AI governance, risk & regulation.

Who decides how AI is used in your business, and the rules it has to follow. It applies to every layer of the stack.

What it is.

A short set of decisions: which AI tools staff may use, with what data, and who signs off.
Australia has no AI-specific law yet. Existing privacy, consumer and anti-discrimination laws still apply to AI, and the government publishes voluntary guidance.

From 10 December 2026, businesses covered by the Privacy Act must say in their privacy policy when a computer program uses personal information to make, or substantially help make, decisions that significantly affect people.
A proposed digital duty of care law, introduced to Parliament on 15 October 2026, would require online services, including public AI chatbots, to take reasonable steps to keep Australian users safe. It has not passed yet. If you offer a public-facing chatbot, follow its progress.
If AI gets something wrong, your business stays accountable for the outcome.

Using AI fairly, safely and honestly. Australia's eight AI Ethics Principles are a good checklist.

Being able to say, in plain words, why the AI gave a particular answer or decision.

Handling personal information as the Privacy Act requires, including what you type into AI tools.

The laws and regulator rules you must follow, such as the Privacy Act and APRA standards for financial services.

Keeping AI tools and the data they touch safe from leaks, misuse and attack.

A person checks important AI outputs before they are acted on, and can stop or override them.