Australia

Federal Court of Australia Practice Note on Generative AI in Proceedings

The Federal Court of Australia released a new Practice Note on the use of Generative AI in proceedings before the Court. It outlines the Court's expectations, highlights potential benefits of Generative AI, and sets clear guidance on responsible use, accountability and disclosure obligations. It identifies areas where particular caution is required, including pleadings, submissions, evidence and confidential material.

Australia passes AI Transparency and Accountability Act 2026

The Australian Parliament passed the AI Transparency and Accountability Act, establishing mandatory transparency requirements for high-risk AI systems, including disclosure obligations, impact assessments, and a new regulatory body within the Department of Industry for enforcement.

Cyber Security Rules 2025 for Smart Devices

On 4 March 2026, the Cyber Security (Security Standards for Smart Devices) Rules 2025, covering consumer-grade smart devices enter into force. The rules establish mandatory security standards for consumer-grade connectable products acquired in Australia, excluding smartphones, tablets, desktop and laptop computers, road vehicles and components, and therapeutic goods. Manufacturers must ensure that each device has a unique password or user-defined credentials, and that passwords are not based ...

Online Safety (Age-Restricted Social Media Platforms) Amendment Rules 2026

On 26 March 2026, the Online Safety (Age-Restricted Social Media Platforms) Amendment Rules 2026 entered into force, setting out the platform features that trigger age-restriction obligations. The instrument amends the 2025 Rules to specify that an electronic service is classified as an age-restricted social media platform if it includes a recommender feature or a logged-in feature, such as infinite scrolling feeds, user feedback mechanisms like “likes”, or time-limited ephemeral content. The...

Global Privacy Enforcement Network's inquiry into children's privacy practices on websites and applications

On 25 March 2026, the Global Privacy Enforcement Network (GPEN) published a sweep report examining children's privacy practices across 876 websites and applications. The inquiry found that, while age assurance use has increased since 2015, 88% of platforms relied solely on easily circumvented self-declaration methods. It also highlighted that data collection has intensified, with 85% of privacy policies disclosing third-party data sharing, up from 51% a decade ago. It also found that only 56%...

European Union-Australia Free Trade Agreement

On 24 March 2026, the European Union and Australia concluded negotiations for a Free Trade Agreement (FTA), which includes provisions on digital trade. The agreement prohibits unjustified data localisation requirements, enabling cross-border data flows while preserving personal data and privacy protection. It also removes certain distinctions between online and offline trade, prohibits customs duties on electronic transmissions, and includes provisions on source code, electronic contracts, an...

Updated Global Cross-Border Privacy Rules System Program Requirements

On 23 March 2026, the Global Cross-Border Privacy Rules (CBPR) Forum updated the Global Cross-Border Privacy Rules System Program Requirements (PRs). The PRs apply to organisations seeking certification under the Global Cross-Border Privacy Rules System (CBPR System). The PRs increase from 50 to 57 requirements and update 3 existing requirements. The PRs set requirements under the Preventing Harm principle of the Global CBPR Privacy Framework, including obligations for processing sensitive da...

eSafety Commissioner assessment of Character Technologies (character.ai) regarding compliance with Basic Online Safety Expectations

On 23 March 2026, Australia’s eSafety Commissioner published interim findings concerning Character Technologies (character.ai) compliance with Basic Online Safety Expectations (BOSE). In response to a notice requesting information regarding BOSE compliance issued 16 October 2025, Character Technologies reported that it had made or intended to make improvements to child safety. Such improvements include age assurance mechanisms, restricting access to open-ended chat with AI companions, and imp...

NSW AI Workplace Laws 2026

New South Wales introduced AI workplace laws in 2026 providing new obligations for employers using digital tools and AI in the workplace, focusing on safety, accountability, and risk management.

Jenson & Lockridge (No 2)

Pro Se Litigant used Unidentified in proceedings before the Federal Circuit and Family Court. Misrepresented: Doctrinal Work | AI amalgamated disparate legal principles into the appellant's Summary of Argument and oral submissions, producing repetitive and uncontextualised appellate phrases relied on at hearing. Outcome: Adverse Costs Order; Appeal dismissed.

Jenson & Lockridge (No 2)

Misrepresented: Doctrinal Work | AI amalgamated disparate legal principles into the appellant's Summary of Argument and oral submissions, producing repetitive and uncontextualised appellate phrases relied on at hearing. || Misrepresented: Exhibits & Submissions | AI-generated or AI-influenced complaints advanced on appeal were contrary to the appellant's case at trial or had been abandoned, obscuring effective grounds of appeal. || Misrepresented: Other | AI attributed reasoning to the primary judge that did not appear in the reasons; the Court described these as 'hallucinations' and rejected grounds relying on them.

Jenson & Lockridge (No 2)

European Union-Australia Security and Defence Partnership

On 18 March 2026, the European Union (EU) and Australia signed the Security and Defence Partnership. The agreement establishes a framework for the two parties to exchange expertise on their respective cybersecurity frameworks and share information to prevent, deter, and respond to malicious cyber activities. The agreement includes provisions for regular consultations on artificial intelligence (AI), including its responsible use in security and defence contexts. Furthermore, the parties will ...

Edmonds v Barrington Winstanley Group

Lawyer appeared before the SC New South Wales. Fabricated: Case Law | Applicants' written submissions cited a non-existent High Court authority; Court noted the citation did not correspond to any such case and directed it to a different case. Outcome: Warning.

Edmonds v Barrington Winstanley Group

Fabricated: Case Law | Applicants' written submissions cited a non-existent High Court authority; Court noted the citation did not correspond to any such case and directed it to a different case. || Fabricated: Exhibits & Submissions | Applicants' submissions alleged an 'uploading of a non-existent mortgage (AU379627)' among other asserted documentary irregularities in their reply submissions.

Edmonds v Barrington Winstanley Group

Privacy guidance on age assurance technologies

On 17 March 2026, the Office of the Australian Information Commissioner (OAIC) released privacy guidance on age assurance technologies aimed at organisations and public authorities subject to the Privacy Act (APP entities) that are considering implementing systems involving the collection, use, or disclosure of personal information. The guidance is intended to support compliance with the Privacy Principles (APPs) and to help both regulated entities and third-party providers assess and manage ...

GSA v. Department of Communities

Pro Se Litigant used Unidentified in proceedings before the SC Western Australia. False Quotes: Legal Norm | Appellant read an AI-generated quotation he attributed to s 14(1)(b) Criminal Appeals Act; judge found the quotation inaccurate, called AI 'deceptive', and required source disclosure.

GSA v. Department of Communities

False Quotes: Legal Norm | Appellant read an AI-generated quotation he attributed to s 14(1)(b) Criminal Appeals Act; judge found the quotation inaccurate, called AI 'deceptive', and required source disclosure.

GSA v. Department of Communities

Nicole Levey-Wilson v The Trustee for Attivita Group Unit Trust

Pro Se Litigant appeared before the Fair Work Commission. Misrepresented: Legal Norm | Applicant's submission referenced s.341(1)(c)(ii); Commissioner found the reference appeared AI-generated and nonsensical in context. Outcome: Application dismissed..

Nicole Levey-Wilson v The Trustee for Attivita Group Unit Trust

Misrepresented: Legal Norm | Applicant's submission referenced s.341(1)(c)(ii); Commissioner found the reference appeared AI-generated and nonsensical in context.

Nicole Levey-Wilson v The Trustee for Attivita Group Unit Trust

Malik v Insurance Australia Limited

Fabricated: Case Law | Defendant alleged the plaintiff's filings contained hallucinated/cited cases that do not exist; court noted instances of fabricated case law though specific fabricated citations were not identified in reasons. || False Quotes: Exhibits & Submissions | Defendant alleged the plaintiff misquoted public documents and misapplied legal principle in submissions.

Oberoi v. Douglas

Lawyer appeared before the CA Victoria. Fabricated: Case Law | 7 fabricated authorities Outcome: Bar referral.

ELG20 v Minister for Immigration and Citizenship

Pro Se Litigant used ChatGPT; OpenAI in proceedings before the Federal Circuit and Family Court. Fabricated: Case Law | Applicant's written submissions cited numerous fictitious cases; Minister identified the fictitious citations and the Court declined to reproduce them. Outcome: Admonishment.

Oberoi v. Douglas

Fabricated: Case Law | 7 fabricated authorities || False Quotes: Case Law | 12 false quotes.

ELG20 v Minister for Immigration and Citizenship

Fabricated: Case Law | Applicant's written submissions cited numerous fictitious cases; Minister identified the fictitious citations and the Court declined to reproduce them. || False Quotes: Case Law | Applicant ascribed quotations to an existing case (SZATV) that do not appear in that case; Court noted the misattribution.

Oberoi v. Douglas

ELG20 v Minister for Immigration and Citizenship

Global Coalition on Telecommunications' 6G security and resilience principles

On 3 March 2026, the telecommunications authorities from Japan, the United Kingdom, Australia, Canada, and the United States adopted the Global Coalition on Telecommunications' 6G security and resilience principles. The principles outline security and resilience considerations that should be incorporated from the early stages of network design, standardisation, and deployment to ensure that 6G infrastructure functions safely and reliably as critical digital infrastructure. The principles reco...

Privacy guidance for reporting entities under Anti-Money Laundering and Counter-Terrorism Financing Act

On 27 February 2026, the Office of the Australian Information Commissioner released privacy guidance for reporting entities under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act). The guidance explains the application of the Privacy Act 1988 to reporting entities and authorised agents when handling personal information for the purposes of, or in connection with, AML/CTF obligations. It clarifies that reporting entities, including small businesses with an annual...

eSafety Commissioner evaluation of Social Media Minimum Age under Online Safety Amendment (Social Media Minimum Age) Act 2024

On 26 February 2026, the eSafety Commissioner commenced an evaluation of Australia’s social media minimum age to assess implementation of the new obligation on platforms and its impacts on children. The evaluation concerns the Online Safety Amendment (Social Media Minimum Age) Act 2024, which commenced on 10 December 2025 and requires age-restricted social media platforms to take reasonable steps to prevent Australians under the age of 16 from creating or keeping an account, with preliminary ...

Guidance on quantum technology pertaining to computing

On 19 February 2026, the Cyber Security Centre adopted the guidance on quantum technology pertaining to computing. The guidance explains how quantum computing may affect cybersecurity and calls for early preparedness for post-quantum risks. It applies to small and medium businesses, large organisations, critical infrastructure operators, and government bodies that rely on cryptography, cloud services, or high-performance computing. The guidance outlines the differences between quantum and cla...

Rinaldi v Department of Justice (Right to Information and Privacy)

Pro Se Litigant appeared before the Queensland CAT. Fabricated: Case Law | Appellant cited 'Lutvey v Department of Community Safety'; Tribunal found the case does not appear to exist and noted AI use in submissions. Outcome: Appeal dismissed.

Rinaldi v Department of Justice (Right to Information and Privacy)

Fabricated: Case Law | Appellant cited 'Lutvey v Department of Community Safety'; Tribunal found the case does not appear to exist and noted AI use in submissions. || Fabricated: Case Law | Appellant cited 'Cameron v Department of Environment and Resource Management'; Tribunal found the case does not appear to exist and linked the references to AI generation.

Rinaldi v Department of Justice (Right to Information and Privacy)

Securities and Investments Commission investigation into FIIG Securities over alleged failure to meet cybersecurity requirements (Securities and Investments Commission v FIIG Securities Limited/No. QUD144/2025)

On 13 February 2026, the Federal Court of Australia ordered FIIG Securities Limited (FIIG) to pay a pecuniary penalty of AUD 2'500'000 for contravening its Australian Financial Services licence obligations under section 912A of the Corporations Act 2001 (Cth) between 13 March 2019 and 8 June 2023. The Court found that FIIG failed to maintain adequate technological, human, and financial resources, as well as appropriate risk management systems, to manage cybersecurity risks. These deficiencies...

RYJZ and Commissioner of Taxation (Taxation)

Pro Se Litigant appeared before the ART Australia. Fabricated: Case Law | Applicant relied on 'Cheung v FCT [2021] AATA 3851'; Tribunal and Commissioner found no record of that case and treated it as a fabricated citation, noting possible AI use.

RYJZ and Commissioner of Taxation (Taxation)

Fabricated: Case Law | Applicant relied on 'Cheung v FCT [2021] AATA 3851'; Tribunal and Commissioner found no record of that case and treated it as a fabricated citation, noting possible AI use. || Fabricated: Case Law | Applicant relied on 'Dwyer v FCT [2018] AATA 456'; Tribunal and Commissioner found no record of that case and treated it as a fabricated citation, noting possible AI use.