Australian Standards for AI (proposed)¶
Purpose: Track the national AI standards the Australian Government has said it will legislate, from announcement through to law Audience: Executives, boards, risk, compliance and technology leaders | Time: 15-20 minutes
Status as at 19 October 2026: announced, not legislated
The Australian Government announced on 15 July 2026 that it will legislate Australian Standards for AI. National Cabinet endorsed mandatory data centre standards on 26 August 2026. The federal Joint Select Committee on Artificial Intelligence sent early advice to the Prime Minister on 12 October 2026 and reports in full by 30 November 2026. Legislation is expected in Parliament in early 2027.
No bill has been tabled. Nothing on this page is a current legal obligation. This page tracks proposals so that organisations can see the direction and prepare without over-reading it.
This page brings together the separate announcements, inquiries and recommendations that are shaping Australia's first national AI standards. Detail and sources for each strand live on the linked pages. This page exists to answer one question: what is coming, and will it apply to me?
Where the proposals come from¶
| Strand | Who | What it has produced so far | Where it is heading |
|---|---|---|---|
| Australian Standards for AI | Prime Minister; Office of AI in the Department of the Prime Minister and Cabinet | Announcement of 15 July 2026 that the Government will legislate a national framework, starting with large data centres and AI training (detail) | Bills expected early 2027 |
| National Cabinet | Commonwealth, states and territories | 26 August 2026 endorsement of mandatory national data centre standards covering energy, water, land use and skills; an AI infrastructure consultation that closed 9 October 2026 (detail) | Legislation through Commonwealth and state planning law, early 2027 |
| Joint Select Committee on Artificial Intelligence | Bipartisan committee of both Houses of Parliament | Early advice to the Prime Minister on 12 October 2026 recommending a risk-based framework, incident reporting, data sovereignty rules, literacy and skills programs, and procurement reform (detail) | Full report by 30 November 2026, expected to inform the bills |
| AI Safety Institute | Department of Industry, Science and Resources | Testing of frontier models, first published research on multi-agent risk (detail) | Advisory role; the committee recommends more funding and a formal place in incident reporting |
| South Australian Royal Commission into AI | SA Government | Commenced 1 October 2026 with terms of reference covering safeguards, SA regulation, simplifying rules for business, labour market and public services (detail) | Final report by 1 July 2027; the first state-level regulatory review |
| Privacy Act reforms | Attorney-General; Office of the Australian Information Commissioner | Automated decision-making transparency obligations legislated in 2024 (detail) | Commence 10 December 2026. Already law, and the first fixed date most organisations will meet |
Who is likely to be in scope¶
The proposals describe a proportionate, risk-based scheme, but none of them yet allocates obligations to organisation types. The table below is SafeAI-Aus's reading of where each strand points, not a statement of law or of the committee's position.
| Organisation type | What has been proposed, and by whom | How settled it is |
|---|---|---|
| Frontier AI developers operating in Australia | The committee's AI safeguards are expressly directed at "frontier AI developers deploying models and agents in Australia": model evaluation and safety testing, mandatory incident monitoring and reporting with deadlines, independent evaluators embedded in labs, early model access for the Australian Signals Directorate, reserved compute for the national interest | Clearest target of the advice |
| Data centre operators | The Government's July 2026 announcement targets large AI data centres (power supply, grid connection costs, demand reduction, water efficiency, location). The committee separately recommends nationally consistent standards for the development and operation of data centres generally, covering resource consumption, planning, community input and social licence, and penalties for non-compliance, applied through state and territory planning law | Two overlapping proposals with different scope; the bill will decide |
| Commonwealth agencies | DTA policy for the responsible use of AI in government, staged to 30 April 2027 (detail) | Already mandatory |
| AI vendors and cloud providers | The committee recommends requirements on the storage, processing, access, ownership, protection and use of data within AI systems, with safeguards on jurisdictional control, cross-border transfer and foreign access. It does not say who would carry the duty | Direction clear, duty-holder not yet specified |
| Organisations that deploy AI (most businesses, not-for-profits, state and local government) | Unresolved. The committee's safeguards section is scoped to frontier developers, but its recommendation 1© asks for a framework covering "the development and deployment of AI systems" with requirements including transparency, accountability, human oversight and ongoing monitoring. Whether, and how lightly, that reaches ordinary deployers is not settled by the letter. Privacy Act automated decision-making transparency applies from 10 December 2026 regardless, to entities already covered by the Act | Open question until the 30 November 2026 report and any bill |
| Australian AI companies | Pro-Australian government procurement and a register of sovereign AI companies with defined thresholds | Opportunity rather than obligation; thresholds not yet published |
Do not over-read the scope
The announced standards do not make the Guidance for AI Adoption (AI6) or the Voluntary AI Safety Standard mandatory for every organisation. They remain voluntary guidance. Where the committee's advice describes requirements such as transparency, accountability, human oversight and monitoring, the language matches those documents, which is why they are sensible preparation whatever the final scope.
What has been proposed, by theme¶
Risk-based framework. A proportionate framework for the development and deployment of AI systems, with requirements for model evaluation, safety testing, cybersecurity, transparency, accountability, human oversight and ongoing monitoring. Additional standards for advanced and frontier systems. A 12-month review.
Incident reporting. Frontier labs to monitor and report incidents to government within set deadlines. A standing parliamentary joint committee on AI that publishes incident details. Limited-use protections, modelled on the Intelligence Services Act 2001 and Cyber Security Act 2024, so that information furnished under a reporting duty cannot itself be used to apply penalties. The committee is explicit that this does not stop regulators conducting their own work and applying penalties if required.
Data sovereignty. Clear requirements on the storage, processing, access, ownership, protection and use of data within AI systems, with safeguards on jurisdictional control, cross-border transfer, foreign access, privacy and intellectual property. A review of government data repositories and a response to the review of the Data Availability and Transparency Act.
Data centres. The committee recommends nationally consistent standards for the development and operation of data centres, adopted by states and territories and implemented through planning law, covering resource consumption (including additionality of energy generation), planning and approvals, community input and social licence, and penalties and arrangements for non-compliance. The Government's own July 2026 proposal is narrower, aimed at large AI data centres. See AI Data Centres and Compute Governance.
AI literacy and skills. Programs and awareness campaigns to lift AI uptake and productivity, with small and medium enterprise uptake as a focus. A coordinated national approach to AI literacy, technical expertise, workforce transition and business adoption.
Procurement and sovereign capability. Pro-Australian government procurement rules. A government-maintained register of sovereign AI companies with thresholds and definitions. A national policy for domestic compute, research, model development and supply chains. Reserved compute capacity for national-interest uses.
Copyright. Resolution of how copyright material is treated in AI training, with Australian creators compensated.
International alignment. Standards interoperable with those of comparable jurisdictions, so that compliance in Australia is not a barrier to trade.
Sources for each theme are on the Government AI Policy and Frameworks page.
What to do now¶
The proposals are not law, and their final scope is unknown. But every strand points at the same basics, and they are useful whatever lands. None of this guarantees compliance with rules that have not yet been written.
- Know what AI you use. Keep a current register of AI systems, tools and vendors. AI Project Register
- Name who is accountable. One person owns each AI use, and the board or executive knows who. AI Use Policy
- Classify your data. Know which data can go into which tool, and make sure staff can apply the classification without a lawyer. AI Risk Assessment Checklist
- Record where vendors store and process data. If data sovereignty requirements are legislated, the practical effect for most organisations is likely to come through their vendors' terms and hosting. Ask the question now. AI Vendor Evaluation Checklist
- Have an incident process. Know what counts as an AI incident, who is told, and how fast. AI Incident Report Form
- Prepare for 10 December 2026. If AI or any automated process uses personal information to make decisions that significantly affect people, update your privacy policy to meet the new Privacy Act transparency obligations. Privacy Act detail
The AI Readiness Checklist covers all six.
Timeline¶
| Date | Development | Status |
|---|---|---|
| 15 July 2026 | Prime Minister announces Australian Standards for AI; Office of AI established | Announcement |
| 26 August 2026 | National Cabinet endorses mandatory national data centre standards | Intergovernmental commitment |
| 20 August 2026 | Joint Select Committee on Artificial Intelligence appointed | Inquiry |
| 14 September 2026 | Committee submissions close | Inquiry |
| 24 September 2026 | Government discloses unauthorised AI-agent access to a Services Australia statistics portal (incident of 18 June 2026) | Trigger event |
| 1 October 2026 | South Australian Royal Commission into AI commences | Inquiry |
| 9 October 2026 | National Cabinet AI infrastructure consultation closes | Consultation |
| 12 October 2026 | Committee sends early advice to the Prime Minister | Advice |
| 30 November 2026 | Committee full report due | Pending |
| 10 December 2026 | Privacy Act automated decision-making transparency obligations commence | Law |
| Early 2027 | Australian Standards for AI legislation expected in Parliament | Pending |
| 1 July 2027 | South Australian Royal Commission final report due | Pending |
Change log¶
This page is updated as the proposals move. Each entry is dated so readers can see what changed and when.
| Date | Change |
|---|---|
| 19 October 2026 | Page created. Covers the July announcement, National Cabinet decision, Joint Select Committee early advice of 12 October 2026, SA Royal Commission commencement and Privacy Act commencement date. |
Source confidence
The 15 July announcement is taken from pm.gov.au and PM&C material. The 26 August National Cabinet outcome is corroborated across independent legal and press sources but not yet confirmed against the primary communique (see the data centres page). The committee's advice is summarised from the letter itself. The committee recommends minimum standards "where appropriate supported by legislation" and asks the Government to identify which elements need legislative effect, so not every measure listed here is proposed as law. Coverage of ordinary AI deployers is an open question (see the scope table). Press coverage by ABC News and Capital Brief on 13 October 2026 corroborates the letter's existence and headline recommendations. The scope table is SafeAI-Aus's reading of the proposals and should be revisited when the committee's full report and any bill are published.
(Sources: Prime Minister of Australia; PM&C Office of AI; Parliament of Australia, Joint Select Committee on Artificial Intelligence; SA Department of the Premier and Cabinet; OAIC; accessed 19 October 2026)