AI incident and near-miss register for | AI Law Framework
Form · AI decision systems
AI incident and near-miss register for law firms (Australia)
Register of AI incidents and near misses (wrong citations, confidential data in an unapproved tool, agent errors, deepfake attempts) with triage, notification decisions and lessons, used with the firm's AI incident response procedure.
MaintainedWe keep this page up to date.Law stated as at
Kind
Form A form to complete, or a guide to completing an official one.
Version
1
Where it applies
Australia, Commonwealth, New South Wales, Victoria, Western Australia, Queensland
AI use
Yellow You and the tool draft together, with you directing. You check every statement you rely on.
Source
Written for this library
Status
Maintained. Checked on 7 November 2026 against the 4 authorities it cites, for 6 jurisdictions.
When to use it
Use from the day the firm approves any AI tool. Each entry links to the incident response procedure (a45-ai-incident-response-procedure). Review the register at each policy review and before renewing any AI vendor contract.
How to use this precedent
Check that it fits the matter: read “When to use it” and the places it applies to.
Log in to read the full text. It is free.
Adapt it to the matter, filling in each placeholder shown in [square brackets].
Use AI only as far as the Yellow level allows. “How AI may be used” says what AI may and must not do.
Before it goes out, a lawyer checks it against current law and each point under “The lawyer checks”.
How AI may be used
A tool may summarise entries and spot repeated causes. A lawyer decides whether an incident is an eligible data breach, whether the client or a court must be told, and closes each entry.
AI may
Summarise open entries and overdue actions
Group entries by tool and cause for the review meeting
AI must not
Must not decide whether an eligible data breach has occurred
Must not close an entry or record that a client or court was told
Must not be given the confidential detail of the incident beyond what the register needs
The lawyer checks
Whether the incident involves personal information and needs a s 26WH assessment within 30 days
Whether the client must be told, and whether a court needs a correction
Root cause and fix are real changes, not just a reminder