Unfair Trading Practices Act 2026: What Australian AI Engineers Must Know About AI-Washing and Algorithmic Manipulation

Australian businesses deploying artificial intelligence in customer-facing products and services are entering a new era of legal accountability. The Competition and Consumer Amendment (Unfair Trading Practices) Act 2026, which received Royal Assent on 6 July 2026 and commences on 1 July 2027, introduces a sweeping prohibition on algorithmic manipulation and AI-enabled dark patterns. Simultaneously, the Australian Competition and Consumer Commission (ACCC) has formally flagged AI-washing as a 2026-27 enforcement priority. For AI engineers and the businesses they serve, understanding these obligations is no longer optional — it is a core engineering and governance requirement.

Understanding the Unfair Trading Practices Regime

The Competition and Consumer Amendment (Unfair Trading Practices) Act 2026 amends the Australian Consumer Law (ACL) to introduce a general, principles-based prohibition on unfair trading conduct. The prohibition is technology-neutral by design, meaning it applies equally to digital platforms, AI-driven recommendation engines, algorithmic pricing systems, and traditional offline business practices.

To contravene the prohibition, conduct must satisfy two cumulative limbs. First, it must manipulate a consumer or unreasonably distort the environment in which the consumer makes a decision. Second, it must cause, or be likely to cause, detriment — whether financial, physical, psychological, or otherwise — to the consumer. Both limbs must be established for a contravention to occur.

What the Act Targets in AI Systems

• Dark patterns: Digital design elements — including AI-generated interfaces — that nudge or pressure consumers into unintended actions, such as hidden cancellation flows, pre-ticked consent boxes, or urgency cues generated by predictive algorithms
• Algorithmic manipulation: AI systems that personalise pricing, product ordering, or content presentation in ways that exploit consumer vulnerabilities or distort rational decision-making
• Subscription traps: AI-assisted onboarding flows that obscure recurring charges, make cancellation difficult, or fail to provide clear disclosure of contract terms at the point of sale
• Drip pricing: Algorithmic checkout systems that progressively reveal mandatory fees — such as delivery or service charges — rather than displaying the total cost upfront

AI-Washing: The ACCC's 2026-27 Enforcement Priority

Separate from the new unfair trading regime, the ACCC has identified AI-washing as a key enforcement concern under existing ACL provisions. AI-washing occurs when a business makes false or misleading representations about the AI capabilities of its products or services.

The ACCC's 2026-27 Compliance and Enforcement Priorities explicitly target manipulative and false practices in digital markets. The Commission has signalled that it will focus on the accountability of senior executives in organisations where a poor compliance culture exists around the marketing and deployment of AI technology.

Common AI-Washing Scenarios

• False capability claims: Marketing a product as "AI-powered" or "machine learning-driven" when it uses simple rule-based logic or no AI at all
• Performance exaggeration: Overstating the accuracy, reliability, or autonomy of an AI system in ways that mislead customers about what the product can actually do
• Opaque AI decision-making: Failing to disclose that consequential decisions — such as credit assessments, insurance pricing, or content moderation — are made by automated systems
• Greenwashing via AI: Using AI-generated sustainability metrics or carbon calculations without adequate methodological disclosure, creating a misleading impression of environmental performance

Under the ACL, penalties for serious breaches can reach the greater of $100 million, three times the value of the benefit obtained, or 30% of adjusted turnover during the breach period. These are not theoretical risks — the ACCC has demonstrated a willingness to pursue large penalties in digital markets.

Privacy Act Automated Decision-Making Obligations

AI engineers must also be aware of obligations arising under the Privacy Act 1988. From 10 December 2026, entities subject to the Act must disclose in their privacy policies the use of "substantially automated decisions" that significantly affect an individual's rights or interests.

This obligation applies to a wide range of AI applications — including credit scoring, recruitment screening, insurance underwriting, and personalised content delivery. The disclosure must be clear, accessible, and proximate to the point at which the automated decision is made or communicated to the individual.

Engineering Obligations: What AI Engineers Must Build

The combined effect of the unfair trading regime, AI-washing enforcement, and Privacy Act obligations creates a set of concrete engineering requirements that AI practitioners must address in system design, testing, and deployment.

• Transparency by design: AI systems that make or influence consequential decisions must be designed to generate human-readable explanations of their outputs, consistent with the Privacy Act's automated decision-making disclosure requirements
• Dark pattern audits: User interface flows driven by AI recommendation or personalisation engines must be audited against the unfair trading prohibition before the 1 July 2027 commencement date
• Capability documentation: Marketing and product teams must be provided with accurate, technically verified descriptions of AI system capabilities — AI engineers bear responsibility for ensuring that public claims are grounded in documented system behaviour
• Subscription and pricing logic review: Any AI system that manages subscription onboarding, renewal, or pricing must be reviewed to ensure compliance with the specific subscription trap and drip pricing provisions of the Act
• Audit trails and logging: AI systems should maintain logs of decision inputs, model versions, and outputs to support regulatory investigations and demonstrate compliance
• Human oversight mechanisms: Systems making high-stakes automated decisions should incorporate human review pathways, consistent with the ACCC's expectation that AI deployment is accompanied by meaningful human accountability

Australian Regulatory Context

The unfair trading practices regime sits within the broader Australian Consumer Law, which is jointly administered by the ACCC and state and territory consumer protection agencies. The ACCC has primary responsibility for enforcement of the new prohibition and has indicated it will use its full suite of investigative and enforcement powers from the 1 July 2027 commencement date.

The Privacy Act automated decision-making obligations are administered by the Office of the Australian Information Commissioner (OAIC). The OAIC has published guidance on what constitutes a "substantially automated decision" and the disclosure standards required under the amended Act.

The government's broader AI governance framework — including the Office of AI established within the Department of the Prime Minister and Cabinet in July 2026 — is developing mandatory Australian Standards for AI, with legislation expected in early 2027. AI engineers should monitor the development of these standards, as they are likely to impose additional obligations on high-risk AI applications.

The Australian AI Safety Institute (AISI) and the voluntary AI6 (Guidance for AI Adoption) framework provide interim guidance on responsible AI deployment. While voluntary, adherence to these frameworks is increasingly expected by regulators and enterprise customers as evidence of good governance.

Questions to Ask Your AI Engineer

If your business deploys AI in customer-facing products or uses AI to drive pricing, recommendations, or automated decisions, the following questions will help you assess your compliance posture ahead of the 1 July 2027 commencement date.

1. Have you audited our AI-driven user interfaces for dark patterns that could constitute manipulation or unreasonable distortion under the new unfair trading prohibition?
2. Are our marketing and product descriptions of AI capabilities technically accurate and supported by documented system behaviour?
3. Does our privacy policy disclose all substantially automated decisions that significantly affect individuals, as required from 10 December 2026?
4. Do our subscription and pricing AI systems comply with the specific disclosure and cancellation requirements of the Act?
5. What audit trails and logging mechanisms are in place to demonstrate compliance with the unfair trading regime and Privacy Act obligations?
6. How are human oversight and review mechanisms built into our AI decision-making workflows?
7. Are we monitoring the development of mandatory Australian Standards for AI and the work of the Office of AI?

How MyMoney® Can Help

The intersection of AI engineering, consumer law, and privacy regulation is complex and rapidly evolving. Businesses that deploy AI without specialist guidance risk significant regulatory exposure — including penalties of up to $100 million — as well as reputational damage from ACCC enforcement action.

MyMoney® connects Australian businesses with qualified AI engineers who understand both the technical and regulatory dimensions of responsible AI deployment. Whether you need a compliance audit of your existing AI systems, help designing transparency and explainability features, or guidance on the 1 July 2027 unfair trading obligations, the right AI engineer can protect your business and build consumer trust.

Post a Brief to describe your AI compliance challenge and receive tailored proposals from experienced AI engineers. Or Browse AI Engineers on the MyMoney® Marketplace to find specialists with proven expertise in responsible AI and Australian regulatory compliance.