What other countries are actually doing
Every brief asks it, so here is the answer, current as at July 2026, with the parts a summary usually omits. The short version: two comprehensive regimes are in force, one has just delayed its hardest obligations, and several peers have stalled or chosen not to legislate. The claim that Australia's framework is a world first is true only in one specific sense - worth stating precisely, because the imprecise version has already been contested in public.
European Union - in force, and just deferred
The EU AI Act entered into force in August 2024 as the first comprehensive horizontal framework: risk tiers, prohibited uses, obligations scaling with risk, penalties to EUR 35 million or 7 per cent of global turnover. The part every comparison should now include: implementation ran visibly off track, and in May 2026 the EU institutions reached political agreement on the "Digital Omnibus", deferring the core high-risk obligations from August 2026 to December 2027 for use-based systems and to August 2028 for product-embedded ones.
Two lessons for Australia, one comfortable and one not. Comfortable: the deferral vindicates the framework-act-plus-instruments architecture and the property-not-mechanism approach to standards - the EU's difficulty is operationalising detailed obligations written before the conformity infrastructure existed. Uncomfortable: the deferral is also what a sustained industry campaign against a legislated timeline achieves, sixteen months at a time. Australia's early-2027 timetable will meet the same campaign; the counter is designing obligations that are cheap to verify from day one.
South Korea - the closest analogue, already running
Korea's AI Basic Act took effect on 22 January 2026 - Asia's first comprehensive AI law, and structurally the nearest thing to what Australia has announced. The shape: a framework statute with detail delegated to enforcement decrees, a ministry as coordinating authority, a presidentially chaired national committee, an AI Safety Research Institute. The obligations: focused on "high-impact" systems (energy, healthcare, employment, credit, public administration among the named sectors), with transparency and labelling duties and extraterritorial reach. And - notably - industrial support for data centres, training data access and small business, folded into the same act. Korea is running the experiment Australia is about to design. The Office of AI should be reading Seoul's enforcement decrees line by line, and so should everyone making claims about what is workable.
United Kingdom and Canada - the instructive absences
The UK has chosen no dedicated statute: sector regulators, ICO guidance, financial-conduct duties. Coherent as a philosophy, and increasingly lonely as a position. Canada is the sharper cautionary tale: its AI and Data Act (Bill C-27) lapsed when Parliament was prorogued in January 2025, and no replacement has been introduced - a comprehensive framework can die of parliamentary timing. For an Australian government with a stated early-2027 window, Canada is the argument for legislative discipline. The window is real and closable.
United States and China - the poles
No US federal statute; a White House legislative framework of recommendations (March 2026) and roughly 38 states with their own measures - fragmentation as the operating condition. China enforces binding but sector-specific measures, including generative content labelling and algorithm registration, under a governance philosophy not available to a liberal democracy. Neither is a model; both shape what companies operating here will claim is normal.
So what is actually first?
Not comprehensive AI law - the EU and Korea are in force. Not an AI safety institute - Australia joined an existing international network. The specific claim that survives scrutiny is the one the Government actually made: bringing the economic, social, national-security and environmental dimensions - including binding data-centre energy and water obligations - into a single legislated framework. No one else has done that. Precision here is not pedantry; a contested "world first" spends credibility the framework will need later, and the accurate claim is strong enough on its own.
The comparison table Australia should want to top
Not "first" or "strictest" but: shortest distance between a stated obligation and a verifiable one. The EU wrote detailed obligations and is discovering verification late. Korea legislated the framework and is writing the detail now. Australia, moving last among the three, gets to write conformity as machine-verifiable from the outset - the one advantage of arriving after the pioneers have absorbed the arrows.
Written with model assistance. Read and edited by a human - though I'm not an editor, so tell me what I've missed: drop me a line. Parts of this were generated; all of it was read, checked and meant. Feedback is welcome and gets used.
Reviewed and checked by the human author: 2026-07-20.