NSW replaced its entire AI governance stack. Here's what actually changed.
On 1 September 2026 the NSW AI Ethics Policy was rescinded and DCS-2026-02 took effect. If your controls still map to the old five principles, they now map to nothing.
If your AI governance framework references the NSW AI Ethics Policy, it references an instrument that no longer exists. It was rescinded on 1 September 2026, and the five principles it defined — community benefit, fairness, privacy and security, transparency, accountability — are no longer the taxonomy NSW assesses against.
What the new instrument says
The NSW AI Operational Policy is explicit about the replacement. Section 1.1 reads:
The policy replaces the NSW AI Ethics Policy and adopts Australia's AI Ethics Principles.
That single sentence does two things at once. It retires an instrument, and it adopts a different — and larger — set of principles in its place.
Five principles became eight
This is the part that breaks existing control mappings. It is not a renaming exercise.
Rescinded — NSW AI Ethics Policy (5)
- Community benefit
- Fairness
- Privacy and security
- Transparency
- Accountability
In force — Australia's AI Ethics Principles (8)
- Human, societal and environmental wellbeing
- Human-centred values
- Fairness
- Privacy protection and security
- Reliability and safety
- Transparency and explainability
- Contestability
- Accountability
Three of the eight have no clean ancestor in the old schema. Human-centred values, reliability and safety, and contestability are new assessment surfaces. If you have never documented how a person contests an automated decision your system makes, you now have a gap where previously you had no obligation.
How we got here
1 July 2024
DCS-2024-04 makes the AI Ethics Policy and AIAF mandatory
The instrument most existing NSW control mappings were built against.
30 July 2026
DCS-2026-02 issued
Replaces DCS-2024-04, with a one-month lead time before effect.
1 September 2026
New stack takes effect
DCS-2026-02 and the NSW AI Operational Policy commence; the NSW AI Ethics Policy is rescinded and its former URLs redirect.
What to do about it
Re-crosswalk rather than rename. A mapping built against five principles cannot be edited into a mapping against eight, because the three new domains have no corresponding controls to rename — they need controls written.
One caution worth holding: Australia's eight principles are themselves under pressure federally. The 21 October 2025 Guidance for AI Adoption now describes the eight principles in the past tense, as something that guided businesses and government. Building solely for the eight is better than building for the rescinded five — but build the underlying controls so they can be re-labelled again.
