Know what changed — and which AI system it affects.
Turn regulator signals into control changes, evidence actions and architecture reviews instead of another compliance reading list.
From regulator signal to engineering action.
Every item should answer the buyer question: what changed, where does it apply, and what control or evidence now needs review?
APRA and ASIC are urging financial-market entities to move from awareness of frontier-AI risks to concrete action, with focus on cyber, technology and operational risk controls.
The AI Act became broadly applicable on 2 August 2026, while GPAI rules have applied since August 2025 and the high-risk timelines now extend to December 2027 and August 2028.
Following the AI Omnibus, Annex III high-risk AI rules apply from 2 December 2027 and rules for high-risk AI embedded in regulated products apply from 2 August 2028.
APRA says AI governance, risk management, assurance and operational resilience practices are not keeping pace with adoption, and has signalled stronger supervisory action where AI risks are not adequately managed.
Australia’s Guidance for AI Adoption, published in October 2025, sets out six essential practices for safe and responsible AI governance and evolves the earlier Voluntary AI Safety Standard.
Obligations for providers of general-purpose AI models have applied since 2 August 2025, including technical documentation, copyright policy and public training-content summaries, with additional duties for systemic-risk models.