Australia: eSafety Commissioner registered Designated Internet Services Online Safety Code (Class 1C and Class 2 Material)

On 9 September 2025, the eSafety Commissioner registered the Designated Internet Services Online Safety Code (Class 1C and Class 2 Material) under the Online Safety Act 2021. The Code outlines a risk-based framework for designated internet services (DIS) to manage harmful content, with a focus on protecting children. DIS are categorised into several types, including Enterprise DIS, General Purpose DIS, Classified DIS, End-User Managed Hosting Services, High Impact Class 2 DIS, High Impact Generative AI DIS, and Model Distribution Platforms, with compliance obligations scaled according to their functions and assessed risk levels. A three-tier system (Tier 1–high risk, Tier 2–moderate risk, Tier 3–low risk) evaluates the likelihood of Australian children encountering harmful content such as online pornography, self-harm material, violence, and simulated gambling. Risk assessments consider service functionality, user demographics, content acquisition methods, terms of use, Australian user numbers, and safety features, and must be documented by qualified personnel. High-risk services have more extensive requirements, including age assurance, detection systems, reporting mechanisms, safety tools, and information sharing with eSafety, while lower-risk services maintain basic safety standards. The Code includes provisions for emerging technologies, including generative AI services, which must prevent restricted content generation and implement age or content controls. End-user managed hosting services are required to address risks such as non-consensual image sharing, grooming, and sexual extortion. Model distribution platforms must ensure that their customers comply with Australian content regulations. Enforcement measures across all categories include mandatory reporting, engagement with safety organisations, user education, and review of system effectiveness. The framework aims to balance child protection with service functionality, providing flexibility in implementation while maintaining consistent safety standards.