Policy & Governance
This section explains how laws, directions, policy, standards and research affect consequential institutional work. Coverage includes Australian and international material, particularly OECD research, alongside DataMPowered's published policy contributions.
Entries are grouped as Requirements & Guidance, Governance in Practice, or DataMPowered Policy Contributions. The collection is growing; only verified briefings and canonical research links are listed. This is not legal advice.
Where the statutory test is met, APP entities may need to disclose computer-program participation in consequential decisions from 10 December 2026. Operational readiness depends on knowing which decisions are in scope.
Privacy and Other Legislation Amendment Act 2024 (Cth), APP 1.7 to 1.9 · Office of the Australian Information Commissioner (OAIC)
ASD ISM system-access guidance requires a unique identity per AI agent (ISM-2133) and an organisation-wide AI agent register (ISM-2134). Authentication and access control are foundations; they do not establish authority for a particular institutional act.
ISM Guidelines for system access (AI agent controls) · Australian Signals Directorate (Australian Cyber Security Centre)
Commonwealth entities operate under DTA Policy for the responsible use of AI in government (v2.0) alongside the nationally agreed framework for assurance of AI in government (June 2024). This briefing maps the relationship; it does not replace either instrument.
Policy for the responsible use of AI in government (v2.0) and National framework for the assurance of artificial intelligence in government · Digital Transformation Agency (policy); Data and Digital Ministers Meeting / Department of Finance (national assurance framework)
Published parliamentary and research contributions that set out DataMPowered's policy propositions on institutional capability, authority and accountable AI-supported work. They are not government guidance.
DataMPowered submissions and position research (selected) · DataMPowered Pty Ltd
NSW agencies use the AI Assessment Framework to register and assess AI use cases. Assessment should connect to lifecycle evidence, accountable officials and reviewable outcomes, not only form completion.
NSW AI Assessment Framework · NSW Government (Digital NSW)
OECD qualitative research based on practitioner interviews on how agentic AI is developed, deployed and governed in organisations (Artificial Intelligence Papers; official publication record).
Agentic AI in organisations: Early insights from practitioner interviews · Organisation for Economic Co-operation and Development (OECD)
OECD Council recommendation (LEGAL/0503) sets a principles-based framework for designing and delivering public administrative services with people's needs as the primary consideration.
Recommendation of the Council on Human-Centred Public Administrative Services · Organisation for Economic Co-operation and Development (OECD)
Mandatory Direction 002-2026 requires Commonwealth entities to reduce cyber risks from vulnerable legacy technology systems and strengthen cyber posture against AI-enabled risks (per PSPF publications summary).
Direction 002-2026 on Strengthening Commonwealth Cyber Posture Against AI-Enabled Risks · Attorney-General's Department (Protective Security Policy Framework)
