Who must adopt the Voluntary AI Safety Standard (DISR 2024)?
The applicability test for Adopt the Voluntary AI Safety Standard (DISR 2024), computed across 35 industries, 9 business structures and 6 size bands.
Short answer: Some businesses
Applies when the business has automated decisions about people or industry: Software & SaaS.
What the obligation is
10 voluntary guardrails for safe + responsible AI deployment; mandatory regime in development.
DISR released the Voluntary AI Safety Standard in September 2024 — 10 guardrails covering accountability, risk management, data governance, testing, transparency, human oversight, contestability, supply chain, records + stakeholder engagement. Mandatory regime for 'high risk' AI being developed (likely 2026-27).
The applicability test
Applies when the business has automated decisions about people or industry: Software & SaaS.
How the regulator frames it: Voluntary today; preparation for mandatory regime advised.
What triggers it: Deploying AI systems affecting Australians.
Jurisdiction: Commonwealth law, so the test is the same in every state and territory.
Which industries are in or out
Outcome across the 35 industries Rules Mate maps (1 of 35: yes; 34 of 35: no).
| Industry | Answer |
|---|---|
| Software & SaaS | Yes |
| No | 34 other industries |
Business structure and size
Structure does not change the answer in software & saas: for every structure the answer is "yes".
Size does not change the answer in software & saas: at every size band the answer is "yes".
Worked examples
Each line is one run of the Rules Mate applicability engine for a single business profile, with the reason the engine gives:
- Pty Ltd company in software & saas with 6–19 employees, turnover $1M–$3M: applies. Industry: Software & SaaS.
- Pty Ltd company in real estate agents with 6–19 employees, turnover $1M–$3M: does not apply. Requires automated decisions about people or industry: Software & SaaS.
Answers that bring it into scope
Starting from a small or large professional services company that does not otherwise meet the test, each of these single facts changes the engine's answer:
- The business uses AI or automated decision-making about individuals: it then applies (uses AI / automated decisions about people).
What you must do, and when
- When due
- Voluntary now; mandatory expected 2026-27 for high-risk uses.
- Frequency
- Ongoing
- Evidence to keep
- AI risk register, governance documentation, testing artefacts, accountability statements.
- Status
- Current
- Priority
- Medium
Penalty for not complying
Maximum penalty: Voluntary today; mandatory regime expected with civil penalties.
Audit or assurance level
Rules Mate has not yet classified the audit or assurance level for this obligation. Any audit, review or certification requirement is set by the regulator source listed below.
What usually applies alongside it
Across the 1,890 business profiles Rules Mate evaluates, these obligations apply to most of the businesses this one applies to, and are far more common among them than among businesses generally:
Where it sits in the corpus
Rules Mate tracks 3 published obligations tagged "ai", 1 of them rated critical. For a professional services Pty Ltd company with 6–19 employees operating in every state, 0 of those apply outright. This obligation is rated medium priority, and is an ongoing duty.
Regulator, legislation and tools
Free tools that help with this obligation:
Questions
- Who must adopt the Voluntary AI Safety Standard (DISR 2024)?
- Applies when the business has automated decisions about people or industry: Software & SaaS.
- Do sole traders need to adopt the Voluntary AI Safety Standard (DISR 2024)?
- Yes. Looking in software & saas and every size band, the engine's answer for a sole trader is: yes.
- Do businesses with 1–5 employees need to adopt the Voluntary AI Safety Standard (DISR 2024)?
- Yes (1–5 employees, turnover $100K–$1M).
- When is "Adopt the Voluntary AI Safety Standard (DISR 2024)" due?
- Voluntary now; mandatory expected 2026-27 for high-risk uses.
Related
Sources
Computed by the Rules Mate applicability engine from the published obligation corpus; facts last checked 3 October 2026. Rules Mate is not a law firm and this is general information, not legal advice. Confirm your position with the regulator source or a qualified adviser before acting.