# Blog — 40° South

> Writing on AI compliance for regulated Australian industries: APRA CPS 234, the Privacy Act, AI transparency, and the evidence layer that proves your controls are active.

Blog

# The evidence layer, explained. 

Writing on AI compliance for regulated Australian industries: APRA CPS 234, the Privacy Act, AI transparency, and what it takes to prove your controls are active. 

[ ![](/images/asic-three-gaps-hero.png) ](/blog/asic-just-told-you-whats-coming) 

asiccomplianceai-governance 

### [ ASIC just told you what's coming. Is your evidence ready? ](/blog/asic-just-told-you-whats-coming) 

 ASIC's regulator-commissioned DFCRC landscape review names AI governance, automated decision accountability, and third-party AI dependence as Australia's three priority areas. What it means for regulated firms. 

23 May 2026 

complianceAPRA CPS 234Privacy Act 

### [ AI compliance for Australian regulated industries: what changes in December 2026 ](/blog/ai-compliance-for-australian-regulated-industries) 

 Australia has assigned accountability for AI faster than most businesses can prove it. Here's what APRA now expects, why per-call evidence is becoming the way regulated firms say yes to AI, and where the December AI-transparency duty fits. 

20 May 2026 

shadow-aicompliancepii-detection 

### [ Your staff are already sending TFNs to ChatGPT ](/blog/your-staff-are-already-sending-tfns-to-chatgpt) 

 34.8% of corporate data going into AI tools is now classified as sensitive. In Australian regulated industries, the compliance implications are immediate. 

15 May 2026

---
Markdown version of https://40south.au/blog for AI readers. Site index for LLMs: https://40south.au/llms.txt