← Back to marketing site
BM
Bob Millward
Governance Lead

NSW AIAF Library

The redesigned January 2026 NSW AI Assessment Framework, encoded as data. Cross-mapped to ISO 42001, NIST AI RMF, OECD principles, PPIPA, Records Act 1998, and the 2025 AG findings.

Loaded framework
NSW AI Assessment Framework
Version 2.0 · effective January 2026
Clauses loaded
10+
All applies-when rules deterministic
Cross-mapped to
ISO 42001NIST AI RMFOECD AIEU AI ActPPIPAHRIPAGIPARecords ActAG LG 2025

1. Scope & Definitions

NSW_AIAF_v2#1.1

Definition of 'AI use case' for council purposes

Applies when:Always — sets scope of the assessment
Required evidence
  • · use_case_intake_form
Cross-mapped to
ISO 42001:2023 · 3.1
NIST AI RMF · MAP-1.1

2. Risk Tiering

NSW_AIAF_v2#2.1

Provisional risk tier assignment

Applies when:Always at G0 intake
Required evidence
  • · risk_tier_rationale
  • · decision_about_residents_yes_no
  • · uses_personal_info_yes_no
Cross-mapped to
EU AI Act · Art. 6 (risk classification)
NIST AI RMF · MAP-1.2

3. Workpaper

NSW_AIAF_v2#3.2

Per-use-case risk assessment

Applies when:risk_tier >= MEDIUM
Required evidence
  • · workpaper_signed_by_privacy
  • · workpaper_signed_by_risk
  • · workpaper_signed_by_records
Cross-mapped to
ISO 42001:2023 · 6.1.2
NIST AI RMF · MAP-2.1
OECD AI Principles · 1.2
NSW AG LG 2025 · Finding 4
NSW_AIAF_v2#3.4

Privacy Impact Assessment (PIA)

Applies when:Resident PII involved OR resident-facing system
Required evidence
  • · PIA_signed_by_privacy_officer
Cross-mapped to
PPIPA 1998 (NSW) · s.10
HRIPA 2002 (NSW) · s.8
NSW_AIAF_v2#3.5

Records Management Act 1998 compliance

Applies when:AI generates outputs that may constitute State records
Required evidence
  • · records_retention_classification
  • · records_capture_method
Cross-mapped to
Records Management Act 1998 (NSW) · s.12
NSW AG LG 2025 · Finding 7

4. Prohibited Use Cases

NSW_AIAF_v2#4.1

Automated employment decisions

Applies when:AI used in recruitment, performance, or termination decisions
Required evidence
  • · AIRC_rejection_decision
Cross-mapped to
EU AI Act · Annex III(4)
NSW Fair Trading Act · n/a

5. AIRC

NSW_AIAF_v2#5.1

AI Review Committee — charter required

Applies when:Always — Council-level requirement
Required evidence
  • · AIRC_charter_signed_by_GM
Cross-mapped to
ISO 42001:2023 · 5.3
NSW AG LG 2025 · Finding 3
NSW_AIAF_v2#5.4

Decision recording at G2/G3 gates

Applies when:Every AIRC decision
Required evidence
  • · AIRC_meeting_minutes
  • · decision_with_conditions
Cross-mapped to
NIST AI RMF · GOVERN-2.1

6. Transparency

NSW_AIAF_v2#6.1

Public-facing transparency register

Applies when:Use case is resident-facing OR makes decisions affecting residents
Required evidence
  • · transparency_register_entry_published
  • · publication_date_recorded
Cross-mapped to
GIPA 2009 (NSW) · Part 3
OECD AI Principles · 1.3
NSW AG LG 2025 · Finding 5

7. Annual Re-attestation

NSW_AIAF_v2#7.1

Annual G4 re-attestation cycle

Applies when:All use cases at G2 or G3, 30 days before anniversary
Required evidence
  • · delta_workpaper
  • · AIRC_re_approval
  • · drift_evidence_review
Cross-mapped to
ISO 42001:2023 · 9.3
NIST AI RMF · MANAGE-4.1
NSW AG LG 2025 · Finding 10
Frameworks as data, not hardcoded forms. When NSW issues an AIAF v3 revision, the framework pack updates and your existing workpapers re-map automatically — no re-platform, no rework. The same engine drives every jurisdiction we ship a pack for (VIC, QLD, EU AI Act, NIST AI RMF, etc.) — but today this demo shows NSW Local Government only.