Most Australian organisations

You're already using AI. Can you prove it?

If it makes or influences decisions about people, you will need to disclose it. Europe is already fining.

Consulting on the day. Software you keep. One Power Day gets the inventory, owners and evidence in place before it lands.

Book a Power Day demo What you walk out with ↓
10 December 2026

Automated-decision disclosures commence. Enacted law. Not a proposal, and not the 2027 standards bill.

Not the AI project someone scoped. The vendor features switched on by default, the prompts with customer details, the screening tool HR trialled last year. You need a record of what you already run. One Power Day builds it.

What the day actually is

One working day. Consulting in the room, software you keep — not a strategy workshop. You upload what you already have: policies, vendor lists, DPIAs, contracts, model documentation. Tipcan (ai-compliance.app) is the evidence system. Alan runs the product and the upload. Keith joins the intro and the wrap-up.

Walk out with

  • An AI inventory, started, including the vendor features nobody bought as an AI project
  • A named owner for every system on the list
  • Your existing documents uploaded into the evidence system
  • A gap list: what is missing, who is fixing it, by when
  • An export your counsel can read for the 10 December 2026 privacy-policy work

Walk out without

  • No badge, no certificate, nothing "certified"
  • No privacy policy rewritten and signed as if we were your lawyers
  • No claim that you are compliant or audit-ready

The day builds the evidence layer. Legal sign-off stays with your counsel. That is the point.

The dated map

Europe has an AI Act and is already fining. Australia is a patchwork: privacy law first, standards aimed at early 2027. What is law, what is announced, and what is still voluntary. Dates verified against primary sources on 3 September 2026.

Date Instrument Status Who it hits
Sep 2024 Voluntary AI Safety Standard (10 guardrails) and Guidance for AI Adoption Voluntary Anyone a board, customer or tender already asks
10 Dec 2024 Privacy and Other Legislation Amendment Act 2024 (Cth), Schedule 1 Part 15: ADM text inserted into APP 1 Passed; delayed commencement APP entities
May–Sep 2026 OAIC issues paper on the ADM obligation; expanded APP 1 guidance being added progressively Guidance around a statute APP entities writing privacy policies
15 Jul 2026 'AI in Australia's interests': Office of AI stood up in PM&C, Australian Standards for AI announced Announced; Office effective that day First subjects: large data centres; training on Australian creative works (no TDM exception)
20 Jul 2026 AI consumer-safety priorities Policy Consumer-facing automated systems
Aug 2026 National Cabinet consideration of the standards approach Process States and territories on infrastructure approvals
20 Aug 2026 Joint Select Committee on Artificial Intelligence appointed Inquiry; report due 30 Nov 2026 Anyone with a view on copyright, sovereignty, deepfakes, consumer law
10 Dec 2026 APP 1 automated-decision-making disclosures (subclauses 1.7 to 1.9) commence Binding law APP entities using in-scope ADM
Early 2027 Government aim: introduce enabling legislation for the Australian Standards for AI Announced target; no exposure draft Unknown beyond the first subjects. Coverage, regulator and penalties unsettled

Map first published by Cipher Projects on 31 August 2026. Primary sources are linked at the bottom of this page.

Four questions sort any AI use case

Including the ones nobody bought as AI. Every item in the inventory gets run through these on the day.

Law now

Does it process personal information?

Privacy Act 1988 and the Australian Privacy Principles. Prompts, logs, retrieved documents and vendor training opt-ins all count. The OAIC enforces this today.

Enacted, commences 10 Dec 2026

Does it make, or materially influence, decisions about individuals?

APP 1 subclauses 1.7 to 1.9: your privacy policy must describe the kinds of personal information used, and the kinds of decisions the program makes or feeds into. OAIC guidance is being expanded through 2026.

Law now, APRA entities only

Is the organisation APRA-regulated?

CPS 230 (operational risk) and CPS 234 (information security) apply. CPG 234 is guidance, not the standard. If you are not APRA-regulated, this row does not apply to you.

Law now

Does it affect customers, employees, applicants or vulnerable people?

Existing privacy, anti-discrimination, employment and consumer law. The ACCC took Trivago for $44.7m over a misleading recommendation engine. No AI Act was needed.

The 10 guardrails: still voluntary, still useful

Australia's Voluntary AI Safety Standard remains the checklist a tender, a board or an insurer will ask for. It creates no new legal duty. Your inventory gets mapped against it inside the software, but it is not the statute and it is not the product.

  1. Accountability and governance
  2. Risk management
  3. Data governance and protection
  4. Testing and monitoring
  5. Human oversight
  6. Transparency and disclosure
  7. Challenge and appeal processes
  8. Supply-chain transparency
  9. Record-keeping and audit readiness
  10. Stakeholder engagement and fairness

Who should be in the room

Two people minimum, three is ideal. More than that and the day turns into a meeting.

A sponsor with authority

Someone who can say yes to the inventory and yes to the owners, without taking it back to a committee.

One operator

The person who can show SSO logs, software spend and the vendor list. They find the AI nobody calls AI.

Legal as a user, not an observer

Counsel reads the export and owns the privacy-policy wording. They do not need to sit through the upload.

Book a Power Day

  • First cohort: 10 seats, operators Keith knows directly. After that, cohorts run at Alan's normal 20.
  • One working day per organisation. Remote or in the room.
  • Day fee confirmed on the demo. No badge upsell, no certificate, no multi-week engagement attached.
  • You keep the system and the export. We are not your lawyers and this is not an audit.

Start with 20 minutes

Alan demos the product, Keith is on the call. If it fits, we hold a seat in the first cohort.

Book the demo

Prefer email? [email protected] or grab a time directly.

The fine print, up front

Clear Direction AI is a Cipher Projects practice, not a law firm and not a compliance assessor. Nothing on this page is legal advice. Regulatory mapping is general guidance; verify it against official sources before you act. Sign-off on your privacy policy and ADM disclosures stays with your counsel.

We do not claim Australia has a dedicated AI Act, because it does not. We do not claim the day makes you compliant, because no single day does.

Primary sources: Privacy and Other Legislation Amendment Act 2024 (Cth) · OAIC APP 1 guidelines · OAIC ADM issues paper · AI in Australia's interests (PM&C) · Joint Select Committee on AI · Norton Rose Fulbright, August 2026

Last verified against primary sources: 3 September 2026.