AI Regulation in Australia: 2026 Guide for Retailers

AI regulation in Australia already covers retailers through consumer, privacy and anti-discrimination laws. The government is also developing national AI standards legislation. Those proposed standards are separate from the duties your store already has when an AI tool answers customers or creates advertising.

Your store remains responsible for its customer-facing claims. Start with the answers your AI gives about products and refunds, then examine how it handles customer information. This guide is general information. Get legal advice about the rules that apply to your store.

Where AI Regulation in Australia Stands

Australia’s approach combines existing laws with voluntary guidance and proposed new standards. The Department of Industry, Science and Resources (DISR) sets out the existing-law foundation in the National AI Plan.

Measure	Status	What it means for a retailer
Consumer, privacy and anti-discrimination laws	Binding where they apply	Using AI doesn’t remove your existing duties.
AI Ethics Principles, Voluntary AI Safety Standard and Guidance for AI Adoption	Voluntary guidance	Use these to organise safer AI use. They don’t replace legal compliance.
National AI Standards legislation	Being developed	Treat the announced approach as proposed requirements until legislation establishes the duties.
Automated decision-making privacy disclosures	Legislated, with commencement still ahead	Covered businesses must prepare for the applicable privacy-policy duties.

The Safe and Responsible AI in Australia consultation began in 2023. The government’s interim response in 2024 led to consultation on mandatory guardrails for high-risk AI. It also led to voluntary guidance for businesses.

The 2025 National AI Plan kept existing laws at the centre of regulation. The government has since announced new Australian AI standards and plans legislation in 2027. DISR’s ministerial explanation of the developing standards discusses accountability for serious frontier AI risks.

That means a blanket claim that Australia plans no AI legislation is outdated. It also doesn’t mean the earlier high-risk guardrail proposals have become law for every retailer. The final scope of the new standards will determine who carries which duties.

Existing Laws That Already Apply to AI

Existing laws apply to conduct involving AI, including claims made to shoppers. The relevant duties depend on your business and how you use the tool.

Australian Consumer Law prohibits misleading conduct and false representations. The Australian Competition and Consumer Commission (ACCC) explains that business claims must be accurate. For example, an AI assistant mustn’t describe a polyester jacket as wool or invent a discount.

Refund answers also need to preserve consumer rights. A store policy saying “no refunds on sale items” cannot remove rights for a faulty product under consumer guarantees. Follow the ACCC’s repair, replacement and refund guidance when preparing the information your assistant uses.

The Privacy Act applies to personal information handled through AI where your business is covered. For example, a chat can collect an address or disclose an order history. The Office of the Australian Information Commissioner (OAIC) explains that AI inputs and outputs can both carry privacy obligations.

Some small businesses are exempt, while exceptions bring others within the Act. Use the OAIC’s small-business coverage checklist to establish your position. Our guide to the Privacy Act for retailers covers the duties in more detail.

Anti-discrimination laws also apply when AI helps deliver services. The Australian Human Rights Commission explains protection against racial discrimination in goods and services. An assistant refusing service because of a customer’s ethnicity creates a legal risk, even if the store didn’t intend that response.

As the business deploying a shopping agent, give it correct product data and prices. Supply lawful refund information and control access to chat data. Keep a way for customers to reach staff when an answer needs correction. An “AI may make mistakes” notice doesn’t make misleading claims or unlawful data handling acceptable.

AI Ethics Principles and the Voluntary Safety Standard

Australia’s AI Ethics Principles are voluntary principles for responsible AI use. They cover wellbeing and human-centred values, alongside fairness and privacy. They also address reliability, transparency, contestability and accountability.

For a retailer, these ideas guide how the assistant interacts with shoppers. Explain its role and let staff correct answers. Examine whether it treats customers fairly and keeps personal information secure.

The Voluntary AI Safety Standard added ten guardrails, including risk management and human oversight. DISR now directs businesses to Guidance for AI Adoption, which develops that standard and the ethics principles into six practices.

Use the newer guidance as your starting point. Assign responsibility for the tool and assess the harm a wrong answer could cause. Explain AI use to customers and give staff enough knowledge to manage it. Keep testing after changes to the catalogue or store policies.

Voluntary principles help you decide how to operate the tool. Binding laws determine what your store must do. Following a voluntary standard doesn’t exempt a business from consumer or privacy law.

What AI Governance Means for a Retailer

AI governance is how your business decides where AI can be used and who is responsible for its outcomes. It includes the rules staff follow and the process for correcting problems.

A small store can start by naming one person responsible for its assistant, approving the information it uses and giving staff a way to pause it. For example, route disputed refund decisions to a person instead of letting the assistant make the final call. Use the AI governance framework for retailers when you need a fuller process.

AI Disclosure to Shoppers

Tell shoppers they’re interacting with AI before the first substantive exchange. A visible description beside the chat name is easier to understand than a statement buried in your terms. The OAIC recommends clearly identifying public-facing AI tools and explaining how they use personal information.

A generic disclosure can say, “You’re chatting with our AI shopping assistant. Ask for a person if you need help from our team.” Use the human-help instruction only when customers can actually reach a person that way.

Disclosure reduces the risk that shoppers mistake automated answers for a staff member’s judgement. It also supports the voluntary guidance on telling people when AI is used or affects them. Continue checking the answers themselves. Our guide to preventing AI hallucinations explains how to reduce incorrect answers.

AI Labelling for Chatbots and Content

Australia’s voluntary guidance supports clear AI labels, but it doesn’t create a universal legal requirement to label every AI-generated item. Existing laws can still require disclosures or make a misleading presentation unlawful. A label’s adequacy depends on the content and the impression it gives customers.

In a store, label the chat window “AI shopping assistant”. Put “AI-generated product visual” beside a generated image when shoppers could mistake it for a photograph of the item. Check that the visual accurately conveys the product. A label cannot fix a false impression about its colour or construction.

Distinguish a summary of genuine customer reviews from a fabricated review. “AI summary of customer reviews” can explain how a supported summary was produced. Publishing invented praise as a real customer’s review remains misleading, even with an AI tag.

The National AI Plan’s guidance on AI-generated content describes visible labels, watermarking and metadata as voluntary transparency measures. Keep the visible explanation near the content because most shoppers won’t inspect file metadata.

Overseas Rules That Reach Australian Stores

The European Union’s AI Act sets duties according to the AI system’s role and risk. It can reach businesses outside the EU when their AI outputs are used in the EU. Selling into Europe therefore requires an assessment of your AI use and your role under the Act.

The European Commission explains the transparency duties for providers and deployers. These include notifying people about direct AI interactions and disclosing specified generated content, including deepfakes. Provider duties and retailer duties differ. Ask a lawyer to assess which requirements apply before launching AI experiences for EU customers.

Keeping Up With AI Regulation News

Follow DISR for AI policy and the OAIC for privacy duties. The Attorney-General’s Department publishes privacy reform information. Follow the ACCC for consumer-law guidance affecting retail claims.

Separate proposals from laws that have passed and duties that have commenced. For example, the automated decision-making disclosure obligation has been legislated but has a future commencement. It concerns covered entities using personal information for decisions that can affect rights or interests. It doesn’t make every ordinary product recommendation subject to the same disclosure.

Keep a simple AI regulation tracker in your business. Give each entry the rule or proposal name, its status and official source link. Add a date-checked field and name the staff member responsible for following it. When a proposal becomes law, record its scope and commencement before changing your store’s process.

Get legal advice before treating an announcement as a new obligation. Apply the laws already in force to the AI answers and content your customers see now.