AI law in Australia

Get the build plan for Australia

The guards that cover the most here

41 guards address 56 items across 1 jurisdiction with binding law: 2 binding law in force, 1 enacted but not yet applying, 29 standards and frameworks, 24 TwinEthos recommended guardrails.

1. Synthetic content not machine-readable-marked

   Mark every generated image, audio, video, or text output with machine-readable provenance, such as a signed C2PA manifest or watermark, before it is saved, served, or published.

   Addresses 2 items: 1 binding law in force · 1 standard

   Law in force in Australia (AU).

2. GenAI capable of producing non-consensual intimate imagery or CSAM without safeguards

   Classify prompts, uploads, and outputs for sexual content and minors on every image, video, or audio generation path, refuse sexual edits of real people, and keep a misuse-report route.

   Addresses 1 item: 1 binding law in force

   Law in force in Australia (AU).

3. The privacy policy does not describe the decisions computer programs make or help make with personal information

   Keep an automated-decisions section in the privacy policy, generated or checked against the decision paths in code.

   Addresses 1 item: 1 enacted, not yet applying

   enacted, not yet applying in Australia (AU); next date 2026-12-10.

4. Adverse AI decision without explanation/appeal

   Send each adverse AI-assisted decision with its main reasons and the AI's role, plus a way to correct data and appeal to a human who can change the outcome.

   Addresses 3 items: 2 standards · 1 recommended guardrail

5. AI chat interaction without disclosure

   Show an AI-identity notice at or before the first assistant turn, in the UI or as the opening message, and answer truthfully when asked if it is a bot.

   Addresses 3 items: 2 standards · 1 recommended guardrail

6. Untrusted content influences instructions or tools

   Keep fetched, retrieved, and tool-returned content out of the system prompt, pass it as delimited data, and restrict which tools a turn holding that content can call.

   Addresses 3 items: 2 standards · 1 recommended guardrail

7. Agent actions not traceable to identity and owner

   Give each agent its own credential and a registry entry naming an accountable owner, and log every tool action with agent_id, owner, action, target, and timestamp.

   Addresses 2 items: 1 standard · 1 recommended guardrail

8. Agent high-impact action without human approval

   Classify agent tools by impact and route every high-impact or irreversible call through an enforced human-approval step in the executor, with the decision logged.

   Addresses 2 items: 1 standard · 1 recommended guardrail

9. AI usage, agent steps, and spend not bounded

   Cap agent steps and output tokens on every model call, set per-key and per-project budgets with usage alerts, and issue scoped, expiring model keys.

   Addresses 2 items: 1 standard · 1 recommended guardrail

10. GenAI in consequential decisions without confabulation/output-validation controls

    Validate GenAI output against a schema and its cited sources, and send unverifiable claims to review, before it drives a consequential decision or record.

    Addresses 2 items: 1 standard · 1 recommended guardrail

The top 10 of 41; the build plan ranks all of them and lets you narrow by AI feature.

By AI feature

Plans for one feature in Australia:

• Decisions about people (hiring, credit, insurance, health)
• Generated text, images, audio or video
• Classification, scoring or biometrics

Laws

• Australia Online Safety (DIS - Class 1A and 1B Material) Industry Standard 2024 Australia (AU)
• Australia Privacy Act APP 1.7-1.9 (automated decisions in privacy policies) Australia (AU)

Coming into force

• 10 Dec 2026: State in the APP privacy policy the personal information computer programs use and the decisions they make or substantially help make (Australia, APP 1.7-1.9) (Australia (AU))