AU OSA BOSE Determination 2022, ss 6(3)(e) and 7(2) - Lifecycle safety risk assessment
Incorporate eSafety Commissioner Safety by Design principles across the full product lifecycle
Where this comes from
Provision: BOSE Determination 2022, ss 6(3)(e) and 7(2) - Lifecycle safety risk assessment; regard to the Commissioner's guidance (the Safety by Design framework)
Instrument: Australia Online Safety Act 2021 - Basic Online Safety Expectations
Citation: Online Safety (Basic Online Safety Expectations) Determination 2022 (Cth), s 6(3)(e), s 7(1)-(2); Online Safety Act 2021 (Cth), ss 45(4), 46(1)(a)-(b), 49-50; eSafety Commissioner, Safety by Design framework (voluntary guidance, not retrieved)
Text version: Online Safety Act 2021 (Cth), compilation of 12 September 2026 (includes the Online Safety Amendment (Social Media Minimum Age) Act 2024 and Act No. 83 of 2026, whose title and commencement were not established from the retrieved text), and Online Safety (Basic Online Safety Expectations) Determination 2022, compilation of 31 May 2024 (includes the Amendment (No. 1) Determination 2024); both retrieved from legislation.gov.au on 2026-09-21.
Who it applies to
It applies when all of these are true:
- Service is likely to be accessed by children under 18
- Service uses content personalization
- Service collects behavioral data
What engineering work it implies
Sample acceptance criteria Landfall generates for this obligation:
- High-privacy / high-safety settings are the default for users who are or may be children
- Nudges and engagement patterns that are detrimental to children are removed or off by default
- Geolocation, public visibility, and contact-by-strangers are off by default for minors
- Design decisions affecting children are documented with their rationale
- A newly created minor account has high-privacy defaults
Questions people ask
- Does AU OSA BOSE Determination 2022, ss 6(3)(e) and 7(2) - Lifecycle safety risk a… apply to my service?
- It applies when Service is likely to be accessed by children under 18; Service uses content personalization; Service collects behavioral data.
- From when does this apply?
- AU OSA BOSE Determination 2022, ss 6(3)(e) and 7(2) - Lifecycle safety risk a… applies from 23 January 2022. Its current status is: in force.
Find out whether this one lands on you
Landfall's pre-scan answers the applicability question above for your product in minutes, then turns every obligation that applies into traceable engineering tickets with a citation chain your auditors can follow.
Not legal advice. Landfall maps regulatory obligations to engineering work for planning purposes. Its verdicts are not legal advice and create no attorney-client relationship — verify with qualified counsel before relying on them.