Key Takeaways
- New South Wales found more than 200 automated decision-making systems already running across its public sector with no specific regulatory framework, the same conditions that allowed Robodebt to operate unchecked.
- South Australia’s Royal Commission must report by July 1, 2027, a 9-month working window from its October 2026 start against a technology that reshapes itself faster than most inquiries can conclude.
- Australia’s three parallel governance streams, federal CAIO appointments, NSW’s Office for AI and SA’s Royal Commission, share no binding coordination mechanism, creating gaps that high-risk systems will continue to exploit. Australia already has more than 200 unregulated automated decision-making systems running through its public sector, and the governments responsible for fixing that are working from three separate playbooks with no binding coordination between them. The Robodebt Royal Commission told us exactly what happens when algorithmic systems operate without oversight. That was July 2023. It is now 2026, and the lesson has not yet produced a unified national response.
Robodebt’s Echo
The Robodebt Royal Commission’s findings, delivered in July 2023, were unambiguous: unregulated automated decision-making in government services causes serious, measurable harm. The commission called for a consistent legal framework and a dedicated monitoring body. By late 2024, the federal Senate’s AI committee reinforced that position, recommending a legal framework governing automated decisions with significant effects, including a right for individuals to request meaningful information about how those decisions were made.
Meanwhile, New South Wales moved first at the state level. A parliamentary inquiry led to the establishment of the NSW Office for Artificial Intelligence in September 2025. In conducting that inquiry, the state counted more than 200 automated decision-making systems already operational across its public sector, most deployed without any specific regulatory framework. That number is the problem made visible. These systems existed before anyone thought to look for them, and they mirror exactly the conditions that allowed Robodebt to flourish.
Federal Intent, Slow Execution
The federal government’s response has two moving parts, neither of them fast enough. Under the APS AI Plan, every federal agency must appoint a Chief AI Officer by June or July 2026. These roles are intended to guide agency-level AI adoption and drive cultural change around implementation. Separately, a federal Office of AI was established within the Department of the Prime Minister and Cabinet on July 15, 2026, with a mandate to coordinate Australian AI Standards nationally and facilitate national legislation.
The timing problem is hard to ignore. CAIO appointments are being phased in across 2026, years after the systems they are meant to govern were already deployed. A national Office of AI and a standards development process are welcome, but they do not yet constitute a legislated framework. Many systems that would qualify as high-risk under any reasonable definition are still operating in a vacuum while the machinery of oversight is assembled around them. The EU AI Act’s enforcement architecture took years to build after the political will existed, Australia is still at the political-will stage.
South Australia’s 9-Month Bet
South Australia announced its Royal Commission into Artificial Intelligence on August 10, 2026, with a reporting deadline of July 1, 2027. Premier Peter Malinauskas framed it as a major examination of how AI will reshape the economy, public services and society, focused on future policy rather than past wrongdoing.
Nine months. Against a technology that materially changes every six months, that is a tight window. The federal Senate committee’s own 2024 AI report was already absorbing evidence about generative AI’s effect on a US election that had occurred weeks before the committee sat, and that report covered ground that was already shifting as it was written. A Royal Commission that catalogues the specific AI risks and vendors of mid-2026 will be partly obsolete before it is tabled.
The critical question for South Australia is whether its findings establish durable institutional capacity, an oversight body, a flexible legal framework, a principles-based definition of high-risk AI that does not require rewriting every time a new model ships, or whether they freeze a 2026 snapshot into law. The federal committee’s recommendation for adaptable adjudication mechanisms points at the right answer. The commission needs to build the machinery, not describe the machine.
Three Streams, No Confluence
In June 2024, the Data and Digital Ministers Meeting agreed to a “National framework for the assurance of artificial intelligence in government.” That framework offers principles, not binding rules. NSW has its Office for AI and an AI Assessment Framework. South Australia has a Royal Commission. The federal government is appointing CAIOs and developing national standards. Each stream has value. Together, they do not constitute a system.
This is the counterargument I take seriously: that independent state inquiries allow for tailored solutions, that staggered development lets governments learn from each other, that building internal CAIO capacity before legislating top-down is sensible sequencing. NSW’s early audit of its automated systems did produce data that the national conversation needed. Iteration is not always a failure.
But that argument breaks down when the systems being iterated around are already running and already affecting people. The pace of AI development means that lessons learned through slow, independent policy cycles may be outdated before they can be applied across jurisdictions. When fundamental rights and public trust are at stake, the risk of another Robodebt, replicated across multiple state or federal departments simultaneously, outweighs the theoretical benefits of each jurisdiction finding its own way. A shared national baseline and binding enforcement mechanisms are not bureaucratic preferences. They are the minimum viable response to what NSW’s audit revealed.
What Durable Governance Actually Requires
The Robodebt Royal Commission already laid out the template: a body with the expertise and authority to monitor and audit automated decision-making processes, examining their technical function, fairness, bias exposure and usability. That recommendation has been sitting on the table since July 2023. The question is not what needs building, it is why it has not been built.
Durable governance in this space cannot be a list of today’s risky AI applications. Lists go stale. It needs clear definitions of high-risk AI grounded in potential for harm rather than in specific models or vendors, so that new applications can be assessed as they emerge rather than grandfathered in because the regulation predates them. It needs oversight bodies with genuine enforcement authority across all levels of government, not advisory panels publishing principles. And it needs those bodies to be empowered before the next automated system causes harm, not after.
South Australia’s Royal Commission is the most visible test of whether Australia can get this right. If it recommends an adaptive institutional framework with real teeth, it will have been worth the nine months. If it produces a thorough description of where AI stood in 2026, it will age out within a year, and the risks of unsupervised automated systems will keep compounding while the next inquiry is commissioned.
Australia is not short of reviews, committees or frameworks. It is short of a binding national architecture that covers all levels of government, with the authority to act before harm is done. Until that exists, the more than 200 systems NSW found, and the unknown number in other states that no one has counted yet, will keep running.
Originally published at https://autonainews.com/australias-patchwork-ai-governance-invites-future-robodebts/
Top comments (0)