Information Governance in the AI age
The United States is prioritising frontier-model security review and national-security cooperation while continuing to resist comprehensive national AI regulation. The United States has directed the development of a voluntary pre-release security review framework for certain proprietary models with advanced cyber capabilities. Under Executive Order 14409, developers would be able […]
The European Union is commencing key AI Act transparency requirements while simplifying and extending parts of its high-risk regulatory regime. The European Union is simultaneously implementing and modifying its AI framework. From 2 August 2026, Article 50 of the AI Act applies to providers and deployers of specified AI […]
On 29 June 2026, the Council of the European Union gave final approval to the regulation simplifying aspects of the implementation of the EU AI Act, commonly described as the Digital Omnibus on AI. The measure forms part of the EU’s wider ‘Omnibus VII’ simplification package. The application of […]
The Vatican’s Antiqua et nova, Note on the Relationship Between Artificial Intelligence and Human Intelligence, frames AI as a question of human dignity, judgement, moral responsibility and the limits of technology. For governance professionals, that ethical frame matters because many organisational AI controls can become too procedural if they are […]
On 2 June 2026, The White House issued an Executive Order, Promoting Advanced Artificial Intelligence Innovation and Security. The order emphasises collaboration with the private sector to modernise government and private sector information systems, harden systems against external threats, protect American ingenuity and intellectual property, and cultivate advanced AI-enabled capabilities. […]
On 26 March 2026, the White House released its National Policy Framework for Artificial Intelligence together with legislative recommendations, which builds on America’s AI Action Plan released in July 2025 and the 11 December 2025 Executive Order – Ensuring a National Policy Framework for Artificial Intelligence. Taken together, these documents set out the […]
The EU AI Act and the accompanying Digital Omnibus package are among the most significant AI regulatory developments globally in 2026, and provide a useful reference point for Australian organisations preparing for December 2026 changes to the Privacy Act 1988 (Cth). Europe remains the leading jurisdiction for detailed AI regulation; however, the […]
The Information Commissioner’s Office (ICO) has published detailed guidance titled Explaining decisions made with artificial intelligence, designed to help organisations meet transparency and accountability obligations where AI systems are used to make or support decisions about individuals. Although developed in the context of UK data protection law, including recent reforms under the UK Data […]
Artificial intelligence has become a defining technology of economic competitiveness, public sector transformation and geopolitical strategy. As governments respond to both the opportunities and the systemic risks created by advanced AI, their regulatory choices reveal diverging approaches and strategic priorities. The Bletchley Declaration of November 2023 marked a significant […]
On 26 August 2025, the United Nations Secretary-General announced the establishment of two new mechanisms to promote international cooperation on the governance of artificial intelligence (AI) a Global Dialogue on AI Governance, alongside an Independent International Scientific Panel on AI, to sit within the UN framework and ensure inclusive, science-based policymaking on […]
he European Commission’s General‑Purpose AI (GPAI) Code of Practice, published on 10 July 2025, offers a voluntary compliance framework that helps model providers align with transparency, copyright, and safety obligations under the EU AI Act. While not legally binding, signing the Code affords organisations reduced administrative burden and greater legal […]
On 23 July 2025, the White House released its comprehensive America’s AI Action Plan, outlining the AI strategy under Executive Order 14179 with three core pillars: Accelerating AI Innovation, Building U.S. AI Infrastructure, and Leading International AI Diplomacy & Security. The Plan adopts a deregulatory stance, aiming to remove red […]
As part of the Paris AI Action Summit, Privacy and Data Privacy Commissioners from Australia, Korea, Ireland, France and the UK signed a joint statement to reaffirm commitment to establishing data governance that fosters innovative and privacy-protective AI. That statement sets out that, ‘AI should be developed and deployed in […]
On 7 February 2025, the OECD launched the reporting framework for monitoring the application of the Hiroshima Process International Code of Conduct for Organizations Developing Advanced AI Systems. This is a significant step in international AI governance, reinforcing the G7’s commitment to ensuring the safe, secure, and trustworthy development, deployment, and […]
On 18 December 2024, the European Data Protection Board (EDPB) adopted an opinion (pursuant to Article 64(2) of the GDPR) on the use of personal data for the development and deployment of AI models. The opinion deals with three matters: Anonymity, the opinion says that whether an AI model is anonymous […]
On 5 September 2024, the Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law (CETS No.225) (‘the treaty’) was signed by the UK, US, the EU, Andorra, Georgia, Iceland, Israel, Norway, the Republic of Moldova and San Marino. The treaty aims to ensure that […]
The first comprehensive AI law, the EU’s Artificial Intelligence Act 2024/1689 entered into force on 1 August 2024. While the AI Act will be fully applicable from 2 August 2026, some parts will be applicable sooner. The ban of AI systems posing unacceptable risks will apply from 2 February 2025. Unacceptable risk […]
The OECD has published a report mapping the principles set out in the OECD Privacy Guidelines to the OECD AI Principles. As explained in the report, ‘AI and privacy policy communities often address these issues independently, with approaches that vary between jurisdictions and legal systems. These silos can generate misunderstandings, add complexities […]
The European Parliament and Council of Europe have now approved the landmark EU Artificial Intelligence Act (AI Act). The AI Act takes a risk-based approach and categorises AI systems into four levels of risk – prohibited, high-risk, limited-risk, and minimal risk applications. AI practices that are prohibited include those using deceptive […]
The European Data Protection Supervisor (EDPS) has published its guidelines on generative Artificial Intelligence and personal data for EU institutions, bodies, offices and agencies (EUIs). The guidelines aim to help EUIs comply with the data protection obligations set out in Regulation (EU) 2018/1725, when using or developing generative AI tools. Wojciech Wiewiórowski, […]
