Policy & Governance
This section explains how laws, directions, policy, standards and research affect consequential institutional work. Coverage includes Australian and international material, particularly OECD research, alongside DataMPowered's published policy contributions.
Entries are grouped as Requirements & Guidance, Governance in Practice, or DataMPowered Policy Contributions. The collection is growing; only verified briefings and canonical research links are listed. This is not legal advice.
Where the statutory test is met, APP entities may need to disclose computer-program participation in consequential decisions from 10 December 2026. Operational readiness depends on knowing which decisions are in scope.
Privacy and Other Legislation Amendment Act 2024 (Cth), APP 1.7 to 1.9 · Office of the Australian Information Commissioner (OAIC)
Commonwealth entities operate under DTA Policy for the responsible use of AI in government (v2.0) alongside the nationally agreed framework for assurance of AI in government (June 2024). This briefing maps the relationship; it does not replace either instrument.
Policy for the responsible use of AI in government (v2.0) and National framework for the assurance of artificial intelligence in government · Digital Transformation Agency (policy); Data and Digital Ministers Meeting / Department of Finance (national assurance framework)
NSW agencies use the AI Assessment Framework to register and assess AI use cases. Assessment should connect to lifecycle evidence, accountable officials and reviewable outcomes, not only form completion.
NSW AI Assessment Framework · NSW Government (Digital NSW)
Mandatory Direction 002-2026 requires Commonwealth entities to reduce cyber risks from vulnerable legacy technology systems and strengthen cyber posture against AI-enabled risks (per PSPF publications summary).
Direction 002-2026 on Strengthening Commonwealth Cyber Posture Against AI-Enabled Risks · Attorney-General's Department (Protective Security Policy Framework)
