Australia’s rules and expectations for hyperscalers, data centres and AI development. Explore current obligations, proposed standards and the institutions responsible for oversight and technical assurance.
March expectations guide investment prioritisation. September proposals would introduce mandatory standards, but remain under consultation. Proposed tiers: 30–100 MW baseline; above 100 MW or a 150 MW portfolio enhanced. Final coverage and implementation remain unsettled. Consultation closes 9 October 2026.
23 requirements shown
Existing law applies only where statutory coverage tests are met. Government policy covers the named public-sector scope. Expectations and guidance have distinct status from legislation; consultation proposals are not current legal duties.
Protect sensitive data, prepare for disruptions, control access and engage communities. Alignment influences Commonwealth assessment prioritisation.
Offset demand through additional clean generation or storage, contribute to network costs, improve efficiency and support flexible demand.
Use efficient cooling and suitable water sources; fund attributable infrastructure, prepare for drought and disclose water performance.
Invest in domestic training, apprenticeships and safe employment, working with educators, unions and governments.
Offer favourable compute access to Australian researchers, start-ups, small businesses and non-profits; locate technical staff locally and invest in Australian suppliers.
Match demand with new renewable supply and firming; provide flexible demand.
Reduce consumption, prefer recycled water, cover costs and report efficiency.
Prevent project-related utility costs being transferred to households and businesses.
Consult councils and First Nations communities; manage siting impacts.
Support workers’ skills during construction and operation.
Set safety conditions, including reporting specified AI incidents.
Consider reserved compute, research payments or negotiated contributions.
Develop training arrangements supporting rightsholder control and remuneration.
Applicable asset classes face ownership and operational reporting, cyber incident reporting and written risk-management obligations. Systems of National Significance may face additional cyber obligations. Applicability depends on the asset definition and relevant rules.
Notification is required for starting a national security business or acquiring relevant interests in national security businesses or land. Other investments may be called in for review. Apply the statutory tests to the specific investment.
Australian Privacy Principles govern personal-information collection, use, disclosure, security and individual rights. Their technology-neutral application includes relevant cloud and AI services; coverage must be assessed at entity and activity level.
Notify affected individuals and the OAIC about eligible data breaches likely to result in serious harm. Assess suspected eligible breaches under the scheme’s requirements.
Sensitive government data, whole-of-government systems and PROTECTED systems must use certified services. The published notice pauses new registrations and supplementary assessments from 3 November 2025 during reform; existing certified providers are unaffected.
Assess corporate-group and facility thresholds to determine registration and reporting duties for emissions and energy. A data-centre label alone does not establish coverage; use the regulator’s threshold guidance.
The NSW planning system provides a state significant development pathway for qualifying data centres. Assessment requirements depend on the project and current planning instruments. This state pathway is not a national development approval.
Version 2.0 requires agency accountability, transparency statements, AI registers, staff training and use-case impact assessment. Exceptions apply. These are government-user duties; they are not a universal hyperscaler licence.
Technical guidance covers AI design, evaluation, deployment and monitoring. The agentic AI addendum addresses secure, governed agent implementation. Read the individual statements and contractual requirements for applicable obligations.
NSW’s AI Assessment Framework and digital assurance updates are mandatory for agencies. The AI Review Committee supplies expertise for high-risk projects. This is public-sector assurance rather than an economy-wide approval of private AI models.
Selected research coverage as at 21 September 2026. State and local approvals, contractual requirements and sector-specific rules require project-level assessment. Source links identify the published basis for each record; inclusion does not establish that a particular company is compliant.