrs.com.au/insights/transparency-in-automated-decision-making-what-the-oaic-guidance-means-for-your-business) T3 · Surfaced · retrieved 4 Nov 2026entities to disclose the following details of their use of ADM in their privacy policy: the kinds of personal information used in the operation of such computer programs
- [Parliament of Australia (Parliamentary Library)](https://www.aph.gov.au/Parliamentary_Business/Bills_Legislation/bd/bd2425/25bd016) T1 · Surfaced · retrieved 4 Nov 2026the entity has arranged for a computer program to make, or do a thing that is substantially and directly related to making, a decision

- Derived: Probable From 1 July 2026, WA public sector (IPP) entities using an automated decision-making process to make a significant decision must notify the individual, provide information on request, and offer a process for requesting human intervention.Confidence: Confirmed · As of 1 Jul 2026 · EvidencedEvidence and sources[Government of Western Australia (Parliamentary Counsel's Office)](https://www.legislation.wa.gov.au/legislation/statutes.nsf/RedirectURL?OpenAgent=&query=mrdoc_47994.htm) T1 · Retrieved · retrieved 4 Nov 2026(a)notify the individual that an automated decision‑making process has been employed in making the decision; and

- Derived: Probable The OAIC applies the Privacy Act 1988 (Cth) to AI developers and deployers through non-binding guidance published 21 October 2024, rather than through a dedicated AI statute.Confidence: Probable · As of 21 Oct 2024 · EvidencedEvidence and sources[Lexology](https://www.lexology.com/library/detail.aspx?g=4cbcdc38-0ca1-4067-a392-1e88826cbb72) T3 · Surfaced · retrieved 4 Nov 2026On October 21 2024, the Office of the Australian Information Commissioner (OAIC) published privacy guidance for 'developers' of artificial intelligence (AI) that are subject to the Privacy Act 1988 (Cth) (Privacy Act).
- [Office of the Australian Information Commissioner](https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/guidance-on-privacy-and-developing-and-training-generative-ai-models) T1 · Surfaced · retrieved 21 Oct 2024This guidance is intended for developers of generative artificial intelligence (AI) models or systems who are subject to the Privacy Act (see ‘When does the Privacy Act apply?’

- Australia's Prime Minister announced on 10-11 November 2026 six mandatory AI safety guardrails and a new AI safety regulator for frontier AI companies.Confidence: Probable · As of 10 Nov 2026 · EvidencedEvidence and sources[The Conversation](https://theconversation.com/australia-will-impose-mandatory-safety-rules-on-ai-are-we-focused-on-the-right-risks-296282) T2 · Retrieved · retrieved 10 Nov 2026Prime Minister Anthony Albanese has just announced six mandatory artificial intelligence (AI) safety guardrails.
- [Australian Government (Deputy Prime Minister's office)](https://www.minister.defence.gov.au/media-releases/2026-11-10/new-australian-ai-safety-security-protections) T1 · Surfaced · retrieved 10 Nov 2026The Albanese Government will enshrine world leading mandatory Artificial Intelligence safety and security protections in Australian AI Standards legislation.

- Australia will legislate six mandatory AI safety and security obligations for frontier AI companies, enforced by a proposed new AI safety regulator.Confidence: Probable · As of 10 Nov 2026 · EvidencedEvidence and sources[Australian Government (Deputy Prime Minister's office)](https://www.minister.defence.gov.au/media-releases/2026-11-10/new-australian-ai-safety-security-protections) T1 · Surfaced · retrieved 10 Nov 2026The Albanese Government will enshrine world leading mandatory Artificial Intelligence safety and security protections in Australian AI Standards legislation.

### 02Prohibited PracticesQuiet▾#

Nothing recorded for this module in the research of 2026-11-12.

0 instruments · 0 obligations · 0 claims

Nothing recorded for this module in the research of 2026-11-12.

### 03High-Risk SystemsQuiet▾#

Nothing recorded for this module in the research of 2026-11-12.

0 instruments · 0 obligations · 0 claims

Nothing recorded for this module in the research of 2026-11-12.

### 04General-Purpose AIQuiet▾#

Nothing recorded for this module in the research of 2026-11-12.

0 instruments · 0 obligations · 0 claims

Nothing recorded for this module in the research of 2026-11-12.

### 05Transparency & Synthetic ContentActive Derived: Probable▾#

Online Safety Act 2021 (Cth) (In force since 2022-01-23).

1 instrument (1 current) · 0 obligations · 1 claim · 0 milestones

Binding law in force: The Online Safety Act 2021 (Cth) has applied with direct effect since 23 January 2022. Registered industry codes made under the Act require services that offer an AI companion chatbot feature to undertake a risk assessment evaluating the risk that the chatbot will generate harmful content, with civil penalties enforceable up to AUD 49.5 million for non-compliance.

Instruments (1)
- Online Safety Act 2021 (Cth) In force since 2022-01-23Binding

Claims and evidence (1)
- Derived: Probable Under registered industry codes made under the Online Safety Act 2021 (Cth), services offering an AI companion chatbot feature must undertake a risk assessment evaluating the risk that the chatbot will generate harmful content, with civil penalties enforceable up to AUD 49.5 million.Confidence: Probable (capped: best source is T1) · EvidencedEvidence and sources[Bird & Bird](https://www.twobirds.com/en/insights/2025/australia/digital-duty-of-care-what-phase-2-esafety-codes-demand-from-providers) T3 · Retrieved · retrieved 4 Nov 2026these industry codes are legally enforceable under the Online Safety Act 2021 (Cth) with civil penalties ranging up to AU $49.5 million.
- [eSafety Commissioner](https://www.esafety.gov.au/newsroom/media-releases/new-industry-codes-seek-to-take-on-ai-chatbots-that-encourage-suicide-and-engage-in-sexually-explicit-conversations-with-aussie-kids) T1 · Surfaced · retrieved 4 Nov 2026the clear and present danger posed by mostly unregulated AI-driven companion chatbots

### 06AI & Intellectual PropertyQuiet▾#

Nothing recorded for this module in the research of 2026-11-12.

0 instruments · 0 obligations · 0 claims

Nothing recorded for this module in the research of 2026-11-12.

### 07Sectoral & Public-Sector AIActive Derived: Probable▾#

ASIC Report 798 Beware the gap (Date not recorded).

2 instruments (2 current) · 0 obligations · 4 claims · 1 milestone

Binding and enacted instruments in effect: The Policy for the Responsible Use of AI in Government (version 2.0), issued by the Digital Transformation Agency, took effect on 15 December 2025. It requires non-corporate Commonwealth entities to designate accountable officials, maintain an AI use-case register shared with the DTA every six months, and conduct risk assessments.

ASIC Report 798, Beware the Gap, confirms there is no AI-specific statute governing AI use in financial services, and that the existing obligation on Australian financial services and credit licensees under section 912A of the Corporations Act 2001 (Cth) to provide services efficiently, honestly and fairly applies in full to AI-assisted advice, underwriting and credit activities.

Regulatory guidance: The OAIC's in-force AI guidance catalogue comprises developer guidance, deployer guidance for commercially available AI products, and a rewritten Australian Privacy Principle 3 chapter addressing AI-related collection methods, including facial recognition, data scraping and tracking pixels. The OAIC's guidance treats generative AI model development on large personal-information datasets as a high privacy-risk activity requiring privacy-by-design and completion of a privacy impact assessment.

Instruments (2)
- ASIC Report 798 Beware the gap Date not recordedBinding
- Policy for the responsible use of AI in Government (v2.0) In force since 2025-12-15Binding

Milestones

- 15 Dec 2025DTA AI Policy v2.0 effective MetPolicy for the responsible use of AI in Government (v2.0)

Claims and evidence (4)
- Version 2.0 of the DTA's Policy for the responsible use of AI in Government took effect 15 December 2025 and requires non-corporate Commonwealth entities to designate accountable officials, maintain an AI use-case register shared with the DTA every six months, conduct risk assessments, and complete staff training within 12 months.Confidence: Probable (capped: best source is T1) · As of 15 Dec 2025 · EvidencedEvidence and sources[Digital Transformation Agency (Australian Government)](https://www.digital.gov.au/sites/default/files/documents/2025-12/Policy%20for%20the%20responsible%20use%20of%20AI%20in%20Government%202.0_0.pdf) T1 · Surfaced · retrieved 4 Nov 2026This version of the policy (v2.0) is effective 15 December 2025.
- [Australian Public Service Academy](https://www.apsacademy.gov.au/learning-experiences/resources/policy-responsible-use-ai-government) T2 · Surfaced · retrieved 4 Nov 2026This register must be shared with the DTA every 6 months from date of creation.
- [Australian Computer Society](https://membership.acs.org.au/member-insight/2025-12-9-Version-2-0-Policy-for-the-Responsible-Use-of-AI-in-Government,.html) T3 · Retrieved · retrieved 4 Nov 2026All government staff must complete mandatory responsible AI training within 12 months.

- ASIC Report 798 confirms there is no AI-specific statute for financial services, and that AFS and credit licensees' existing obligation under s.912A of the Corporations Act 2001 (Cth) to provide services efficiently, honestly and fairly applies in full to AI-assisted advice, underwriting and credit decisions.Confidence: Confirmed · As of 29 Oct 2024 · EvidencedEvidence and sources[Australian Securities and Investments Commission](https://download.asic.gov.au/media/mtllqjo0/rep-798-published-29-october-2024.pdf) T1 · Retrieved · retrieved 4 Nov 2026opportunities for more efficient, accessible and tailored products and services. However, AI can also amplify existing risks to consumers and introduce new ones.

- Derived: Probable The OAIC's in-force AI guidance catalogue comprises developer guidance, deployer guidance for commercially available AI products, and a rewritten APP 3 chapter addressing AI-related collection methods including facial recognition, data scraping and tracking pixels.Confidence: Probable · As of 21 Oct 2024 · EvidencedEvidence and sources[Office of the Australian Information Commissioner](https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/guidance-on-privacy-and-developing-and-training-generative-ai-models) T1 · Surfaced · retrieved 21 Oct 2024This guidance is intended for developers of generative artificial intelligence (AI) models or systems who are subject to the Privacy Act (see ‘When does the Privacy Act apply?’

- The OAIC's guidance treats generative AI model development on large personal-information datasets as a high privacy-risk activity requiring privacy-by-design and a privacy impact assessment.Confidence: Probable (capped: best source is T1) · As of 21 Oct 2024 · EvidencedEvidence and sources[Office of the Australian Information Commissioner](https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/guidance-on-privacy-and-developing-and-training-generative-ai-models) T1 · Surfaced · retrieved 21 Oct 2024This guidance is intended for developers of generative artificial intelligence (AI) models or systems who are subject to the Privacy Act (see ‘When does the Privacy Act apply?’
- [GC Legal](https://www.gclegal.com.au/insights/regulatory-update-oaic-guidance-on-privacy-and-developing-and-training-generative-ai-models) T3 · Retrieved · retrieved 21 Oct 2024On 21 October 2024, the OAIC released its guidance on privacy and developing and training generative AI models (GenAI Guidance).

### 08Safety & Incident ReportingActive▾#

Australia will legislate six mandatory AI safety and security obligations for frontier AI companies, enforced by a proposed new AI safety regulator.

0 instruments (0 current) · 0 obligations · 1 claim · 0 milestones

Proposed legislation, pre-bill: No binding AI-specific safety or incident-reporting statute is yet in force in Australia. On 10-11 November 2026 the Prime Minister announced that the government will legislate six mandatory AI safety and security obligations for frontier AI companies -- security controls, risk identification and management, independent model evaluation, rapid incident notification, published safety and security frameworks, and responsiveness to updated standards -- to be enforced by a proposed new dedicated AI safety regulator working alongside the Australian AI Safety Institute. The proposal follows acceptance of all 18 recommendations of a rapid review triggered by an incident in which an OpenAI agent gained unauthorised access to non-public Medicare statistics. As at the run date, no Australian AI Standards bill had been introduced into Parliament.

Claims and evidence (1)
- Australia will legislate six mandatory AI safety and security obligations for frontier AI companies, enforced by a proposed new AI safety regulator.Confidence: Probable · As of 10 Nov 2026 · EvidencedEvidence and sources[Australian Government (Deputy Prime Minister's office)](https://www.minister.defence.gov.au/media-releases/2026-11-10/new-australian-ai-safety-security-protections) T1 · Surfaced · retrieved 10 Nov 2026The Albanese Government will enshrine world leading mandatory Artificial Intelligence safety and security protections in Australian AI Standards legislation.

### 09Standards & ConformityQuiet▾#

Nothing recorded for this module in the research of 2026-11-12.

0 instruments · 0 obligations · 0 claims

Nothing recorded for this module in the research of 2026-11-12.

### 10Authorities & EnforcementActive Derived: Probable▾#

Online Safety Act 2021 (Cth) (In force since 2022-01-23).

1 instrument (1 current) · 0 obligations · 1 claim · 0 milestones

The Office of the Australian Information Commissioner is recorded as Australia's privacy regulator with a role in AI-related privacy matters. Separately, under registered industry codes made under the Online Safety Act 2021 (Cth), which has had direct effect since 23 January 2022, services offering an AI companion chatbot feature must undertake a risk assessment evaluating the risk that the chatbot will generate harmful content, with civil penalties enforceable up to AUD 49.5 million for non-compliance.

Instruments (1)
- Online Safety Act 2021 (Cth) In force since 2022-01-23Binding

Claims and evidence (1)
- Derived: Probable Under registered industry codes made under the Online Safety Act 2021 (Cth), services offering an AI companion chatbot feature must undertake a risk assessment evaluating the risk that the chatbot will generate harmful content, with civil penalties enforceable up to AUD 49.5 million.Confidence: Probable (capped: best source is T1) · EvidencedEvidence and sources[Bird & Bird](https://www.twobirds.com/en/insights/2025/australia/digital-duty-of-care-what-phase-2-esafety-codes-demand-from-providers) T3 · Retrieved · retrieved 4 Nov 2026these industry codes are legally enforceable under the Online Safety Act 2021 (Cth) with civil penalties ranging up to AU $49.5 million.
- [eSafety Commissioner](https://www.esafety.gov.au/newsroom/media-releases/new-industry-codes-seek-to-take-on-ai-chatbots-that-encourage-suicide-and-engage-in-sexually-explicit-conversations-with-aussie-kids) T1 · Surfaced · retrieved 4 Nov 2026the clear and present danger posed by mostly unregulated AI-driven companion chatbots

### 11Sandboxes & Transitional ReliefQuiet▾#

Nothing recorded for this module in the research of 2026-11-12.

0 instruments · 0 obligations · 0 claims

Nothing recorded for this module in the research of 2026-11-12.

### 12Commercial ActivityQuiet▾#

Nothing recorded for this module in the research of 2026-11-12.

0 instruments · 0 obligations · 0 claims

Nothing recorded for this module in the research of 2026-11-12.

No modules match. Filters combine as OR inside a group and AND across groups.

Reset all filters

## Authorities

Authority Type

Office of the Australian Information Commissioner Regulator

## Enforcement actions

No enforcement actions recorded in this research.

## Cases

No cases recorded in this research.

## Consultations

Consultation Status

Commonwealth consultation on AI and copyright (paid collective licensing framework) Open

What this record does not yet establish is set out on the [transparency register](/gaps/#gap-au); its dated events are on the [regulatory calendar](/calendar/?jid=AU).

Think something on this page is wrong? [Report an error](/legal/#contact).

Technical provenance (record schema, run ID & build metadata) Schema version artificial-intelligence-record-v2.12 Research run ID aic-union-AU-2026-11-02 Page model module-card-page-v1 Renderer render_jid_aic_v13 Build date 12 Nov 2026