Australia's planned national AI laws now have the backing of every state and territory leader. On Wednesday 26 August 2026 the Prime Minister and the eight premiers and chief ministers met in Sydney as National Cabinet and agreed a statement supporting the Commonwealth's plan to legislate "AI standards" in early 2027. The first target is large data centres and their use of energy, water and land, not the everyday use of AI tools by small and medium businesses. The measures aimed at everyday uses of AI are in a separate list of AI consumer safety priorities announced in July. This article is general information, not legal advice.
What happened
The Prime Minister's office published the outcomes in its statement on the Meeting of National Cabinet. On AI, First Ministers agreed that the technology is a "generational opportunity" for Australia if properly harnessed, and that large data centres bring energy, water and land-use impacts that need to be managed.
The statement describes the Commonwealth's planned laws as "a nationally consistent regulatory framework that will set minimum requirements for large data centres". The Commonwealth will work with the states and territories on consistent mandatory standards for data centre energy, water and land use, and on skills and training. Its legislation is to complement state and territory planning and approval processes, not duplicate them. On timing, the statement says: "The Commonwealth intends to legislate the AI standards in early 2027", including conditions associated with delivering AI training.
This builds on the framework the Prime Minister announced on 15 July 2026 in the media release AI in Australia's interests. That release said large data centres would have a legal obligation to underwrite their own new power supply, pay their full share of connection costs so energy bills are not affected, reduce power use when needed to strengthen the grid and be as water efficient as possible. It also created an Office of AI inside the Department of the Prime Minister and Cabinet from that day, and said Australian writers, artists and journalists should retain ownership of their work, so that no company uses Australian creative works to train AI without the artist's control.
Key details
| Element | What has been announced | Status in the published statements |
|---|---|---|
| National AI standards | Commonwealth legislation setting minimum requirements for large data centres, including conditions tied to AI training | Intended to be legislated in early 2027 |
| Data centre standards | Consistent mandatory standards for energy, water and land use, developed with the states and territories | Backed by National Cabinet on 26 August; standards still to be developed |
| Energy and water obligations | Underwrite new power supply, pay the full share of connection costs, reduce demand when the grid needs it, use water efficiently | Announced on 15 July |
| Office of AI | A unit in the Department of the Prime Minister and Cabinet to speed up national implementation of the standards | Established on 15 July |
| AI consumer safety priorities | Five areas of work across several ministers | Announced on 20 July |
The five AI consumer safety priorities, announced by six ministers on 20 July 2026, are:
- A Digital Duty of Care. Legislation requiring AI companies to build in safety by design and address potential harms in advance.
- Privacy. Consultation on a second tranche of privacy reform covering both conventional and AI-driven services.
- AI safety in the workplace. One of five agreed priority areas for the tripartite Artificial Intelligence Workplace and Employment Forum.
- Consumer protections. An examination of options under the Australian Consumer Law for risks such as retail surveillance pricing and agentic commerce. The release does not define either term; we take agentic commerce to mean software agents that shop or pay on a person's behalf.
- Automated decision-making. A framework for automated decisions inside federal agencies.
Why it matters
The agreement matters for what it settles and for what it leaves open. It settles the direction: the Commonwealth will legislate, and it will work with the states and territories on consistent mandatory standards. Law firm Clayton Utz, in its analysis of the National Cabinet outcome, describes it as the first time all governments have committed to a common set of mandatory data centre standards.
It leaves open nearly all of the detail. The statement does not define a "large" data centre, set penalties or say when obligations would start. Clayton Utz expects coverage of large-scale, co-location and hyperscale facilities and large AI compute centres, not small edge or on-site enterprise data centres, with final coverage and thresholds to be confirmed through consultation. The firm also reports that Queensland and the Northern Territory asked for a more energy-agnostic approach to powering data centres and that the Commonwealth agreed. The official statement does not record individual positions.
For most small and medium businesses the important point is where the line has been drawn. The laws backed this week are described in terms of the infrastructure that AI runs on, plus conditions linked to AI training. The statement does not mention rules for a business that uses an AI assistant to draft emails or a chatbot to answer customers. Those questions sit closer to the July priorities, which the release describes as work still to be done: legislation to come, a consultation, a forum priority, options to be examined and a framework to be developed.
What this means for businesses
This week's statement records an agreement and an intention to legislate; it does not set a compliance task for a small or medium business. It does give a clearer picture of what is coming, and some sensible preparation costs little.
- Keep a simple AI register. List the AI tools your business uses, what each one does, what data goes into it and who supplies it. Knowing this is the starting point for any of the five priorities.
- Watch the privacy consultation. The second tranche of privacy reform is the priority aimed at personal data protection law, which matters to any business that holds customer data.
- Retailers and online sellers: note the consumer law review. Retail surveillance pricing is named as a consumer risk to be examined. If your pricing or promotions engine personalises prices, document how it works.
- Employers: follow the workplace forum. AI safety in the workplace is one of its agreed priority areas, so it is the place to watch if you use software to monitor, roster or assess staff.
- Software sellers: design for safety now. The government says it will legislate a Digital Duty of Care for AI companies. Logging what the AI did and letting a person step in are sensible habits whatever the final wording.
- Hosting customers: ask, do not assume. If you rent capacity in an Australian data centre or buy cloud services, ask your provider how it is preparing for the standards when you next review the contract.
We help businesses with the unglamorous groundwork: an IT consulting review that produces the register above, cloud migration and hosting decisions that take data location and provider terms into account, and systems for retail and e-commerce businesses. To talk about where your business stands, request a free first consultation.
Key takeaways
- National Cabinet agreed on 26 August 2026 to back the Commonwealth's national AI laws, with AI standards intended to be legislated in early 2027.
- The standards are aimed first at large data centres: energy, water and land use, plus conditions linked to AI training.
- The statement does not define a large data centre, set penalties or give a start date.
- Everyday business uses of AI are closer to the five AI consumer safety priorities announced on 20 July 2026, which are still work to be done.
- The statement sets no compliance task for small and medium businesses; a register of AI tools and data is a useful first step.
Frequently asked questions
What did National Cabinet agree on AI?
First Ministers agreed that large data centres bring energy, water and land-use impacts that need to be managed, and that the Commonwealth will work with the states and territories on consistent mandatory standards. They backed the Commonwealth's plan for national AI laws that set minimum requirements for large data centres.
When will Australia's national AI laws start?
The statement says the Commonwealth intends to legislate the AI standards in early 2027. It does not give a commencement date.
Do the AI standards apply to small businesses?
On the published material, the standards are directed at large data centres and AI training, not at businesses that use AI tools. The statement does not define a large data centre, and Clayton Utz expects final coverage and thresholds to be confirmed through consultation, so operators of smaller facilities should watch for it.
What is the Office of AI?
It is a unit established within the Department of the Prime Minister and Cabinet on 15 July 2026. The Prime Minister's release says its role is to accelerate national implementation of the Australian Standards for AI.
What are the AI consumer safety priorities?
They are five areas of work announced on 20 July 2026: a Digital Duty of Care for AI companies, a second tranche of privacy reform, AI safety in the workplace, an examination of consumer law options for risks such as retail surveillance pricing and agentic commerce, and a framework for automated decision-making in federal agencies.