Executive summary
Background
Artificial intelligence is an economic question for Australia before it is a technological one. The gains anticipated over the coming decade will be captured in application rather than invention, in the industries where Australian operating knowledge is the scarce input and in AI driven automation to repatriate critical supply chains.
Whether the benefits are realised turns on a question the Commonwealth does not ask, being ‘who can lawfully compel the entity that operates the capability’?
Data residency describes where information is stored. Sovereignty describes who can access and withdraw it.
Problem
Australia is acquiring a dependency it cannot see, cannot price and cannot easily reverse.
The United States, China and India each have laws that can compel companies domiciled in their countries to hand over Australian data. A contract signed in Australia cannot override a law passed overseas. A supplier bound by one of these laws must comply with it even when the data resides in an Australian data centre and even when the contract with the Commonwealth says otherwise.
The United States has the CLOUD Act, China has its National Intelligence Law and India has section 69 of its Information Technology Act 2000. The problem is not what these companies intend to do, it is what their home governments can lawfully order them to do.
The data these laws can reach is not limited to names and records. It includes the operating logic that makes an Australian business or agency competitive: how a mine schedules its equipment, how a farm manages its planting cycle, how an agency reaches its decisions. When a foreign government can compel a company to hand over that knowledge, it can transfer the source of Australia's competitive advantage directly to industries inside its own economy. In June 2026 a single United States government decision cut off everyone outside the United States from two leading AI models for nineteen days.
Australia signed the United States-led Pax Silica declaration in December 2025 and in August 2026 the United States Studies Centre, supported by the US Consulate here in Australia argued that Australia cannot build its way out of dependency on the United States and should instead negotiate access terms, what it called managed dependency. China distributes capable open-weight models free into markets it does not otherwise reach, using training data that cannot be independently verified. India holds equivalent legal reach over data as both.
The Commonwealth cannot currently say who can compel the entities running its AI capability. Of 73 government transparency statements reviewed in September 2026, none state whether inference is processed onshore, whether the Commonwealth holds the model weights, or whether any foreign jurisdiction has legal reach over the supplier.
A second exposure sits beneath that and no current instrument classifies it as data. Before an AI capability can act inside an agency, it must be given the agency's own operating logic: its System of Work. When that layer is configured inside a foreign-controlled platform, it leaves with the platform. The agency cannot fully account for what its AI may do and cannot change vendor without rebuilding that logic from the ground up.
Once that logic is inside a foreign-controlled platform, two outcomes become inevitable and neither requires hostile intent. The first is commodification. The operating logic gets wrapped into an API call and priced as a subscription. What was a competitive advantage now becomes a use case available to everyone. The second is replacement. Using that operating logic and applying compute at a scale no incumbent can match, the platform replicates an entire industry's function and delivers it faster and cheaper. The industry itself becomes redundant.
This exposure does not arrive through a single visible decision. It arrives through licence extensions and feature additions inside platforms agencies already hold. Each individual step is defensible. Nobody is assessing the cumulative position. Technology is the largest procurement category across Australian government, and contracts worth approximately $27 billion reach their end dates during 2026.
Solution
Thirteen recommendations follow, directed at two outcomes. Jurisdictional exposure should be scored before a capability is bought. An agency or enterprise should hold its own System of Work under Australian law. Each can be delivered through instruments the Commonwealth already holds and none requires a new agency. Three warrant action first, because each resides inside an existing process and the first closes a window that shuts during 2026.
- Recommendation 1 makes legal domicile the test of sovereignty and applies a tiered classification at the point of purchase. Conditions set at the 2026 renewals cost nothing and capability bought without them carries the exposure for the life of the contract.
- Recommendation 11 adds four disclosure fields to the transparency statements agencies already publish, turning an existing compliance exercise into a national picture of jurisdictional exposure at close to no cost.
- Recommendation 12 is within the committee's own gift. Asking each portfolio how much of its AI capability is operated by entities subject to foreign compulsion and publishing who could answer would establish a position no submitter can.
