Australia Online Safety Act 2021
Evidence request list. 15 controls, 15 carrying auditor artefact guidance. Generated from the compliance knowledge graph on 11 September 2026. Published by The Art of Service.
Enforcement and Powers
Be subject to the Act's enforcement mechanisms, including civil penalties, infringement notices, enforceable undertakings and injunctions (Part 10).
- Compliance monitoring against enforceable provisions
- Records of any undertakings and remediation
- Repeated contraventions
- Enforcement actions not remediated
Comply with the Commissioner's information-gathering powers, including notices to provide information or documents (Part 13).
- Process to respond to information notices
- Records of information provided
- Information notices not answered
Cooperate with the Commissioner's investigative powers, including examination and the production of documents (Part 14).
- Cooperation with investigations
- Document production records
- Non-cooperation with investigations
Expectations and Minimum Age
Service providers take reasonable steps to meet the Basic Online Safety Expectations determined under the Act, and respond to reporting notices (Part 4).
- Evidence of meeting the Basic Online Safety Expectations
- Responses to BOSE reporting notices
- Expectations not met
- Reporting notices not answered
Age-restricted social media platforms take reasonable steps to prevent age-restricted users from holding accounts, per the social media minimum age provisions (Part 4A).
- Age assurance preventing under-age accounts
- Evidence of reasonable steps for the minimum age
- Records of compliance
- No age assurance for the minimum age
- Under-age accounts permitted
Harm-Specific Removal Schemes
Comply with removal notices for cyberbullying material targeted at an Australian child within the required time (Part 5).
- Removal-notice handling process
- Records of removals within time
- Definition applied to cyberbullying material
- Removal notices not actioned
- Material not removed in time
Comply with the image-based abuse scheme, including removal notices and civil penalties for non-consensual sharing of intimate images (Part 6).
- Removal of non-consensual intimate images on notice
- Process for image-based abuse complaints
- Intimate images not removed on notice
- No image-based abuse process
Comply with removal notices for cyber-abuse material targeted at an Australian adult (Part 7).
- Removal-notice handling for adult cyber abuse
- Records of removals
- Removal notices not actioned
- Adult cyber abuse material not removed
Respond to blocking requests and notices for material that promotes, incites, instructs in or depicts abhorrent violent conduct (Part 8).
- Blocking-request/notice response process
- Records of blocking actions
- Blocking requests not actioned
- No process for abhorrent violent material
Online Content Scheme
Comply with removal notices for Class 1 material under the online content scheme (Part 9).
- Removal of Class 1 material on notice
- Records of removals
- Class 1 material not removed on notice
Apply restricted access requirements (including age verification) to Class 2 material under the online content scheme (Part 9).
- Restricted access / age verification for Class 2 material
- Compliance with restricted access requirements
- Class 2 material accessible without restriction
- No age verification where required
Comply with removal, remedial, link-deletion and app-removal notices directed to hosting services, app distribution services and internet search engine services (Part 9).
- Process to action removal/link-deletion/app-removal notices
- Records of compliance
- Notices not actioned
- No process for link-deletion/app-removal
Comply with registered industry codes and any mandatory industry standards made under the Act (Part 9).
- Compliance with applicable industry codes/standards
- Evidence of code obligations met
- Industry codes not complied with
- Mandatory standards breached
eSafety Commissioner and Complaints
The eSafety Commissioner administers the online safety schemes, promotes online safety, and exercises the functions and powers conferred by the Act (Part 2).
- Engagement with the eSafety Commissioner's schemes
- Responses to Commissioner exercise of functions
- Commissioner directions ignored
- No engagement with the regulator
The Act provides for complaints and objections about harmful online material and the Commissioner's investigation of them; providers cooperate with this system (Part 3).
- Process to receive and act on complaints/objections
- Cooperation with Commissioner investigations
- Records of complaints handled
- No complaints handling
- Investigations not cooperated with
Assembled from the framework’s own control set, so this list is regenerated rather than written and stays current as the graph does. See the Australia Online Safety Act 2021 framework page.