Australia's Digital Duty of Care, Explained: What It Is, the Pros and Cons, and What It Means for Families

What is the Digital Duty of Care?

A digital duty of care is a legal responsibility placed on online services to proactively keep the people who use them safe — rather than only reacting after harm has already happened. It borrows the idea from workplace and product-safety law: if you run a service that millions of people (including children) use, you owe them a baseline of care in how you design and operate it.

In practice that means a platform can't just wait for a parent to report a problem, hide behind its terms of service, or say "we took it down when we were told." Under a duty-of-care model, the service has to look ahead — assess the risks its design creates, and take reasonable steps to reduce foreseeable harms such as bullying, self-harm content, grooming, scams, and features engineered to keep kids scrolling.

Australia's version is set out in the Online Safety Amendment (Digital Duty of Care) Bill 2026, released as an exposure draft on 8 September 2026. It builds on — and goes well beyond — the existing Online Safety Act 2021, moving from today's mostly reactive, complaints-and-takedowns approach to a systems-based one that judges platforms on how safely they are built and run.

Digital Duty of Care vs the under-16 ban — how they differ, and how they work together

This is the part that confuses everyone, so let's make it simple. They are two different laws doing two different jobs, and they're designed to reinforce each other.

The honest summary: the ban is a blunt instrument aimed at one problem (young kids on mainstream social feeds), while the duty of care is the systemic backstop meant to lift safety everywhere else — including the apps your kids actually spend the most time in, which the ban never touched. If both land, they overlap into something closer to real coverage. Neither, on its own, is a shield. Read the under-16 ban explained and what the ban leaves out.

What platforms will actually have to do

Under the draft duty, an online service must, so far as is reasonably practicable, maintain a safe environment. Expect that to translate into obligations like:

• Risk assessments — proactively identify the harms their design could cause to users, with extra weight on children.
• Reasonable, proportionate safeguards — safer defaults, friction on risky features, and design that isn't optimised purely for time-on-app.
• Categories of harm — a defined set the platform must actively guard against (e.g. child sexual abuse material, pro-self-harm and pro-suicide content, grooming, and harms from addictive or manipulative design).
• Transparency and accountability — being able to show the eSafety Commissioner what steps they took, not just that they responded to complaints.
• Enforcement with teeth — the eSafety Commissioner can investigate compliance, and serious breaches carry fines up to A$109.2 million.

Crucially, it's a standard, not a checklist. "Reasonable steps" flexes with the size of the service and the severity of the risk — a global platform used by millions of teens is held to more than a tiny hobby forum.

Where it's at right now

• 8 September 2026 — the Government released the exposure draft of the Bill for public comment.
• Consultation — open, with submissions due by 22 September 2026 (via the Communications department).
• Next — the Government has publicly committed to introducing the legislation to Parliament in 2026, after an iterative process (the framework was revived in December 2025 and an issues paper followed in May 2026).
• If passed — it becomes an overarching, systems-based duty enforced by eSafety, sitting on top of the Online Safety Act 2021.

In other words: it is not yet law — it's a serious, well-advanced Bill in active consultation. That's exactly why it's worth understanding now, before the headlines hit.

The case FOR a digital duty of care

• It targets the design, not just the symptom. Instead of endless whack-a-mole takedowns, it makes "safe by design" the legal baseline — closer to how we already regulate cars, food and workplaces.
• It covers what the ban misses. The under-16 ban skips messaging, gaming and platforms like Discord and Roblox. A broad duty of care is meant to reach them.
• It shifts the burden onto the platforms. The responsibility (and the cost of getting it wrong) sits with the companies profiting from the design — not with exhausted parents.
• It's future-proof-ish. A principles-based standard can flex to new apps and new harms (AI companions, for instance) without needing a brand-new law each time.
• Real penalties. A$109.2M fines and an active regulator give it more bite than voluntary codes ever had.

The case AGAINST — the criticisms

• "Reasonably practicable" is vague. Platforms and free-speech groups argue nobody yet knows exactly what compliance looks like, which creates uncertainty and legal risk.
• Over-blocking risk. To stay safe, platforms may over-remove lawful content or add heavy age-assurance/ID checks — with privacy and expression trade-offs for everyone, not just kids.
• Enforcement reality. A duty is only as strong as eSafety's capacity to investigate global giants; critics question whether the resourcing matches the ambition.
• It can lull parents into complacency. The biggest risk for families is believing "the law has it handled." It doesn't — and won't for years, if ever.
• Timelines slip. It's still a draft; the scope and start date can change through Parliament.

What it means for your family

Here's the part that actually matters at your kitchen table. Even in the best case, the Digital Duty of Care will take time to pass, phase in and bite — and it will make services safer, not safe. The apps on your child's phone right now are still governed by the settings you control today.

So treat the duty of care as good news in the background, and keep doing the work in the foreground:

• Set the device up properly — screen-time, content and privacy controls at the OS level. Start with our Family Lockdown Plan.
• Mind the gap. The apps most kids live in — Discord, Roblox, messaging, games — are the ones both the ban and (for now) most enforcement reach last. Your controls matter most there.
• Keep talking. No law can do the part that a five-minute, judgement-free chat can.