The EU AI Act applies extraterritorially, an Australian company that places AI on the EU market or whose AI system output is used there is in scope. Australia's Privacy Act applies to organisations wherever their data flows. Singapore's MAS expects APAC financial institutions to follow its AI governance principles. Understanding your regulatory exposure means knowing every jurisdiction where your AI has effect, not just where you are incorporated.
Australian Privacy Act applies wherever AU customer data goes
EU AI Act reaches AI placed on the EU market, and non-EU providers whose AI system output is used there
MAS guidelines apply to APAC financial institutions
US state laws apply to where customers are located