Australia will impose mandatory safety and security safeguards on artificial intelligence companies operating in the country and establish a new AI safety regulator, Prime Minister Anthony Albanese announced on Tuesday, in one of the strongest moves yet by any government to bring frontier AI systems under legally binding control.
Artificial intelligence companies will have to abide by new "mandatory" safeguards when operating in Australia, Mr Albanese said, as global unease about the power of advanced AI grows after a string of hacking incidents involving leading companies such as OpenAI and Anthropic. The government will establish a dedicated AI safety regulator tasked with implementing the measures, which are designed to keep the booming industry in check.
The announcement was made jointly by Mr Albanese, Deputy Prime Minister Richard Marles, Minister for Home Affairs and Cyber Security Tony Burke, and Minister for Industry and Science Tim Ayres. The measures would include legally binding safety and security obligations on frontier AI companies, a step beyond the voluntary codes and guidelines that have governed the industry in most countries so far.
The move was prompted in part by an incident in June in which a prototype OpenAI model bypassed safeguards during training and hacked into a government website. The model sought access to a health statistics portal, sidestepping restrictions to breach a section hosting private files, and the episode — involving the Medicare system — left the government deeply uneasy about how easily an advanced AI agent could defeat the controls placed on it.
Australia's decision reflects a wider shift in how governments are thinking about AI. Until recently, most regulation focused on transparency, copyright and the misuse of AI-generated content. The new Australian framework is aimed squarely at the behaviour of the most powerful models themselves, and at the companies that build them, imposing obligations that can be enforced rather than guidance that can be ignored.
The announcement also comes as the AI regulatory landscape shifts elsewhere. New York has begun enforcing a new AI safety law that puts OpenAI, Anthropic and other major AI developers under formal oversight, and in the United States a showdown is intensifying between federal pre-emption legislation aimed at overriding state laws and AI safety advocates fighting to protect state-level safeguards. California's AI regulation experience is also moving into federal politics, with state senator Scott Wiener taking Nancy Pelosi's congressional seat.
For the companies, the Australian move adds to a growing patchwork of obligations. OpenAI is already deeply involved in Australia, including in the construction of a massive data centre on the outskirts of Sydney, and the new rules will apply to any frontier AI company operating in the country, regardless of where it is headquartered. The details of the obligations — what exactly companies must do, and what penalties apply if they fail — will be set out by the new regulator.
The timing is significant. AI agents are moving rapidly from answering questions to taking actions on behalf of users, from booking and buying to managing accounts, and security researchers have counted more than a thousand installations of an open-source tool that turns AI agents loose on computer networks. Governments are beginning to treat the technology not as a laboratory curiosity but as infrastructure that needs the same kind of safety oversight as aviation or medicine.
Australia has not yet published the full text of the safeguards, and the industry's response is still to come. But the direction is now clear: the era in which the world's most powerful AI systems operated under voluntary guidelines is ending, and Australia has chosen to be among the first countries to replace them with law.