Finish the impact assessment for an in-scope government AI use case before deployment
Key facts
- Human involvement
- YellowClose supervision
- How AI is used
- From the use-case papers, record whether the agency has assessed the use case against the in-scope criteria in Appendix C of the Policy for the responsible use of AI in government, and quote the passage. Do not invent the Appendix C criteria; that appendix was not opened. If the lawyer has marked the use case in scope, list the impact-assessment steps the page requires: start at the design stage while requirements are being developed; before deployment, finalise the assessment and apply any agreed risk treatments; use the Australian Government AI impact assessment tool, or an internal process that integrates all provisions of the tool, is consistent, delivers the same or a higher inherent and residual risk outcome, and can be revised when the tool is updated. Note the page's deadlines: agencies must begin assessments within 12 months of the policy taking effect, and existing use cases not yet assessed must be tested for scope and have all relevant policy actions applied by 30 April 2027. Do not decide that the use case is in scope.
- What the lawyer must review
- The lawyer decides whether the agency and the use case are in scope, whether an internal process truly matches the impact assessment tool, and which risk treatments are agreed before deployment. The policy page records that version 2.0 took effect on 15 December 2025. Appendix C was not opened.
- Written for / version
- US
Open a jurisdiction version of this task to see which instruments apply: US
Who does what
| Role | What they do |
|---|---|
| Assistance | From the use-case papers, record whether the agency has assessed the use case against the in-scope criteria in Appendix C of the Policy for the responsible use of AI in government, and quote the passage. Do not invent the Appendix C criteria; that appendix was not opened. If the lawyer has marked the use case in scope, list the impact-assessment steps the page requires: start at the design stage while requirements are being developed; before deployment, finalise the assessment and apply any agreed risk treatments; use the Australian Government AI impact assessment tool, or an internal process that integrates all provisions of the tool, is consistent, delivers the same or a higher inherent and residual risk outcome, and can be revised when the tool is updated. Note the page's deadlines: agencies must begin assessments within 12 months of the policy taking effect, and existing use cases not yet assessed must be tested for scope and have all relevant policy actions applied by 30 April 2027. Do not decide that the use case is in scope. |
| Lawyer | Set the scope, supervise the work closely, verify every part relied on, resolve omissions and exceptions, and approve the exact output. |
Checklist
- Confirm Appendix C has been applied by the lawyer. Do not fill in-scope criteria the appendix was not opened to supply.
- Confirm an internal process is recorded as consistent with the impact assessment tool, including the same or a higher inherent and residual risk outcome.
- Confirm the assessment is final, and agreed treatments are listed, before any deployment step is marked done.
- Apply the 30 April 2027 date only to existing use cases not yet assessed, and the twelve-month start only by reference to the policy's commencement.
Sources
- Digital Transformation Agency: AI use case impact assessment · 2026-10-22
- Digital Transformation Agency: Policy for the responsible use of AI in government, version 2.1 · 2026-10-22
These are suggested working checks. Confirm the required checking with the responsible lawyer before work starts; the checking approach does not establish permission to use AI.