Privacy Act · CPS 230 · EU AI Act · ACL · ISO 42001
Your staff are already using AI. Your obligations already apply.
Answer a short set of questions, tailored to how AI is actually used in your business. Get back a board-ready report: the specific legal duties you've triggered, the deadlines attached, and a 90-day plan to close the gaps. Built for Australian organisations, on a verified library of primary sources.
From a real report. One of 32 duties the engine checks
Automated decision-making transparency
Sch 1 · Privacy Amendment Act 2024Due 10 Dec 2026OAIC
Your privacy policy must describe decisions made or substantially assisted by computer programs using personal information. Fix: inventory every decision AI touches, then update the policy before commencement.
What comes out the other side
An obligation ledger, not a score out of ten
Every duty your answers trigger, named to the clause: the instrument, the regulator, the severity, and the specific fix. Privacy Act, CPS 230, EU AI Act, consumer law, discrimination law and more.
The deadlines that are already running
ADM transparency lands 10 December 2026. EU AI Act transparency duties apply from 2 August 2026. The CPS 230 transition closed on 1 July 2026, so the standard now applies in full. Your report shows which clocks apply to you.
A 90-day plan your board can adopt
Sequenced remediation: governance foundations first, critical obligations next, the rest staged. Print it and it is the board paper.
This is for you if
- You run, advise or sit on the board of an Australian organisation roughly $5M to $500M in revenue
- Staff are using Copilot, ChatGPT or AI features inside your SaaS stack (sanctioned or not)
- Someone has asked “what’s our AI policy?” and the honest answer is a shrug
- You’re APRA-regulated, supply someone who is, or sell into the EU
Why trust a free assessment
The engine is deterministic: the same answers always produce the same report. Every entry in the obligation library is maintained against primary sources: legislation, regulator publications, official guidance. When the law moves, the library moves. When the December 2025 National AI Plan set aside the proposed mandatory guardrails, this engine was corrected the same way.
Nothing is generated, nothing is improvised, and your assessment answers are processed in your browser and not stored on our servers unless you ask us to help. Read the full methodology.
“We're not regulated, so this doesn't apply to us.”
Every Australian business is regulated; most just never meet their regulator. The Australian Consumer Law applies from your first dollar. The Privacy Act applies once turnover passes $3 million, and earlier for health data. Directors' duties applied before you hired anyone. Anti-discrimination law covers your first AI-screened candidate. And your biggest customer's procurement questionnaire enforces all of it with a deadline.
The question was never whether rules apply. It is which ones, and what they cost when ignored. That is exactly what the report answers, for your answers, not someone else's.
Built for your world
Questions people ask first
Is it actually free?
Yes. The assessment, the on-screen report, the PDF and printing are free. Leaving an email for obligation-change updates is optional.
Where do my answers go?
They stay in your browser and your report is generated on your device, unless you ask us to help (email your report or book a call), when we keep your assessment so a specialist can support you. We also keep anonymous aggregate statistics, stored in Sydney, Australia, for sector benchmarking. Details are in the privacy statement.
Is this legal advice?
No. It is a structured map of which duties your answers point to, with sources, built to make the conversation with your board and your lawyer faster and cheaper. The methodology explains exactly how it works.
Is it only for Australia?
This is the Australia Edition: built on Australian law, plus the EU AI Act where it reaches Australian businesses. It also flags your New Zealand and Singapore obligations when you operate in those markets. Dedicated NZ and Singapore editions are next.
Who is behind it?
The team behind AIRiskAware, a verified library of AI governance intelligence maintained against primary sources.
I have no board. Does it still apply?
Yes. The duties attach to whoever runs the business: a board, owners or an executive team. The questions are written for all three.