An AI policy sets the rules for how people in your organisation use AI tools: which tools, for what, with which information, and who checks the results. Here's what it should cover in Australia, and how AI is regulated there.
Australia has no standalone AI Act. The National AI Plan (December 2025) confirmed that AI is governed by existing laws, such as privacy, consumer, workplace and online safety law, and that the proposed mandatory guardrails won't be introduced.
From 10 December 2026, organisations covered by the Privacy Act must explain in their privacy policy when computer programs, including AI, make or help make decisions that could significantly affect people.
The National AI Centre's Guidance for AI Adoption sets out six voluntary governance practices, and replaced the earlier Voluntary AI Safety Standard.
A general summary, checked on 27 October 2026 against the sources in the regulations tracker. It isn't legal advice.
Which AI tools may receive personal information, which never may, and what must be removed first.
Which tools make or help make decisions about people, who reviews them, and how your privacy policy describes them.
A list of approved tools with an owner each, and how staff ask for a new one.
A short induction before first use, and a record that staff have read the policy.
Why the policy exists and who it applies to: staff, contractors, any device used for work.
Which AI tools are approved, what each may be used for, and who owns each one.
What information may go into each tool, what never may, and what must be removed first.
Uses that are off limits, with examples from your own work.
Who checks AI output before it's used, and how much, scaled to the risk.
When customers, staff or others are told that AI was used.
How to report a mistake or misuse, to whom, and how quickly.
Training before first use, a signed acknowledgement, and when the policy is reviewed.
Answer a few questions and get a short AI use policy for your organisation, free to copy or download as a Word document. No account needed.
The AI Policy & Risk Pack is written from your answers about how your organisation uses AI, for Australia. Preview every section free before you pay. It's a starting point to review and adopt, not legal advice.
Launch price for the first 20 packs sold: 13 of 20 left. Then A$319 incl. GST.
Prices in Australian dollars, including GST. A tax invoice is provided.
Organisations covered by the Privacy Act must describe in their privacy policy when computer programs, including AI, make or help make decisions that could significantly affect people, using their personal information.
The Australian Government's National AI Plan confirmed there will be no standalone AI Act and that the proposed mandatory guardrails for high-risk AI won't be introduced. AI is regulated through existing laws, such as privacy, consumer, workplace and online safety law, with changes considered where gaps appear. A national AI Safety Institute is being set up.
The National AI Centre's Guidance for AI Adoption sets out six governance practices for organisations using AI. It effectively replaces the earlier Voluntary AI Safety Standard and its ten guardrails. It is voluntary.
No general law requires every organisation to have a document called an AI policy. But existing obligations, such as privacy law, apply to how staff use AI tools, and a written policy is a common way to set those rules and show staff what they are.
Organisations covered by the Privacy Act must describe in their privacy policy the kinds of personal information their computer programs use, and the kinds of decisions those programs make or help make, where the decisions could significantly affect people.
Yes. Packs for Australian organisations use Australian spelling and date formats, and prices are shown in Australian dollars including GST.
