Loading
As of mid-2026, Australia governs artificial intelligence through its existing, technology-neutral laws and sector regulators, supplemented by voluntary government guidance and a national AI Safety Institute — rather than through a standalone AI Act. This page sets out the instruments, the dates, and which ones are binding versus voluntary, with links to the primary government sources for each.
Last reviewed: 21 July 2026 · A factual snapshot; AI policy is evolving, so confirm against the primary sources linked below
Australia has not enacted AI-specific legislation. Instead, the government’s stated position — set out in the National AI Plan of December 2025 — is that AI is already covered by existing technology-neutral laws and the regulators that administer them, and that this is supplemented by voluntary guidance and a new AI Safety Institute rather than by a standalone AI Act or, at this stage, economy-wide mandatory guardrails.
In practice that means two layers operate side by side: a binding layer of laws and sector-regulator obligations that apply to AI the same way they apply to any other technology, and a voluntary layer of national AI guidance — principally the Guidance for AI Adoption — that organisations are encouraged, but not required, to follow.
Eight voluntary principles for responsible AI published by the Department of Industry, the first national, soft-law reference point.
The government released a Voluntary AI Safety Standard of ten guardrails for the whole AI supply chain, and separately consulted on whether to make comparable guardrails mandatory for high-risk AI.
The National AI Centre published the Guidance for AI Adoption, which sets out six essential practices and evolves the Voluntary AI Safety Standard into the primary government guidance for organisations.
Organised around three goals, capture the opportunities, spread the benefits, and keep Australians safe, the Plan confirmed that, for now, Australia would rely on existing technology-neutral laws and sector regulators, supported by voluntary guidance and a new AI Safety Institute, rather than a standalone AI Act or immediate economy-wide mandatory guardrails.
The AI Safety Institute began operating as a technical body for monitoring, testing and analysis, and AI.gov.au launched as a single hub for government AI guidance.
The government published five expectations covering national interest, the energy transition, water use, skills and jobs, and research and local capability. They are non-binding and operate by prioritising aligned proposals in Commonwealth assessments, rather than amending the regulatory landscape.
In a speech at the University of Sydney, the Prime Minister announced an Office of AI within the Department of the Prime Minister and Cabinet, effective immediately, to coordinate a whole-of-government national AI framework, and a set of Australian Standards for AI to be legislated (expected early 2027). The announced standards would impose binding rules on large data centres (underwriting their own new power supply, paying full connection costs, demand response, water efficiency), preserve creator ownership of copyrighted works used in AI training, and streamline compliance verification. Until a bill is introduced, this is announced policy, not law.
The distinction that matters most for compliance is whether an instrument carries legal force or is guidance. The table below sorts the main instruments accordingly.
| Instrument | Status | Applies to / owner |
|---|---|---|
| Privacy Act 1988 and the Australian Privacy Principles | Binding | Entities handling personal information (regulated by the OAIC) |
| Australian Consumer Law and Corporations Act obligations | Binding | Businesses and financial services licensees (ACCC, ASIC) |
| APRA prudential standards applied to AI (e.g. CPS 230, CPS 234) | Binding | APRA-regulated banks, insurers and superannuation trustees |
| Guidance for AI Adoption, six essential practices (Oct 2025) | Voluntary | All organisations (National AI Centre) |
| Voluntary AI Safety Standard, ten guardrails (Sep 2024) | Voluntary | All organisations; now evolved into the Guidance for AI Adoption |
| Expectations of data centres and AI infrastructure developers (Mar 2026) | Non-binding signal | Data-centre and AI-infrastructure developers (Dept of Industry) |
| Proposed mandatory guardrails for high-risk AI (consulted 2024) | Proposed, not in force | Would be economy-wide; the National AI Plan relies on existing laws instead |
| Australian AI Safety Institute (operational 2026) | Not a regulator | Advisory and technical body; does not licence, certify or enforce |
| Office of AI (announced 15 July 2026) | Announced, standing up | Department of the Prime Minister and Cabinet; coordination body, not a regulator |
| Australian Standards for AI (announced 15 July 2026) | Proposed, not in force | Legislation expected early 2027; binding data-centre rules and creator copyright protections announced |
For who administers the binding instruments, see our regulator profiles and, for financial services specifically, APRA’s AI expectations.
Two practical points follow from the current settings. First, the obligations that can be enforced against an organisation today come from the laws and sector regulators that already apply to it — privacy, consumer protection, corporations law, and, for regulated entities, prudential standards — applied to its use of AI. Second, the national AI-specific layer is, for now, guidance rather than law: organisations are expected to manage AI risk, but the government has framed how to do so as voluntary good practice.
Where the baseline is voluntary, the weight of day-to-day AI governance sits with each organisation’s own framework and controls. Our AI GRC guide covers how those pieces fit together, the AI Controls Library sets out specific controls, and the Australia hub collects sector-by-sector detail. For further analysis of the policy direction and what it implies for enterprise risk, see Australia’s AI governance gap and the breakdown of the six essential practices.
As of mid-2026 Australia has no standalone AI Act. AI is governed through existing technology-neutral laws, privacy, consumer protection, corporations and sector-specific regulation, administered by the regulators that already oversee those areas, supplemented by voluntary government guidance. That position is now shifting: on 15 July 2026 the government announced an Office of AI within the Department of the Prime Minister and Cabinet and a set of Australian Standards for AI to be legislated, expected early 2027, though no bill has been introduced yet.
No. The ten guardrails were issued in September 2024 as a Voluntary AI Safety Standard. The government separately consulted on making comparable guardrails mandatory for high-risk AI, but the National AI Plan released in December 2025 instead relies on existing laws and voluntary guidance. In October 2025 the guidance was evolved into the six essential practices in the Guidance for AI Adoption.
Published by the National AI Centre on 21 October 2025, the Guidance for AI Adoption sets out six essential practices for safe and responsible AI governance and adoption. It is voluntary, applies across the AI supply chain, and evolves the earlier Voluntary AI Safety Standard into the government’s primary guidance for organisations.
No. The AI Safety Institute, operational from early 2026, monitors, tests and analyses advanced AI capabilities, risks and harms and advises government. It does not licence models, certify products, or enforce rules.
They are directed at developers and operators of data centres and AI infrastructure, not at AI deployers generally. They are non-binding and work by shaping which proposals the Commonwealth prioritises in its assessment processes; they are not a general AI compliance obligation.
A short, free assessment benchmarks where your organisation stands against a structured AI governance model — useful precisely because much of the national guidance is voluntary.
This page is general information describing the state of Australian AI policy as at 8 June 2026, not legal or compliance advice. Policy and regulatory positions change; always confirm the current position against the primary government sources linked above and obtain advice from your own qualified counsel before relying on it.