Loading
Intelligence library // 359 briefings
Insights
Practical AI governance guides, regulatory analysis, and research, for enterprise leaders, businesses, and individuals navigating the AI landscape.
For Enterprise259+
Boards, APRA, ASIC, controls & programmes
Start hereFor Business & SMEs52+
Privacy Act, ACCC consumer law, AI6 basics
Start hereFor Startups6+
Founder guide, investor due diligence, EU AI Act
Start hereFor Employees48+
Your rights, Right to Disconnect, AI at work
Start here
Regulation 10 min read 2026
GDPR and the EU AI Act: How They Interact and Where They Conflict
The EU AI Act and GDPR apply simultaneously to AI systems processing personal data. Their requirements overlap significantly, but they also create tensions that governance must resolve.
Read article
Insurance 9 min read
AI Governance in Insurance: Underwriting, Claims, and the Fairness Problem
2026
Insurers are using AI to price risk, assess claims, and detect fraud at scale. The governance obligations, and the discrimination risks, are more significant than most have recognised.
Startups 8 min read
AI Governance for Startups: Building It Right Before You Scale
2026
Startups assume AI governance is an enterprise problem. It is not. The governance decisions you make in your first 18 months shape your regulatory exposure, your fundraising conversations, and your ability to enter regulated markets.
Practical Guide 10 min read
How to Audit Your AI Systems: A Practical Framework
2026
AI auditing is becoming a regulatory requirement in more jurisdictions, and a due diligence expectation in most others. This guide covers what an AI audit involves, who should conduct one, and what to do with the results.
Regulation 9 min read
Singapore's AI Governance Framework: What Businesses in Asia-Pacific Need to Know
2026
Singapore has developed one of the most sophisticated AI governance frameworks in Asia. For businesses operating in the region, understanding the MAS guidelines, IMDA's Model AI Governance Framework, and how they interact with the EU AI Act is becoming a compliance necessity.
Practical Guide 9 min read
AI Vendor Due Diligence: What to Ask Before You Sign
2026
Buying an AI system from a vendor does not transfer your governance obligations to them. It makes those obligations harder to satisfy. Here is the due diligence process that protects your organisation.
Governance 9 min read
AI Governance Maturity: The Five Levels and How to Progress
2026
Not all AI governance is equal. Understanding where your organisation sits on the maturity spectrum, and what the next level requires, is the most practical starting point for a governance improvement program.
Retail & E-Commerce 8 min read
AI in Retail and E-Commerce: Personalisation, Pricing, and the Governance Obligations That Come With Them
2026
Retail AI, recommendation engines, dynamic pricing, demand forecasting, is among the most widely deployed AI in commercial use. The governance obligations are less widely understood.
Australia 10 min read
Australia's AI Safety Standard: What It Actually Requires and Who It Applies To
2026
The Australian Government's voluntary AI Safety Standard sets out ten core guardrails for safe and responsible AI. For enterprises, voluntary doesn't mean optional, procurement, liability, and reputation make compliance effectively mandatory.
Australia 11 min read
The Privacy Act, AI, and What the OAIC Expects from Australian Organisations
2026
Australia's Privacy Act 1988 already regulates AI in ways many organisations don't realise. The OAIC has made clear that the APPs apply fully to AI systems that collect, use, and disclose personal information, and the reform agenda will tighten these obligations further.
Australia 12 min read
APRA and ASIC: What Australian Financial Services Firms Need to Know About AI Regulation
2026
Australian banks, insurers, and superannuation funds face AI governance expectations from two powerful regulators simultaneously. APRA's operational risk prudential standards and ASIC's responsible lending and market conduct obligations apply to AI in ways that many compliance teams haven't fully mapped.
Australia 10 min read
Australian Directors and AI: What Your Governance Obligations Actually Mean
2026
Australian directors have personal governance obligations that extend to material AI risks. ASIC's liability focus, the ASX Corporate Governance Principles, and the Robodebt Royal Commission findings have changed what 'appropriate oversight' of AI means at board level.
Australia 8 min read
Using AI at Work in Australia: What Every Employee Needs to Know
2026
Your employer can monitor your AI use, AI output is your responsibility, and feeding client data into ChatGPT could breach privacy law. A practical, jargon-free guide for Australian workers navigating AI in the workplace.
Australia 9 min read
Can My Boss Use AI to Monitor Me at Work? Australian Employees Rights
2026
AI-powered workplace monitoring is growing fast in Australia, productivity tracking, email analysis, even sentiment detection. Here's what your employer can legally do, what they can't, and what to do if you think you're being monitored unfairly.
Australia 7 min read
AI Policy for Australian Small Business: A One-Page Template and What the Law Requires
2026
If you run a small business in Australia and your team uses AI tools, you probably need an AI policy, and you almost certainly need to update your privacy policy. Here's what's required, what's good practice, and a template you can adapt today.
Australia 11 min read
Robodebt's Lessons for Australian AI Governance: What Every Organisation Must Learn
2026
The Robodebt Royal Commission produced the most significant analysis of automated decision-making governance failure in Australian history. Its lessons extend well beyond government, they apply to every Australian organisation using AI in decisions that affect people.
Australia 8 min read
AI Is Changing Australian Jobs: Your Rights, What Employers Must Tell You, and How to Protect Yourself
2026
AI is reshaping work across Australia, automating tasks, changing hiring, and in some cases eliminating roles. Here's what the Fair Work Act says about consultation, what you're entitled to know, and how to navigate AI-driven workplace change.
Australia 8 min read
The Spam Act and AI Marketing: How Generative Content Multiplies Your Compliance Risk
2026
Generative AI now writes, personalises, and sends marketing at a scale no human team could match, but the Spam Act 2003 applies to every message just the same. This explainer walks a risk and compliance operator through what the Act requires, where AI-driven campaigns break it, and what to have in place before a volume send.
Australia 8 min read
APP 11 and AI: Securing Personal Information When Staff Use AI Tools
2026
Australian Privacy Principle 11 requires you to take reasonable steps to protect the personal information you hold. When staff paste client or customer data into an ungoverned public AI tool, that is an unauthorised disclosure you cannot claw back. This explainer sets out what APP 11 demands, where AI use trips it, and what to have in place before an incident.
Australia 8 min read
APP 8 and Cross-Border AI Providers: Who Answers for an Offshore Model's Breach
2026
Most mainstream AI tools process personal information offshore, which makes routine AI use a cross-border disclosure under Australian Privacy Principle 8. Under section 16C of the Privacy Act, you stay accountable for what the overseas AI provider does with that data. This explainer sets out what APP 8 requires, where AI use trips it, and what to have in place before an incident.
Australia 8 min read
AI Workplace Surveillance in Australia: What the Law Requires Before You Monitor Staff
2026
AI-driven monitoring of employees is surveillance, and Australian workplace surveillance law regulates it by state. This explainer sets out the notice duties, the criminal exposure for covert monitoring, and the new statutory privacy tort, then gives you a pre-deployment checklist. Because the rules vary by jurisdiction, you must confirm the position in every state you operate in.
Australia 8 min read
Biometric Consent for AI in Australia: What APP 3.3 Requires
2026
Facial recognition, voiceprints and biometric identity checks collect "sensitive information" under the Privacy Act 1988 (Cth), which generally cannot be gathered without valid consent. This explainer sets out what Australian Privacy Principle 3.3 requires, where AI deployments trip the consent standard, and the controls to have in place before a regulator or customer asks.
Australia 8 min read
The Fair Work Commission and AI in the Australian Workplace
2026
AI now sits inside hiring, rostering, performance management and dismissals. When those decisions are disputed, the Fair Work Commission asks the same questions it always has: was there a valid reason, and was the process fair. "The algorithm decided" answers neither.
Australia 9 min read
TGA and AI Medical Devices in Australia: What Risk and Compliance Teams Need to Know
2026
If your AI tool diagnoses, screens, monitors, or guides treatment, it may be a medical device under the Therapeutic Goods Act 1989 and fall under the TGA. Here is what that means, where AI creates exposure, and what to check before you supply.