Australia: AI Agent Records and Accountability Policy
Summary: Australia’s government AI-agent policy spans records-retention guidance from the National Archives (September 2026) and an agentic-AI addendum to the government’s AI technical standard requiring agencies to assign a human accountable for each agent, with traceability, real-time monitoring, and intervention for high-risk actions.
Sources: 2026-09-09-ai-agent-identity-news.md, 2026-09-10-ai-agent-identity-news.md
Last updated: 2026-09-10
The National Archives of Australia published guidance on information management for records created using AI technologies, directing Australian Government agencies to retain AI outputs, prompts, inputs, metadata, system logs, and decision records where needed to establish business, legal, evidentiary, or accountability context (source: 2026-09-09-ai-agent-identity-news.md, citing National Archives of Australia, September 2026, primary source).
The guidance says agentic-AI records are covered by the same general records-management principles as other AI-generated records, but notes that specific agentic-AI records guidance is still under development (source: 2026-09-09-ai-agent-identity-news.md).
2026-09-10: agentic-AI addendum assigns human accountability and traceability
The addendum to Australia’s AI technical standard requires agencies to assign a human accountable for agent behaviour, decisions, and outcomes, including across multi-agent systems. It calls for documented responsibilities, traceability back to agent actions, real-time monitoring, intervention for irreversible or high-risk actions, auditable metadata, and an orchestration layer that delegates and governs tasks (source: 2026-09-10-ai-agent-identity-news.md, citing Digital Transformation Agency — Agentic AI addendum, accessed 10 September 2026, primary source).
This is an accountability-and-oversight control (named responsible human, monitoring, intervention thresholds) rather than a personal-identity or delegation scheme in the sense of estonia-ai-agent-id or united-states-ai-agent-policy. It connects to the audit/enforcement strand of agent-authorization-and-delegation and to the discovery/provenance layer in agent-standards-and-interoperability.
Needs verification
Whether Australia has any parallel identity scheme for AI agents (unique identifiers, credentials, or a registry, as opposed to accountability/monitoring obligations and records-retention duties) is not established in the current sources and needs verification.
Correction note: an earlier draft of this page (written 2026-09-10, before the raw source file was corrected) stated that the Australian Signals Directorate’s Information Security Manual required a unique agent identity and a verified agent register. That claim traced to an earlier, since-corrected version of raw/2026-09-10-ai-agent-identity-news.md and does not appear in the file’s current content. It has been removed; see log for 2026-09-10.