AI Compliance Deadlines
Are Here.
Is Your Governance Ready?
CPS 230 is in force. Privacy Act ADM amendments land December 2026. The EU AI Act applies if you serve European customers. The regulatory window is closing.
PolyGovern helps regulated organisations build governance frameworks, run risk assessments, and stay compliant — across APRA, ASIC, Privacy Act, EU AI Act, and ISO 42001.
Upcoming: December 2026
Privacy Act automated decision-making amendments take effect
Financial institutions with AI governance gaps (ASIC REP 798)
Maximum EU AI Act penalty for non-compliance
Voluntary AI Safety Standard framework components
Sound Familiar?
Organizations implementing AI systems face questions about governance structures, risk management, and regulatory compliance requirements.
APRA CPS 230 and AI Risk Management
APRA's operational risk standard applies to AI systems used by regulated entities. This requires risk assessments, control documentation, and oversight of third-party AI vendors as material service providers.
Build your risk frameworkBoard Oversight and AI Governance
Governance frameworks need to address AI system inventory, approval processes, risk exposure, and accountability structures for board-level oversight.
Get governance frameworksEU AI Act for Australian Organizations
The EU AI Act applies to organizations placing AI systems in the European market, regardless of location. Full enforcement begins August 2026.
Understand your obligationsHow We Help
We work across the full AI governance lifecycle — from building frameworks to assessing systems to keeping you compliant.
Governance & Strategy
Build the frameworks, policies, and operating models your organisation needs to govern AI responsibly.
Assessment & Assurance
Evaluate your AI systems, identify risks, and get independent assurance that your governance holds up.
Compliance & Advisory
Stay compliant with Australian regulations, upskill your teams, and get ongoing expert support.
Australian Regulatory Frameworks
AI governance frameworks need to address Australian regulatory requirements. We help organizations design approaches that integrate APRA, ASIC, and Privacy Act obligations.
APRA CPS 230
Operational risk controls, third-party AI vendor management, and board oversight that satisfy prudential requirements.
In ForcePrivacy Act Amendments
Automated decision-making transparency requirements take effect 10 December 2026. Organizations must update privacy policies for ADM systems.
10 December 2026EU AI Act
Risk classification, conformity assessment, and technical documentation for any Australian company with EU customers.
August 2026 DeadlineSector-Specific AI Governance
Banking, insurance, superannuation, healthcare, and government sectors each have specific regulatory requirements for AI systems.
Regulatory Timeline
Key dates for Australian AI regulatory requirements and international frameworks.
Operational risk management requirements now apply. AI systems are in scope.
APRA material service provider register now required - AI vendors included.
Full enforcement begins. Penalties up to 7% of global revenue for non-compliance.
Automated decision-making transparency requirements take effect.
Discuss Your AI Governance Requirements
We can help assess your current governance structures and identify areas where frameworks may need development to address regulatory requirements.