Enforcement actions and outcomes

Date: 19 August 2026    

Provider: Roblox Corporation

Code or standard: Online Safety (Relevant Electronic Services – Class 1A and Class 1B Material) Industry Standard 2024

Description:

Roblox has undertaken that it will take specified actions directed towards ensuring it does not, or is unlikely to, breach the following sections of the Relevant Electronic Services Standard:

• Section 18(4)(f), requiring providers to tools and settings that prevent end-users who are over 18 from using the service to contact a young Australian child (under 16) without the consent of the child’s parent or carer.
• Section 18(4)(g), requiring providers to ensure that the account of a young Australian child (under 16) with the service is private by default.
• Section 28(3)(b), requiring that user there are easily accessible and easy to use user reporting tools for identifying or flagging class 1A material or class 1B material accessible on or through the service.

Outcome:

Date: 29 July 2026

Provider: Telegram FZ-LLC or Telegram Messenger, Inc.  

Code or standard: Online Safety (Relevant Electronic Services – Class 1A and Class 1B Material) Industry Standard 2024

Description of alleged non-compliance:

• Section 13(2)(b) and/or Section 13(7)(c): failure to have Terms of Service that prohibit users from accessing or distributing class 1A material (specifically, pro-terror material) on all parts of the service.
• Section 14(2): failure to minimise the risk of future breaches after becoming aware of class 1A material on its service.
• Section 15(2): failure to remove class 1A material as soon as practicable after becoming aware of it.
• Section 20(2): failure to detect and remove known pro-terror material.
• Section 21(2): failure to effectively disrupt and deter the distribution of pro-terror material.
• Section 29(2)(b): failure to take appropriate and timely action to investigate reports of instances of Class 1 material.
• Section 29(4): failure to inform users who have reported class 1 material of the outcome of their complaints.

Outcome:

The matter is before the court.

Date: 16 June 2026.

Provider: Name withheld on public safety grounds.

Code or standard: Designated Internet Services Online Safety Code (Class 1C and Class 2 Material).

Description of non-compliance:

• Clause 10.1: Age assurance measures for generation of generative AI restricted category of material.
• Clause 10.19: Age assurance measures for access and exposure to online pornography.

Outcome:

Date: 19 May 2026.

Provider: Name withheld on public safety grounds.

Code or standard: Designated Internet Services Online Safety Code (Class 1C and Class 2 Material).

Description of non-compliance:

• Clause 10.1: Age assurance measures for generation of generative AI restricted category of material.
• Clause 10.19: Age assurance measures for access and exposure to online pornography.

Outcome:

Date: 2 September 2025.

Provider: Name withheld on public safety grounds.

Code or standard: Online Safety (Designated Internet Services – Class 1A and 1B Material) Industry Standard 2024.

Description of non-compliance:

• Section 22: Disrupting and deterring child sexual exploitation material.
• Section 26: Giving information about the Commissioner to end-users in Australia.

Outcome:

Date: 20 August 2025.

Provider: Bad Kitty's Dad, LDA.

Code or standard: Online Safety (Relevant Electronic Services – Class 1A and 1B Material) Industry Standard 2024.

Description of non-compliance: 

• Section 18: Safety features and settings
• Section 26: Responding to communications from, and referring certain unresolved complaints to, the Commissioner.

Outcome: