AU OSA
eSafety Commissioner duties, including the 2024 amendments and Basic Online Safety Expectations.
20 obligations in this framework — full source text, applicability logic, and engineering tickets inside Landfall.
20 obligation pages · last updated 11 September 2026
AU-OSA-AGE-VERIFICATIONCRITICALRequirementAge VerificationImplement age assurance measures to prevent children under 16 from accessing social media and to restrict access to age-restricted content
Online Safety Amendment (Social Media Minimum Age) Act 2024; Online Safety Act 2021, s 104B-104F · Read the full page →
Featured — source excerpt“The Australian Government has legislated a social media minimum age of 16 years through the Online Safety Amendment (Social Media Minimum Age) Act 2024.”
AU-OSA-APP-STORE-AGE-RATINGSHIGHRequirementAge VerificationEnsure apps have accurate age ratings and enforce age-appropriate access controls in app distribution services
BOSE Determination 2022, Section 14; Online Safety Act 2021, s 45(3) · Read the full page →
Featured — source excerpt“Providers of app distribution services (app stores) must take reasonable steps to ensure that apps available through the service have accurate age ratings or content classifications.”
AU-OSA-BOSE-AI-SAFETYCRITICALRequirementAutomated DecisionsEnsure generative AI features are designed and operated with user safety, particularly children's safety, as a primary consideration
BOSE Amendment (No. 1) 2024, Schedule 1, Items 6-8 · Read the full page →
Featured — source excerpt“A provider of a service that uses generative artificial intelligence must consider user safety, including the safety of children, in the design and operation of generative AI features.”
AU-OSA-BOSE-BEST-INTERESTSCRITICALRequirementGovernanceMake the best interests of children a primary consideration in service design, development, and operation
BOSE Determination 2022, Section 10; BOSE Amendment (No. 1) 2024 · Read the full page →
AU-OSA-BOSE-CSAMCRITICALRequirementData ProcessingProactively detect, remove, and report child sexual abuse material (CSAM) using industry best-practice technologies
BOSE Determination 2022, Section 11; Online Safety Act 2021, Part 2 Division 2 · Read the full page →
AU-OSA-BOSE-REPORTINGHIGHProcessUser RightsProvide accessible, timely, and transparent reporting and complaints mechanisms for harmful and illegal content
BOSE Determination 2022, Sections 12-13; Online Safety Act 2021, s 46 · Read the full page →
AU-OSA-BOSE-SAFE-ENVIRONMENTHIGHRequirementGovernanceTake reasonable steps to ensure users can use the service in a safe online environment, with particular attention to children's safety
BOSE Determination 2022, Sections 7-9 · Read the full page →
AU-OSA-CYBERBULLYINGCRITICALRequirementUser RightsComply with the cyberbullying removal scheme by removing cyberbullying material within 24 hours of an eSafety Commissioner removal notice
Part 6, Sections 76-92 - Cyberbullying Scheme for Children · Read the full page →
AU-OSA-DATA-RETENTION-SAFETYHIGHRecord KeepingData RetentionRetain safety-related data and records sufficient for eSafety Commissioner investigations while complying with privacy requirements
BOSE Determination 2022, Section 13; Online Safety Act 2021, s 50 · Read the full page →
AU-OSA-ENCRYPTION-CHILD-SAFETYCRITICALRequirementData ProcessingEnsure child safety measures remain effective even where end-to-end encryption is deployed
BOSE Determination 2022, Section 11(3); Telecommunications and Other Legislation Amendment (Assistance and Access) Act 2018 · Read the full page →
AU-OSA-IMAGE-BASED-ABUSECRITICALRequirementUser RightsComply with the image-based abuse scheme by removing non-consensual intimate images within 24 hours of a removal notice
Part 9, Sections 119-134 - Image-Based Abuse Scheme · Read the full page →
AU-OSA-INDUSTRY-CODESHIGHRequirementGovernanceComply with registered industry codes and mandatory industry standards determined by the eSafety Commissioner
Part 10, Sections 137-148 - Industry Codes and Standards · Read the full page →
AU-OSA-ONLINE-CONTENT-SCHEMECRITICALProhibitionData ProcessingRemove Class 1 (refused classification) material and restrict children's access to Class 2 (restricted) material
Schedule 2 - Online Content Scheme; Sections 104-109 · Read the full page →
AU-OSA-RESTRICTED-ACCESSHIGHRequirementAge VerificationImplement a restricted access system with age verification to prevent children from accessing age-inappropriate content
Part 6A, Section 45A — Restricted Access System for Age-Inappropriate Content · Read the full page →
AU-OSA-RISK-ASSESSMENTHIGHAssessmentRisk AssessmentConduct regular risk assessments for child safety harms and implement proportionate mitigation measures
BOSE Amendment (No. 1) 2024, Schedule 1, Items 3-5; BOSE Determination 2022, Section 9 · Read the full page →
AU-OSA-SAFETY-BY-DESIGNHIGHProcessGovernanceIncorporate eSafety Commissioner Safety by Design principles across the full product lifecycle
BOSE Determination 2022, Section 8; eSafety Commissioner Safety by Design Framework · Read the full page →
AU-OSA-TAKEDOWN-NOTICECRITICALRequirementGovernanceServices must remove seriously harmful content within 24 hours of receiving a removal notice from the eSafety Commissioner
Part 9, Section 109 — Removal Notices for Harmful Online Content · Read the full page →
AU-OSA-TERMS-ENFORCEMENTHIGHRequirementGovernanceMaintain and actively enforce terms of service that prohibit harmful and illegal content, with consistent and transparent enforcement
BOSE Determination 2022, Sections 7-8; Online Safety Act 2021, s 46(1)(b) · Read the full page →
AU-OSA-TRANSPARENCY-REPORTINGHIGHDisclosureTransparencyComply with eSafety Commissioner transparency reporting requirements including content moderation data and safety measure effectiveness
BOSE Determination 2022, Sections 15-16; Online Safety Act 2021, s 49 · Read the full page →
AU-OSA-USER-EMPOWERMENTHIGHRequirementParental ControlsProvide user empowerment tools and parental controls to help users and parents manage children's safety
BOSE Determination 2022, Sections 8-9; BOSE Amendment (No. 1) 2024, Schedule 1, Item 4 · Read the full page →
Landfall turns each of the 20 Australia Online Safety Act 2021 obligations into traceable engineering tickets — with full source text, applicability logic, and a citation chain your auditors can follow.
Critical Boundaries
Understanding these boundaries is essential before using this product. Misuse of this tool for purposes outside its scope may create legal, regulatory, or commercial risk for your organization.
This product does not provide legal advice and does not create an attorney-client relationship.
Interpretations are informational analysis, not legal counsel. Always consult qualified legal professionals for compliance decisions.
We do not quantify, calculate, or certify your compliance risk level.
No numerical risk rating, compliance percentage, or safety score. Risk assessment requires human judgment about your specific context.
This is a planning and mapping tool, not a runtime enforcement system.
Does not integrate with your production systems. Does not block, filter, or enforce compliance in real-time. Implementation is your responsibility.
Using this tool does not mean you are compliant with any regulation.
No certification, seal of approval, or compliance guarantee. Regulators will evaluate your actual implementation, not your use of this tool.
Our interpretations are not binding and may differ from regulatory guidance.
Only regulators and courts provide authoritative interpretation. Our analysis reflects our reading of requirements, which may be incomplete or incorrect.
This tool does not shield you from enforcement actions or liability.
Documentation of your process is valuable, but does not constitute a legal defense. Compliance is ultimately your organization's responsibility.
AI features assist analysis but do not make compliance decisions for you.
AI-generated interpretations require human review and approval. Automated suggestions are starting points, not final answers.
We do not cover all regulations, all obligations, or all jurisdictions.
Regulatory landscape is vast and evolving. Gaps in our coverage do not mean those requirements don't apply to you.
What This Tool IS: