Australian AI policy: what is in force, and what is voluntary
As of mid-2026, Australia governs artificial intelligence through its existing, technology-neutral laws and sector regulators, supplemented by voluntary government guidance and a national AI Safety Institute — rather than through a standalone AI Act. This page sets out the instruments, the dates, and which ones are binding versus voluntary, with links to the primary government sources for each.
Last reviewed: 8 June 2026 · A factual snapshot; AI policy is evolving, so confirm against the primary sources linked below
The current position
Australia has not enacted AI-specific legislation. Instead, the government’s stated position — set out in the National AI Plan of December 2025 — is that AI is already covered by existing technology-neutral laws and the regulators that administer them, and that this is supplemented by voluntary guidance and a new AI Safety Institute rather than by a standalone AI Act or, at this stage, economy-wide mandatory guardrails.
In practice that means two layers operate side by side: a binding layer of laws and sector-regulator obligations that apply to AI the same way they apply to any other technology, and a voluntary layer of national AI guidance — principally the Guidance for AI Adoption — that organisations are encouraged, but not required, to follow.
How the current settings came together
Australia's AI Ethics Principles
Eight voluntary principles for responsible AI published by the Department of Industry — the first national, soft-law reference point.
Voluntary AI Safety Standard and a proposals paper on mandatory guardrails
The government released a Voluntary AI Safety Standard of ten guardrails for the whole AI supply chain, and separately consulted on whether to make comparable guardrails mandatory for high-risk AI.
Guidance for AI Adoption
The National AI Centre published the Guidance for AI Adoption, which sets out six essential practices and evolves the Voluntary AI Safety Standard into the primary government guidance for organisations.
National AI Plan
Organised around three goals — capture the opportunities, spread the benefits, and keep Australians safe — the Plan confirmed that, for now, Australia would rely on existing technology-neutral laws and sector regulators, supported by voluntary guidance and a new AI Safety Institute, rather than a standalone AI Act or immediate economy-wide mandatory guardrails.
Australian AI Safety Institute and AI.gov.au
The AI Safety Institute began operating as a technical body for monitoring, testing and analysis, and AI.gov.au launched as a single hub for government AI guidance.
Expectations of data centres and AI infrastructure developers
The government published five expectations covering national interest, the energy transition, water use, skills and jobs, and research and local capability. They are non-binding and operate by prioritising aligned proposals in Commonwealth assessments, rather than amending the regulatory landscape.
Binding versus voluntary: what actually applies
The distinction that matters most for compliance is whether an instrument carries legal force or is guidance. The table below sorts the main instruments accordingly.
| Instrument | Status | Applies to / owner |
|---|---|---|
| Privacy Act 1988 and the Australian Privacy Principles | Binding | Entities handling personal information (regulated by the OAIC) |
| Australian Consumer Law and Corporations Act obligations | Binding | Businesses and financial services licensees (ACCC, ASIC) |
| APRA prudential standards applied to AI (e.g. CPS 230, CPS 234) | Binding | APRA-regulated banks, insurers and superannuation trustees |
| Guidance for AI Adoption — six essential practices (Oct 2025) | Voluntary | All organisations (National AI Centre) |
| Voluntary AI Safety Standard — ten guardrails (Sep 2024) | Voluntary | All organisations; now evolved into the Guidance for AI Adoption |
| Expectations of data centres and AI infrastructure developers (Mar 2026) | Non-binding signal | Data-centre and AI-infrastructure developers (Dept of Industry) |
| Proposed mandatory guardrails for high-risk AI (consulted 2024) | Proposed — not in force | Would be economy-wide; the National AI Plan relies on existing laws instead |
| Australian AI Safety Institute (operational 2026) | Not a regulator | Advisory and technical body; does not licence, certify or enforce |
For who administers the binding instruments, see our regulator profiles and, for financial services specifically, APRA’s AI expectations.
What this means for organisations
Two practical points follow from the current settings. First, the obligations that can be enforced against an organisation today come from the laws and sector regulators that already apply to it — privacy, consumer protection, corporations law, and, for regulated entities, prudential standards — applied to its use of AI. Second, the national AI-specific layer is, for now, guidance rather than law: organisations are expected to manage AI risk, but the government has framed how to do so as voluntary good practice.
Where the baseline is voluntary, the weight of day-to-day AI governance sits with each organisation’s own framework and controls. Our AI GRC guide covers how those pieces fit together, the AI Controls Library sets out specific controls, and the Australia hub collects sector-by-sector detail. For further analysis of the policy direction and what it implies for enterprise risk, see Australia’s AI governance gap and the breakdown of the six essential practices.
Frequently asked questions
Does Australia have an AI law?
As of mid-2026 Australia has no standalone AI Act. AI is governed through existing technology-neutral laws — privacy, consumer protection, corporations and sector-specific regulation — administered by the regulators that already oversee those areas, supplemented by voluntary government guidance.
Are Australia's ten AI guardrails mandatory?
No. The ten guardrails were issued in September 2024 as a Voluntary AI Safety Standard. The government separately consulted on making comparable guardrails mandatory for high-risk AI, but the National AI Plan released in December 2025 instead relies on existing laws and voluntary guidance. In October 2025 the guidance was evolved into the six essential practices in the Guidance for AI Adoption.
What is the Guidance for AI Adoption (the "six practices")?
Published by the National AI Centre on 21 October 2025, the Guidance for AI Adoption sets out six essential practices for safe and responsible AI governance and adoption. It is voluntary, applies across the AI supply chain, and evolves the earlier Voluntary AI Safety Standard into the government’s primary guidance for organisations.
Is the Australian AI Safety Institute a regulator?
No. The AI Safety Institute, operational from early 2026, monitors, tests and analyses advanced AI capabilities, risks and harms and advises government. It does not licence models, certify products, or enforce rules.
Do the data-centre expectations apply to my organisation?
They are directed at developers and operators of data centres and AI infrastructure, not at AI deployers generally. They are non-binding and work by shaping which proposals the Commonwealth prioritises in its assessment processes; they are not a general AI compliance obligation.
Primary sources
- National AI Plan — Department of Industry, Science and Resources (December 2025)
- Guidance for AI Adoption — National AI Centre (21 October 2025)
- Voluntary AI Safety Standard — National AI Centre (2024)
- Expectations of data centres and AI infrastructure developers — Department of Industry (23 March 2026)
- AI.gov.au — National AI Centre guidance hub
Related glossary terms
Turn the policy position into a governance position
A short, free assessment benchmarks where your organisation stands against a structured AI governance model — useful precisely because much of the national guidance is voluntary.
This page is general information describing the state of Australian AI policy as at 8 June 2026, not legal or compliance advice. Policy and regulatory positions change; always confirm the current position against the primary government sources linked above and obtain advice from your own qualified counsel before relying on it.