Updated 20 October 2026. The Attorney-General’s Department ran an earlier consultation that may be related to the automated decision-making framework. From 13 November 2024 to 15 January 2025 it held a public consultation on the government’s use of automated decision-making (ADM), and it says it will use the feedback to inform the implementation of recommendation 17.1 of the Royal Commission into the Robodebt Scheme. Its consultation summary, a PDF created in August 2025, gives the next step: Feedback from this consultation process is being considered in the development of a consistent framework for the use of ADM in the delivery of government services. Neither gives a date. The 20 July release does not mention that consultation, so we cannot say whether its framework is the same work, though the release gives the Attorney-General the lead on its framework and the consultation concerned a framework for automated decisions in government. On 20 October the department’s consultation page showed feedback updated on 22 August 2025, and no framework or date.

Updated 16 October 2026. The Digital Duty of Care is now a bill before Parliament: the Online Safety Amendment (Digital Duty of Care) Bill 2026 was introduced on 15 October, with its main duty starting 12 months after Royal Assent. What the introduced bill does for AI services.

Corrected 4 October 2026. The headline, standfirst and summaries of this story said each priority has a different lead minister. The joint release names four lead ministers for the five priorities: the Attorney-General leads both the privacy reform and the automated decision-making framework, as the list below shows. The headline now says four lead ministers.

Updated 4 October 2026. Two of the five priorities now have draft legislation, though neither has a start date. On 31 August the Attorney-General released an exposure draft Privacy Amendment (Personal Data Protection) Bill 2026 and a consultation paper, with submissions closing 18 September. On 8 September the government released an exposure draft Online Safety Amendment (Digital Duty of Care) Bill 2026 for feedback by 22 September; the Prime Minister's release says its obligations extend to AI chatbots and that legislation will be introduced to Parliament this year. On workplace AI safety, the Employment Minister said on 18 September that five consultations will inform Australia's first best practice guidance for AI in the workplace, with no date given. We found nothing published since 20 July on the consumer-law options or the federal automated decision-making framework. The OAIC guidance described below as due by September was published on 30 September; we cover it in What counts as an automated decision under the 10 December privacy rule: the regulator's answer is almost everything. The headline now reflects the draft bills; the story below is as published on 31 July.

The release is framed as delivery, not novelty: the government says the priorities “leverage and accelerate ongoing efforts”, and that the National AI Plan makes clear that to fully realise these benefits, Australians must have confidence that AI is being developed and deployed safely. So this is the safety half of the plan, made concrete. Here is the list, with the lead minister the release names for each.

The five, and who owns them

  • Duty of Care – legislate a Digital Duty of Care putting the onus on AI companies to build in safety by design and proactively address potential harm. Led by the Minister for Communications.
  • Privacy – consult on a second tranche of privacy reform to “strengthen, modernise and simplify” personal data protection law. Led by the Attorney-General.
  • AI safety in the workplace – pursued as one of the five agreed priority areas of the tripartite Artificial Intelligence Workplace and Employment Forum. Led by the Minister for Employment and Workplace Relations.
  • Consumer protections – examine options in Australian consumer law for consumer risks, naming retail surveillance pricing and agentic commerce. Led by the Assistant Minister for Productivity, Competition, Charities and Treasury.
  • A framework for automated decision-making – to better regulate ADM within federal agencies. Led by the Attorney-General.

Two of those deserve to be read twice. Agentic commerce is an AI agent transacting on your behalf, and naming it as a consumer-law question rather than a technology question is a choice. Retail surveillance pricing is charging different people different prices from what a seller knows about them. Neither is speculative and neither is currently the subject of a named Australian law.

The automated decision-making strand is now three separate things

This is where reading the beat over time pays, because the ADM priority is easy to mistake for something already underway. It is a third track, and the three do not cover the same ground:

  • A transparency obligation on private-sector APP entities, already law, commencing 10 December 2026 under the Privacy and Other Legislation Amendment Act 2024. It requires disclosure in a privacy policy of the kinds of personal information used, and the kinds of decisions made, by computer programs that significantly affect rights.
  • OAIC guidance on that obligation, which the regulator has said in writing it intends to release by September 2026, before commencement.
  • The new framework announced on 20 July, for ADM within federal agencies. No commencement, no consultation date, no instrument named. (The Attorney-General’s Department consulted from November 2024 to January 2025 on a framework for automated decisions in government. We cannot say whether it is the same work: see the note of 20 October.)

So the private sector gets a dated disclosure duty this December, and the Commonwealth gets a framework to be developed. The release itself gives the reason for the second, and it is a candid one: the importance of ensuring fair, accurate and transparent government decision-making.

Why that ordering is worth noticing

Our view, labelled as such, and built on the sourced facts above plus one number from the government’s own survey. The least-accepted use of AI among Australians is not facial recognition and it is not chatbots. It is automated eligibility or risk decisions, the loans-and-benefits category, accepted by 25 per cent in the 2026 Australian Community Attitudes to Privacy Survey. That is the category federal agencies are most likely to be in. The same survey found 96 per cent of Australians want conditions attached before AI makes a decision about them, a figure unchanged since 2023.

The strand of ADM where public acceptance is lowest is therefore the strand that got a framework to be developed rather than a date. That is not evidence of bad faith: regulating your own agencies is genuinely harder than imposing a disclosure duty on others, and doing it badly would be worse than doing it slowly. But it is the part a reader should keep a diary note against, because it is the part with nothing to check against yet.

What the release also claims, and what we did not verify

The government says the priorities build on the AI Safety Institute, which it says has commenced safety testing of frontier AI systems, established research partnerships with the CSIRO including alignment research, finalised a project on multi-agent risk with the Gradient Institute, and is collaborating through the International Network for Advanced AI Measurement, Evaluation and Science. It also points to legislated criminal offences banning the sharing of non-consensual sexually explicit deepfake material, and to work to ban nudify apps.

Those are the government’s descriptions of its own work. We have reported them as such and have not independently examined the Institute’s testing, the CSIRO partnership or the Gradient Institute project, so nothing here is a finding about whether any of it is working.

The honest summary

The guardrails process asked one question: should high-risk AI be regulated by a single dedicated instrument, up to an Australian AI Act? The answer, now visible, is no. Australian AI safety is being done through the laws that already exist, each owned by the minister who already owns that law: communications, privacy, workplace relations, consumer law, public administration. That is a coherent position and a defensible one. It also means anyone asking what are the AI rules in Australia? will not find them in one place, and that the answer changes depending on which of five workstreams reaches legislation first, on a timetable none of them has published.

How we sourced this

The 20 July 2026 date, the joint authorship and the six ministers named, all five priorities and the lead minister attributed to each, the wording of the Duty of Care, privacy, workplace, consumer-law and ADM items including “retail surveillance pricing” and “agentic commerce”, the framing that the priorities “leverage and accelerate ongoing efforts”, the claims about the AI Safety Institute and its CSIRO and Gradient Institute work, and the references to deepfake offences and nudify apps are from the joint ministerial media release “AI consumer safety priorities”, read in full on 31 July 2026.

The 10 December 2026 commencement of the private-sector ADM transparency obligation under the Privacy and Other Legislation Amendment Act 2024, and the OAIC’s stated intention to publish guidance by September 2026, are from the OAIC’s Automated Decision-Making Issues Paper (May 2026), which we hold and read earlier in this beat. The 25 per cent and 96 per cent figures are from the 2026 Australian Community Attitudes to Privacy Survey report, which we read in full and reported separately.

We have not read any draft of the five workstreams, because none is published. The statement that no priority carries a published date describes the release we read, not the whole of government: a date may exist elsewhere and we did not find one. The section headed Why that ordering is worth noticing and the closing summary are our opinion, built on the sourced facts above, and no claim is made about the conduct of any minister, agency or company.

Sources

Method note. Written substantially by AI and run by people, working from the primary sources below. How AI Geek works.

  1. Senator the Hon Tim Ayres and others, AI consumer safety priorities (joint media release, 20 July 2026, read in full 31 July 2026): the five priorities and their lead ministers, the Digital Duty of Care, the second tranche of privacy reform, the AI Workplace and Employment Forum, retail surveillance pricing and agentic commerce, the federal-agency ADM framework, the AI Safety Institute claims, and the deepfake and nudify-app references.
  2. Office of the Australian Information Commissioner, Automated Decision-Making Issues Paper (May 2026): the 10 December 2026 commencement of the ADM transparency obligation under the Privacy and Other Legislation Amendment Act 2024, and the OAIC's stated intention to release guidance by September 2026.
  3. AI Geek, Four per cent of Australians trust AI companies: our reading of the 2026 Australian Community Attitudes to Privacy Survey, the source of the 25 per cent and 96 per cent figures.
  4. AI Geek, Australia's mandatory AI guardrails are gone: our earlier reporting on the process these priorities replace.
  5. Attorney-General’s Department, Automated Decision-Making Reform (consultation page, open 13 November 2024 to 15 January 2025, feedback updated 22 August 2025, read 20 October 2026): the consultation and its link to recommendation 17.1 of the Royal Commission into the Robodebt Scheme.
  6. Attorney-General’s Department, Automated Decision-Making Reform: Public Consultation Summary (3 pages, PDF created August 2025, read 20 October 2026): the next step.

Spotted an error? Tell us and we will check it against the sources and log the outcome here.