-
Questions about policy implementation
AOs can contact the DTA with questions about policy implementation by emailing ai@dta.gov.au.
-
-
Related frameworks for AI
While this section lists frameworks that are related to AI, it is not exhaustive. Agencies should consider what existing frameworks apply to them and their specific AI use cases.
-
Risk assessment for use of AI
Risk matrix
Consequence – Insignificant Consequence – Minor Consequence – Moderate Consequence – Major Consequence – Severe Likelihood – Almost certain Medium Medium High High High Likelihood – Likely Medium Medium Medium High High Likelihood – Possible Low Medium Medium High High Likelihood – Unlikely Low Low Medium Medium High Likelihood – Rare Low Low Low Medium Medium Figure 1: Risk matrix for use of AI
-
Using the risk matrix, determine the severity of the risks. In considering the consequence and likelihood consult with relevant stakeholders. The risk assessment should reflect the intended scope, function and risk controls of the AI use case.
The following are examples of risks that an agency can consider as part of their assessment.
What is the risk that the use of AI:
- negatively affects public accessibility or inclusivity of government services
- unfairly discriminates against individuals or communities
- perpetuates stereotypes or demeaning representations of individuals or communities
- causes harm to individuals, communities, businesses or the environment
- results in privacy concerns due to the sensitivity of the data being manipulated, parsed or transformed by the system
- results in security concerns due to the sensitivity or classification of the data being manipulated, parsed or transformed by the system
- results in security concerns due to the implementation, sourcing or characteristics of the system
- influences decision-making that affects individuals, communities, businesses or the environment
- poses a reputational risk or undermines public confidence in government
- results in intellectual property concerns due to the system manipulating, transforming or reproducing material for which a third party owns copyright.
Agencies should refer to existing risk management frameworks, such as the Commonwealth Risk Management Policy and internal agency risk management approaches, for guidance in assessing the concepts under the risk matrix at Figure 1.
-
What is the risk that the use of AI:
negatively affects public accessibility or inclusivity of government services
unfairly discriminates against individuals or communities
perpetuates stereotypes or demeaning representations of individuals or communities
causes harm to individuals, communities, businesses or the environment
results in privacy concerns due to the sensitivity of the data being manipulated, parsed or transformed by the system
results in security concerns due to the sensitivity or classification of the data being manipulated, parsed or transformed by the system
results in security concerns due to the implementation, sourcing or characteristics of the system
influences decision-making that affects individuals, communities, businesses or the environment
poses a reputational risk or undermines public confidence in government
results in intellectual property concerns due to the system manipulating, transforming or reproducing material for which a third party owns copyright.
Agencies should refer to existing risk management frameworks, such as the Commonwealth Risk Management Policy and internal agency risk management approaches, for guidance in assessing the concepts under the risk matrix at Figure 1.
-
Content
-
Procurement
Commonwealth Procurement Rules and other procurement policies.
-
Privacy
-
Cyber and protective security
2023-2030 Australian Cyber Security Strategy
-
-
Data and digital
-
Artificial intelligence
Australia’s AI Ethics Principles
Engaging with Artificial Intelligence (AI) guidance
Interim guidance on government use of public generative AI tools (Generative AI guidance)
-
Automated decision-making
-
Policy resources
-
Policy aim
-
Principles and requirements
The following sections outline the policy principles and requirements under the ‘enable, engage and evolve’ framework.
Connect with the digital community
Share, build or learn digital experience and skills with training and events, and collaborate with peers across government.