Australia Online Safety Act 2021

BadLawAct No. 76 of 2021AustraliaAustralia
In force; industry codes phasing in age checks through 2026High threat

The law behind the eSafety Commissioner: takedown powers over global platforms, and industry codes now switching on age checks at search engines, app stores, and the devices themselves.

Latest update

Second tranche in force: app stores, device makers, messaging, and other services

Current position

In force; industry codes phasing in age checks through 2026

What it does

The Online Safety Act armed a single regulator, the eSafety Commissioner, with removal powers over cyber-abuse and violent content, backed by fines and link-deletion orders that reached into global disputes with X. Codes registered in 2025 took effect in two waves: from December 27, 2025 the search-engine code requires age checks for logged-in users, with six months to implement and A$9.9 million per breach, alongside new hosting and carriage codes; codes for app stores, equipment makers, messaging, and other services followed on March 9, 2026. Age gates are arriving across the Australian internet as regulatory codes, without a new act.

Why it matters

The codes route means the age-check regime expands by registration rather than by vote, and the March 2026 wave reaches the device and app store level the American state laws fight over. Together with the under-16 ban, Australia is assembling checks at the platform, the search bar, the app store, and the handset.

Our take

A regulator that can register a code and change what the internet requires of every Australian is legislating without a legislature. Search engines began carding users in December; devices followed in March. The act that built this passed in 2021 with barely a fight about any of it.

Timeline

Second tranche in force: app stores, device makers, messaging, and other services

Latest

First code tranche in force: age checks at search, hosting, and carriage services

Came into force

Royal assent