Australia's eSafety Commissioner has made the decision not to register two of eight online censorship codes drafted by the online industry as they fail to provide appropriate mechanisms to deal with illegal and harmful content online. New mandatory
codes will cover five sections of the online industry and operate under Australia's Online Safety Act 2021. The codes require industry to take adequate steps to reduce the availability of seriously harmful online content, such as child sexual abuse and
pro-terror material.
eSafety's decision not to register the Designated Internet Services (DIS) code, covering apps, websites, and file and photo storage services like Apple iCloud and Microsoft One Drive; and the Relevant Electronic Services (RES)
code, covering dating sites, online games and instant messaging, is due to the failure of the codes to define appropriate snooping/surveillance mechanisms, which is a requirement for registration .
eSafety will now move to develop mandatory and
enforceable industry standards for Relevant Electronic Services and Designated Internet Services.
The eSafety Commissioner has reserved her decision on a third code, the draft Search Engines code, covering online search over concerns it is no
longer fit for purpose following recently announced developments in the field of generative AI and its integration into search engine functions. eSafety has requested that a revised Search Engines code be submitted within four weeks to address specific
concerns we have raised.
eSafety Commissioner Julie Inman Grant said:
While I commend industry for their significant amendments following our final feedback on these world-first codes in February, these two
codes still don't meet our minimum expectations.
For example, the Designated Internet Services code still doesn't require file and photo storage services like iCloud, Google Drive, or OneDrive to detect and flag known child sexual
abuse material.
We know that online storage services like these are used to store and share child sexual abuse material and pro-terror material between offenders.
And the Relevant Electronic Services code
also doesn't require email services and some partially encrypted messaging services to detect and flag this material either, even though we know there are proactive steps they can take to stem the already rampant sharing of illegal content.
Industry codes will come into effect six months from the date of registration while eSafety will begin the process of drafting industry standards for Designated Internet Services and Relevant Electronic Services.
Once a code or
standard is in place, eSafety will be able to receive complaints and investigate potential breaches. An industry code or standard will be backed up by powers to ensure compliance including injunctions, enforceable undertakings, and maximum financial
penalties of nearly $700,000 per day for continuing breaches.
The draft industry censorship codes submitted to eSafety on 31 March can be found at onlinesafety.org.au/codes
.