Associate:
Dated: 26 April 2018
APPENDIX
STATEMENT OF AGREED FACTS AND ADMISSIONS
1. This Statement of Agreed Facts and Admissions is made jointly by the first applicant (the Australian Competition and Consumer Commission (ACCC)), the second applicant and the respondent (Telstra) for the purposes of section 191 of the Evidence Act 1995 (Cth).
AGREED FACTS
Parties
2 The ACCC is the statutory authority responsible for enforcing the Competition and Consumer Act 2010 (Cth) (CCA).
3 Under section 102 of the Australian Securities and Investments Commission Act 2001 (Cth) (ASIC Act), the Australian Securities and Investments Commission has relevantly delegated all of the functions and powers conferred on it under Division 2 of Part 2 of the ASIC Act (other than section 12GLC and Subdivisions GB and GC of Division 2 of Part 2) to the second applicant, the Executive General Manager, Enforcement Division of the ACCC, to the extent that those powers and functions may be necessary for, or reasonably incidental to, the commencement and conduct of any proceedings in relation to matters involving financial products and services provided as part of, or in connection with, the supply or possible supply of telecommunications services.
4 Telstra is a publicly listed company incorporated in Australia. Telstra supplies retail telephony and data services for mobile phones and tablets (mobile services).
5 Telstra admits that by reason of the facts set out below it has contravened sections 12DB(1)(b) and (e) of the ASIC Act as set out at [93] to [95] below.
Mobile services offered by Telstra
6 Telstra is Australia's largest supplier of mobile services. In financial year 2016 it supplied customers with around 17.2 million mobile services and generated earnings before interest, tax, depreciation and amortisation of about $10.5 billion.
7 Since at least July 2013 to date (the relevant period), Telstra has, in trade or commerce, offered mobile services to consumers for personal or domestic use (Domestic customers) and small business and corporate customers (Business customers) (together customers). Telstra charges for the mobile services either as:
a. pre-paid services, where customers purchase credit in advance, and the purchased credit is used to pay for mobile services as the services are used: or
b. post-paid services, where customers are billed (generally monthly) in arrears (although some charges, for example access fees, may be charged in advance).
8 From time to time during the relevant period, the mobile services offered by Telstra have enabled customers to access online software and services (digital content), including in the following ways (noting that these proceedings only concern the Premium Direct Billing service described in paragraph [8(d)]):
a. for Business customers - via the "Telstra Apps Marketplace," a web-based portal that enables Business customers to purchase third party digital content. In order to access this content through this portal, the Business customer must create an account with a password and email address. Those customers can apply to have purchases billed to their Telstra mobile account, which requires them to be signed in and to provide their business address and Australian Business Number for each purchase, otherwise they must pay for each purchase via their credit card;
b. for Domestic and Business customers - via the web to third party "applications" or "app" stores, such as Apple's App Store or Google's "Google Play" (together app stores) that enable customers to purchase third party digital content. In order to access content through these means, customers must create accounts directly with the app store and, until about early 2017, any purchases were billed by the app store directly to the customers' credit cards. Since early 2017, customers can apply to have purchases via Google Play billed to their Telstra mobile account, which requires customers to select the option to "Bill my Telstra account", enter their Telstra phone number and enter their Google Play password, before confirming each purchase;
c. for Domestic and Business customers - Premium SMS service that enables customers to purchase third party digital content, for example daily horoscope or other notifications, or for "voting" in television programs. Access to Premium SMS content requires a "double opt-in": a customer initiates the first request by sending an SMS to a number starting with a 19xxx prefix; then the customer receives a "subscription request" text, and must respond affirmatively (second request) for subscription to take effect; and
d. for Domestic and Business customers - Premium Direct Billing service (PDB service) [Footnote: Also sometimes referred to as Telstra's "Direct Carrier Billing" service] that enables customers to purchase third party digital content on a subscription or one-off purchase basis from a third party, and have the charges for that content billed on their Telstra account. Third party digital content purchased via the PDB service (known as PDB content) includes "premium" content services (such as news websites) and downloadable applications (such as games or ringtones) and other content (such as "voting" in television programs) not obtained from the Telstra Apps Marketplace or an app store. The way in which Telstra intended customers to access the PDB service throughout the relevant period is set out in paragraph [22]. Content purchased via the PDB service is created by Content Providers who do not have a direct relationship with Telstra. Rather, their digital content offerings are compiled and marketed by five third-party providers (Aggregators) who have contractual arrangements with Telstra to make the content available for purchase by Telstra customers.
These proceedings - outline
9 In or about June 2013, Telstra introduced its PDB service.
10 These proceedings involve false and misleading representations made by Telstra in the course of operating its PDB service.
11 During the relevant period, Telstra did not adequately inform its customers that:
a. the PDB service was a default setting on Telstra mobile services - that is, customers were not required to opt-in to (i.e. request Telstra to set up) the PDB service on their mobile service prior to purchasing third party digital content; and
b. consequently, if they were to purchase content on their mobile devices, even unintentionally, they would be billed directly by Telstra via the PDB service.
12 Telstra applied charges to a customer's Telstra mobile account through the PDB service.
13 Up to October 2017, Telstra earned approximately $61.7 million net revenue from the PDB service.
14 As a result of complaints received from Telstra's customers in relation to the PDB service and through a number of internal studies, Telstra was aware from early 2015 to at least June 2016 that the operation of the PDB service had led to a significant number of its customers unintentionally purchasing and being billed for PDB content subscriptions without their knowledge or consent and so had not agreed to acquire the subscription. Despite this awareness, Telstra failed to implement the identity verification safeguards for the PDB service it employed in relation to other services offered or enabled by Telstra as outlined in [8(a) to (c)] above.
15 In these circumstances, by applying charges to customers' accounts who had unintentionally purchased PDB content subscriptions without knowledge or consent and so had not agreed to acquire the subscription prior to June 2016, Telstra made false or misleading representations to those customers that they had agreed to acquire PDB content subscriptions when they had not.
16 For those customers who sought to query PDB service charges or have them stopped or refunded, many were directed by Telstra to raise their dispute with the Content Provider or Aggregator, where many then encountered significant difficulties in both cancelling the subscription and obtaining a refund in respect of the unauthorised charges.
17 Telstra accepts that it has contravened the law, both in respect of the false or misleading representations set out at paragraph [15] above and in respect of the particular representations set out in further detail at paragraphs [68 to 78] below. It has voluntarily made the frank and full admissions that appear in this document. It has cooperated with the ACCC throughout its investigation and made senior staff available to assist with those inquiries and to meet with the ACCC to resolve issues cooperatively.
18 Telstra has also ceased offering the PDB service entirely with effect from 3 March 2018, and has committed to undertake an extensive communication and refund program in respect of identified customers who may have been affected by Telstra's admitted contraventions. Further details are set out in paragraph [92] below.
PDB service
19 Since about June 2013, Telstra had contracts with Aggregators in relation to the PDB service by which customers could purchase PDB content on their mobile device and be charged for that content on their Telstra account, and Aggregators would be paid for PDB content by Telstra.
20. Telstra sets its customers' mobile devices to the PDB service as a default setting.
21 The PDB service is, for post-paid customers, a credit facility within the meaning of s.12BAA(7)(k) of the ASIC Act, and for pre-paid customers, a facility through which they make non-cash payments within the meaning of s 12BAA(1)(c) and (6) of the ASIC Act. The PDB service is accordingly a "financial product" within the meaning of the ASIC Act. Telstra, by creating and operating the PDB service, issues or provides a service in relation to a financial product, within the meaning of s.12BAB(1)(b) or (g) respectively of the ASIC Act, and accordingly supplies to its customers a "financial service" within the meaning of the ASIC Act.
22 During the relevant period, consistent with Telstra's arrangements with Aggregators, the process for Telstra customers to subscribe to PDB content and the process for the PDB service was intended by Telstra to operate in the following way:
a. a Telstra customer, while using apps or websites on their device, encounters an advertisement for third party digital content;
b. if the customer clicks on the advertisement, the customer is taken to a different web-based address associated with a Content Provider (third party website);
c. on the third party website the customer is presented with a "buy now" or "subscribe" (or similar) button (subscription trigger) in respect of which:
i. prior to 7 June 2016, purchasing PDB content required a single click on a "subscribe" or "buy now" (or similar) button;
ii. since 7 June 2016, purchasing PDB content required two steps (doubleclick process): a customer first clicks a "confirmation" button indicating that they agree to the terms and conditions of the service and accept that costs will be charged to their mobile account, and then a second click of a "subscribe" or "buy now" (or similar) button; and
iii. since 4 December 2017, new PDB subscriptions were no longer available and customers could only purchase PDB content on a one-off basis;
d. if the third party website is operated by or associated with an Aggregator then, when the customer clicks a subscription trigger on the website, the Aggregator sends the request from the customer to a different web address, which request is picked up by Telstra's mobile network;
e. if that web address is operated by an Aggregator and the customer is a Telstra mobile customer, then Telstra transmits either the customer's mobile device number (for example a mobile phone number) or unique identifier to the Aggregator;
f. the Aggregator then sends a Charge Notice to Telstra recording that the customer has purchased content via the PDB service. Telstra sends a response to the Aggregator recording whether the Charge Notice was successful or failed;
g. after the customer clicks the subscription trigger, the customer was sent SMS messages by the Aggregator, which included:
i. since 21 July 2014, a notification SMS message to be sent to all subscribed customers once every calendar month (notification SMS) and a notification SMS message when the customer incurred $30 of charges and each time the customer incurred an additional $30 of charges in that month (expenditure SMS);
ii. since March 2015, an additional subscription confirmation SMS message to be sent to all newly subscribed customers after the customer had signed up for the subscription (confirmation SMS), which confirmation SMS informed the customer about the recurring subscription, the charges to their mobile account, the ability to opt-out by sending a STOP message to a number and contact details for the Aggregator's helpline; and
iii. since January 2016, an additional subscription reminder SMS message to be sent to all newly subscribed customers within 24 hours of the confirmation SMS being sent (reminder SMS); and
h. for post-paid customers, the purchase is charged to their Telstra account, while for pre-paid customers the purchase is deducted from their prepaid credit.
23 During the relevant period, under Telstra's arrangements with Aggregators, Telstra pays the Aggregator, within 30 days of the end of each calendar month, the total of the amount charged by the Aggregator to the customer for the supply of digital content during that month, less various adjustments. Telstra retains a monthly merchant service fee for Telstra providing the PDB service, which is usually around 30% of the charges to the customer.
24 Between January 2015 and June 2016, Telstra received a large number of calls from customers disputing the billing for third party digital content. For example, as at October 2015, Telstra recorded having received approximately 20,000 calls about third party content that month and in May 2016, approximately 36,000 calls. A significant proportion of these calls related to PDB content services. While it is not possible to determine the precise number of calls from customers disputing charges billed through the PDB service, over the relevant period it would be in the order of tens of thousands and possibly up to or in excess of 100,000.
PDB charges incurred by Telstra customers
25 Under the PDB service, in the period to October 2017:
a. Telstra customers have paid approximately $202 million (excluding GST) in charges;
b. Telstra has applied charges in relation to at least 2,772,005 individual mobile device numbers (more than one of which could belong to a single customer); and
c. Telstra has generated approximately $61.7 million in net revenue.
26 Of those customers charged for PDB content, a significant number complained that they had incurred charges without their knowledge or consent. Telstra, by applying subscription charges to accounts where customers had unintentionally purchased PDB content subscriptions without their knowledge or consent and so had not agreed to acquire the subscription, made false and misleading representations to those customers that they had agreed to acquire those services when they had not. The Parties are not able to identify the number of affected customers with any precision. However, Telstra admits that there are at least tens of thousands and possibly up to or in excess of 100,000 of such customers.
Information provided to customers about the PDB service
27 Until at least June 2015, Telstra did not provide any information to its customers before or at the time of signing up for a Telstra mobile service about:
a. the fact that its customers could acquire PDB content without providing any form of identity verification;
b. how to unsubscribe from PDB content subscriptions; or
c. how to bar the PDB service given it was a default setting.
28 In the period from June to September 2015:
a. information about PDB content subscriptions was published on Telstra's website under the title "Take Control of Your Device";
b. references to third party charges were included in Telstra Welcome packs; and
c. email communications describing purchasing premium content were sent to new mobile post-paid customers.
29 Customers were not adequately informed by Telstra that the PDB service was set as a default on their accounts. Customers who were aware of the PDB service and wanted to bar it could do so by either calling Telstra or filling in an online form available on Telstra's website.
Telstra's awareness of digital content billing issues
30 Throughout the relevant period Telstra received a significant number of complaints directly through its own call centre and indirectly through the Telecommunications Industry Ombudsman (TIO) about PDB content billing issues, PDB content subscriptions and PDB content charges (PDB complaints). Largely in response to PDB complaints, Telstra made a number of changes to its PDB service, set out in further detail below.
Complaints and changes to the billing system
31 In March 2015, Telstra noted in an internal communication that the "overwhelming TIO complaint [in relation to PDB and Premium SMS content services] by customers ... is along the lines of 'I discovered 3rd party charging on my bill that I didn't authorise or subscribe to'". By about May 2015, Telstra identified key causes of complaints in relation to PDB and Premium SMS content services, including that:
a. "customers don't remember subscribing" to PDB and Premium SMS content;
b. it is "unclear how to unsubscribe" from PDB and Premium SMS content;
c. customers "cannot get through to third parties"; and
d. if they do contact third parties, customers cannot obtain a refund.
32 At that time, Telstra's own analysis of TIO complaints data showed "that market growth of the newer service, Premium Direct Billing [PDB], largely contributed to the increase in TIO complaints for mobile premium services."
33 At around the same time, Telstra introduced a Premium Mobile Services Complaints Task Force (Task Force) to investigate and analyse the rise in TIO complaints in relation to the PDB and Premium SMS content services.
34 By May 2015, Telstra recorded that it had experienced a significant rise in the number of PDB complaints referred to Telstra from the TIO, which averaged 47 complaints per month from March to May that year. In June 2015, Telstra identified the "root cause" of complaints as customers "opting in" to PDB content subscriptions inadvertently or without a full understanding of the billing implications.
35 Also in May 2015, Telstra suspended the Content Provider "KKO Store" for new subscriptions, which represented a large proportion of TIO PDB complaints referred to Telstra. At that time, KKO had 25,000 unique subscribers who were Telstra customers and gross revenue attributable to Telstra customers of $1.8 million.
36 In June 2015, Telstra sent SMS messages to 6,590 Telstra customers with existing KKO Store subscriptions reminding them of the service costs, where to obtain assistance and how to opt out. Telstra also required the Aggregator of KKO Store to implement a 100% customer refund policy on disputed content charges.
37 In June 2015, as part of the work of the Task Force, Telstra conducted a small survey of consumers recorded as having been subscribed to PDB content services provided by one particular Aggregator. Of the 30 respondents to the survey:
a. 80% were not aware that they had subscribed;
b. 97% did not know how much they would be charged;
c. 77% were never going to use the service; and
d. all customers who were unaware of the charges, when informed of their subscription, chose to opt out.
This suggested to Telstra that customers were poorly, if at all, informed about the PDB content subscriptions to which they were recorded as having been subscribed.
38 In June 2015, as a response to the number of TIO complaints referred to Telstra relating to PDB and Premium SMS content services, a new escalation process for complaints handling was launched by Telstra that applied to customers who had been first referred to the Aggregator or Content Provider and then complained a second time to Telstra. In these situations, Telstra assigned a dedicated escalation case manager to work with the Aggregator with the aim of resolving the enquiry within three days. However, by March 2016, there was a backlog of over 1,000 customer PDB complaints where Telstra had not called back the customer. By 15 April 2016, Telstra's Billing Incident Management System commenced dealing with each of these 'Escalated complaints' by Telstra providing refunds to affected customers. During the period from 18 June 2015 to 9 August 2016 (when a dedicated cell of customer service representatives to deal with PDB complaints was launched - see paragraph [49]), Telstra received approximately 29,889 PDB complaints which were classified as 'Escalated complaints'.
39 Also in June 2015, the TIO informed Telstra that it had received a number of complaints indicating that there may be a systemic issue relating to Telstra's handling of consumer complaints about disputed third party charges. In particular, the TIO focused on Telstra's practice of referring complaints to third parties in the first instance.
40 In July 2015, Telstra responded to the TIO acknowledging that "qualitative customer research and feedback from our customer support channels" showed that customers had:
a. "limited awareness that consent given online for third party subscription content is legitimate without the need to add further personal information to complete this subscription;
b. limited awareness that these services browsed and accessed on a mobile phone, are indeed premium third party content and charged at a premium price to their mobile bill;
c. limited understanding of the confirmation text messages. These messages are misunderstood and often considered spam, resulting in them often being ignored; and
d. limited understanding of how to cancel the ongoing charges incurred from subscription purchases."
41 From March 2015 to September 2015, Telstra experienced a decrease of 40% in referred TIO PDB complaints, yet continued to receive a significant number of complaints directly from customers.
42 Despite the drop in TIO complaints, as at October 2015 and as noted in paragraph [24] above, Telstra's call centre was receiving approximately 20,000 calls per month "from customers disputing third party content billing" charges, a significant proportion of which were PDB complaints.
43 In January 2016, in addition to the requirements at [22g(iii)], Telstra required the removal of the word 'Freemsg' in the Aggregator SMS's, as it became aware that many customers were mistaking SMS messages from Aggregators as spam.
44 In February and March 2016, examples of TIO PDB complaints referred to Telstra included:
a. "I received a SMS from Mobidol on my mobile but I did not reply to it as I had not subscribed to anything. I was charged for it. I called Telstra and they referred me to the provider."
b. "I noticed Third party charges of $41.40 on my bill. I contacted Telstra and was referred to the third party. I do not believe that I authorised a third party to debit my Telstra account. I contacted the third party, sent them the bills as requested and they agreed only to refund $6. 90."
c. "I was charged for third party charges. We have never subscribed to anything. We have two young children and at worse one of them may have accidently (sic) triggered the charge. I called Telstra and Mobidol and was promised that service will be cancelled and refund but that did not happen."
45 In March 2016, Telstra suspended the addition of new PDB content services available for purchase until key issues with current products and experiences were addressed. Telstra continued to charge customers for new and existing subscriptions and one-off purchases in relation to existing PDB content services for at least 30 Content Providers and 5 Aggregators.
46 In May 2016, as noted in paragraph [24] above, Telstra received approximately 36,000 calls that month and 250 complaints to the TIO. A significant proportion of these were PDB complaints.
47 In around June 2016, Telstra introduced a requirement for Aggregators to include a Terms and Conditions "tickbox" in the sign-up process used to sign up customers to PDB content subscriptions, as referred to in paragraph [22(c)] above. The introduction of this requirement was followed by a decrease in TIO PDB complaints referred to Telstra from 115 in May 2016 to 65 in June 2016.
48 Until at least August 2016, Telstra had a policy in relation to PDB complaints of directing all customer complaints in the first instance to Aggregators or Content Providers and assisting any customers in barring the service where specifically requested. This policy was in place despite Telstra being aware that while these entities had Australian local numbers to call, their head offices were in many cases located overseas and that Aggregators' and Content Providers' procedures for handling customer complaints were frequently time-consuming, difficult to navigate and frustrating for customers.
49 In August 2016, Telstra launched a 'dedicated cell' of customer service representatives to handle and seek to resolve PDB complaints made directly to Telstra on the first call. However, as recently as 10 July 2017 there have been instances on Telstra's Crowd Support forum of Telstra continuing to refer complainants to Aggregators.
50 On 15 September 2016, the TIO notified Telstra that it had closed its 2015/16 investigation into Telstra's handling of PDB complaints, referring in its email to:
a. a number of the improvements and safeguards referred to in Telstra's response to the TIO's questions posed as part of the investigation; and
b. an outstanding concern about the itemisation of charges on customers' bills.
51 In addition to TIO complaints referred to Telstra, during the relevant period Telstra has received significant volumes of complaints directly from its customers in relation to charges billed for PDB content subscriptions that they did not agree to acquire.
52 In June 2017, results from a survey commissioned by the Australian Communications Consumer Action Network (ACCAN) showed that 12 per cent of respondents, being customers of Telstra, Optus, and Vodafone, had experienced unexpected third party charges (which might be charges billed under the PDB service, Premium SMS service or some other method of acquiring digital content such as those referred to in paragraph [8] above) on their mobile phone bills in the prior six months. Approximately 50% of the survey respondents were Telstra customers. ACCAN's survey found that:
a. over three quarters (77 per cent) of survey respondents who had received a confirmation SMS regarding an unexpected charge attempted to prevent the charge from being processed by replying "STOP" to that SMS, and of those, 71% still had the charge added to their bill;
b. over a third (36 per cent) of unexpected charges incurred by those survey respondents were for $10 or more;
c. 55% of participants who had experienced an unexpected charge, had done so while having little to no active or intended involvement with the third party.
53 From at least June 2015 to date, there has been widespread media attention about third party digital content billing and industry practices. Media reports noted that customers were regularly reporting they had incurred charges inadvertently, and were experiencing serious difficulties obtaining refunds.
54 Between early 2015 and late 2016, in the course of considering complaints received, and through a number of internal studies, Telstra was aware that a significant number of its customers:
a. had little or no awareness of subscribing to third party content;
b. were not aware of third party content charges appearing on their accounts;
c. denied purchasing the third party content which was incurring charges;
d. were unaware that third party content purchases could be effected without the need to add further personal information; and
e. did not know how to opt-out of the PDB service.
55 In addition Telstra was aware that many of its customers may not be aware of charges for content billed through the PDB service appearing on their accounts. This was because:
a. pre-paid customers do not automatically receive a monthly bill;
b. post-paid customers paying by direct debit have charges automatically deducted from their nominated accounts;
c. customers' accounts can print to numerous pages; and
d. even those customers who did review their accounts will have often found it difficult to determine the identity of the third party on their bill.
56 Despite the complaints received, internal studies and media reports referred to above, and the concerns raised within these reports, the steps taken by Telstra to address the risks of customers being billed for subscriptions that they had not agreed to acquire were ineffective in preventing customers from being charged for PDB content subscriptions without their knowledge or consent.
57 Between September 2014 and May 2016, the ACCC received on average 44 complaints per month about PDB content charges. Despite the changes made by Telstra in June 2016, the ACCC continued to receive on average 43 complaints per month about PDB content charges between June 2016 and September 2017. In addition, while PDB complaints to Telstra decreased for a period of time following the June 2016 changes, complaints directly to Telstra have continued to be received in significant numbers. Further, PDB complaints to the TIO also decreased following the June 2016 changes to 28 in November 2016, but then increased to 125 in May 2017, decreased to 25 in September 2017 and increased again to 60 in October 2017.
58 Telstra's conduct towards its customers was deliberate in the sense that it was aware from complaints and internal analysis that its customers might be billed for a subscription service they had not intended to, or agreed to, acquire. The conduct of Telstra and its attendant risks, as well as the remediation steps taken and the inadequacy of those steps, were broadly known within Telstra, including at senior levels.
Safeguards
Sign-up process
59 Unlike the procedures for Premium SMS, the Telstra Apps Marketplace and app stores, Telstra did not require its customers to complete any form of identity verification before purchasing PDB content and having PDB content charges billed to their account. For example, customers were not required to sign in to an account, provide a password, affirmatively send a text message or provide payment details in order to purchase content.
60 PDB content charges were billed as either one-off charges or, more often, subscription charges. Subscription charges were billed on a recurring basis, usually weekly. A commonly reported subscription charge in customer complaints was for $9.90 per week.
61 PDB subscription charges continued to be charged until the customer was able to unsubscribe from the service. Barriers to unsubscribing from the service were:
a. customers' lack of awareness of charges;
b. customers' lack of awareness as to how to unsubscribe; and
c. Telstra's policy of referring customer complaints, including requests for refunds, to Aggregators and Content Providers despite knowledge of the poor complaints handling practices of many of the third parties.
62 Until about January 2016, under Telstra's Carrier Billing Code of Conduct Policy (Conduct Policy), Telstra required Aggregators to include at least one "click" by the customer on a subscription trigger, being a hyperlink appearing on a webpage "pricing notification screen" associated with an Aggregator or Content Provider which included the words "buy now" or "subscribe now".
63 From about January 2016, in addition to the requirements at [22], under its Conduct Policy Telstra required Aggregators to include two webpage screens, being a "merchant advertising screen" and the pricing notification screen. Telstra required that a subscription process included at least one click by the customer on a subscription trigger on the pricing notification screen which included the words "Pay", "Pay now", "Purchase", "Subscribe" or "Buy".
64 From about June 2016, in addition to the requirements at [22] and [63], Telstra required Aggregators to include the extra step of its customers clicking on a terms and conditions "tickbox" on the pricing notification screen (the double-click process referred to in paragraph [22(c)] above) when purchasing PDB content subscriptions.
65 Between 4 December 2017 and 2 March 2018, new PDB content subscriptions were no longer available and customers could only purchase PDB content on a one-off basis. In order to acquire PDB content as a one-off purchase, customers were only required to click on the "buy now" (or similar) button once.
Additional process deficiencies
66 During the relevant period, Telstra became aware that some of its customers were charged multiple times for the same PDB content, and that Telstra was being provided with multiple Charge Notices for the same content service on consecutive days. Telstra subsequently arranged for those customers to receive refunds.
67 Telstra was also aware that family members such as children were at risk of inadvertently subscribing to PDB content on the family member's phone. In Telstra's response to an information request from the TIO, Telstra noted that: "Customer consent may have been provided by a family member of the account holder of the phone. For example, in app advertising, particularly with games - consent is given by the person using the phone, such as children playing on their parent's phone".
Customers who requested PDB barring
68 Throughout the relevant period until 4 December 2017, Telstra has, by its terms relating to its PDB service in its Our Customer Terms, represented to customers that barring the PDB service would prevent further charges being applied to their accounts. However, Telstra was aware that barring the PDB service would not unsubscribe a customer from an existing subscription. Telstra did not notify customers of this fact but has agreed to refund all impacted customers.
69 In July 2015, Telstra provided training to its front of house staff in which it was confirmed to those staff that barring would not cancel charges under existing services and that customers would first have to unsubscribe before applying barring, and that customers who sought to apply barring to the PDB service should be informed of this fact. Telstra admits the training in July 2015 was ineffective in preventing a significant number of its customers from continuing to be billed by Telstra in circumstances where those customers had attempted to unsubscribe from an existing subscription by barring the PDB service.
Customers unable to unsubscribe who had barred Premium SMS services
70 In order to unsubscribe from a PDB subscription, customers were required to either call the relevant Aggregator's or Content Provider's call centre or to SMS 'STOP' in reply to the confirmation SMS that Aggregators send to subscribed customers. However, prior to 31 May 2016, if a customer had barred Premium SMS services then that customer could not send the 'STOP' SMS to unsubscribe from the PDB subscription.
71 Despite Telstra being aware of this issue from at least May 2015, Telstra did not notify the affected customers and continued to apply charges to these customers' accounts.
72 In May 2016, Telstra implemented a change to its system that enabled customers who had barred Premium SMS to unsubscribe from a PDB subscription using a 'STOP' SMS. Telstra did not notify all customers who had previously barred Premium SMS of this change and had PDB content charges applied to their mobile accounts of this change, but has agreed to offer refunds to all impacted customers.
New customers charged for old customers' subscriptions
73 When a customer acquires a mobile phone service from Telstra, they are sometimes allocated a number used by a previous Telstra customer, which number had been in "quarantine" for a number of months. In certain circumstances the previous user of the phone number had a PDB subscription.
74 Until at least 26 August 2016, some customers who acquired a previously quarantined (i.e. deactivated) Telstra mobile number incurred charges from the previous owner of the Telstra number, where the previous owner had been subscribed to PDB content. This was made possible by Telstra, until at least August 2016, not preventing Aggregators from continuing to send Charge Notices for each Telstra mobile number, including when the number had been deactivated and ported to a new customer.
75 Despite being aware of this, by allocating the mobile number in the circumstances described above, Telstra impliedly represented to those customers that they would not be billed for PDB subscription charges carried over from the previously deactivated mobile service, when in fact those customers were billed for those carried over PDB subscription charges.
76 On about 26 August 2016, Telstra implemented a process change to address this issue by limiting the number of unsuccessful Charge Notices which could be submitted to Telstra to a maximum of four for each service within a 14 day period, after which the Aggregator must take steps to unsubscribe that subscription service. Content subscriptions associated with deactivated mobile services would therefore be unsubscribed, as the Charge Notices sent in respect of those deactivated services would have been unsuccessful. Telstra does not know and until recently did not check whether customers continued to incur charges that they had not consented to due to a PDB subscription by a previous owner of a mobile device number.
77 During the relevant period, Telstra identified and refunded some customers that were affected by this issue. However, despite Telstra's knowledge of this issue from at least August 2016, Telstra was not able to identify or refund all such customers. Telstra is in the process of identifying all customers affected by this issue and has agreed to refund those not previously refunded.
78 Telstra is currently unable to determine with precision the number of customers affected by the issues identified in paragraphs [68] to [77], but admits that it is likely to be in the thousands and may be in excess of 10,000.
Monitoring and enforcement of safeguards
Monitoring by Telstra
79 Since at least January 2014, Telstra has required Aggregators to submit screenshots of the subscription process for each new PDB content service to Telstra for approval. Telstra reviews these screenshots for compliance with its requirements for Aggregators in place under the Conduct Policy at the time.
80 Telstra did not assess whether each subscription process submitted by an Aggregator complied with all of Telstra's requirements, including the requirement under the Conduct Policy for Aggregators to comply with the Mobile Premium Services (MPS) Industry Code, which requires subscription processes to include the double opt-in SMS procedure outlined at [8c)].
Monitoring by WMC Global Pty Ltd
81 From about September 2014, Telstra engaged an external third party, WMC Global Pty Ltd (WMC), to audit and enforce compliance by Aggregators of Telstra's safeguards in relation to the purchase of PDB content. The process used by WMC to audit and enforce the relevant safeguards was developed and supervised by Telstra.
82 Under the process set up and supervised by Telstra, WMC was not technically able to monitor or audit whether each Telstra customer had clicked on a subscription trigger before Telstra provided a customer's mobile device number (e.g. mobile phone number) or unique identifier to Aggregators or Content Providers (under the process outlined at [22]).
83 WMC monitored compliance with the standards set by Telstra in their Telstra Carrier Billing Standards (Audit Standards) which included some but not all of Telstra's requirements under the Conduct Policy. The Audit Standards did not include the requirement under the Conduct Policy for a subscription trigger to include the words "buy now" or "subscribe now". This meant subscription processes could be approved by WMC which included other words than "buy now" or "subscribe now".
84 WMC's monitoring process involved using a mobile device to locate advertisements for PDB content and then reviewing subscription processes for compliance with the Audit Standards. This process did not include monitoring advertisements featured in applications, on which advertisements for PDB content commonly appear.
85 The monitoring of PDB subscription processes occurred on a significantly smaller scale than the monitoring of Premium SMS services. In May-July 2016 there were 350 audits of PDB subscription processes compared to 2,227 of Premium SMS.
Enforcement of safeguards
86 Between October 2014 and July 2016, WMC identified over 1,750 infringements of Telstra's standards for Aggregators and Content Providers, with a monthly average of 35 per cent of all PDB audits failing to pass these standards during this period.
87 Since July 2014, despite the level of infringements at [86] and the significant volume of complaints referred to above, Telstra did not terminate its contractual arrangements with any of the five Aggregators. Telstra "permanently suspended" one PDB content service expressly for non-compliance with Telstra's requirements. Telstra also suspended a further seven PDB content services in June and July 2016 until at least March 2017, arranged for customers of at least four of those PDB content services to be unsubscribed, and Telstra refunded 3,492 customers to the value of approximately $428,956.00.
MPS Industry Code
88 Telstra was at all material times a signatory to industry codes within the meaning of the CCA, including the MPS Industry Code. The MPS Industry Code is not directly applicable to the PDB service but established a norm of conduct in respect of disclosure by mobile service providers to customers.
89 Unlike the process Telstra has in place in relation to Premium SMS services and the other services identified at [8], at no time in the relevant period did Telstra require independent verification from its customers that they had authorised Telstra to apply charges for the acquisition of third party digital content to their Telstra account.
REFUNDS
90 During the relevant period, Telstra estimates that it has provided refunds of at least $5 million to customers in relation to charges for PDB content, some of which has been recovered by Telstra from Aggregators. Telstra has also directed Aggregators to refund at least 28,000 Telstra customers to the value of at least $400,000 in relation to PDB content charges.
CESSATION OF PDB SERVICE
91 In the course of resolving the ACCC's investigation, Telstra committed to and has ceased offering the PDB service entirely with effect from 3 March 2018.
FUTURE CONDUCT
92 Telstra has committed to:
a. by no later than 10 weeks from the date of the making of the final orders in these proceedings (Orders), identify customers in the following groups:
i. customers to whom Telstra identifies as having made the Barring Representation, the Unsubscribe Representation and the Carry Over Representation (as defined in [paragraph [94]] below);
ii. customers Telstra identifies as having made a complaint to the TIO prior to the date of commencement of these proceedings in relation to PDB content charges for subscriptions signed up to prior to 4 December 2017; and
iii. customers Telstra identifies as having complained directly to Telstra prior to the date of commencement of these proceedings in relation to PDB content charges for subscriptions signed up to prior to 4 December 2017; and
b. communicate with and offer to refund (which communication and offer will only be made to customers who Telstra has contact details for, identifies as having not already received refunds for such charges from Telstra or some other party and will only need to be made once if a customer is identified under more than one of paragraphs [92(a)(i), (ii) and (iii)] above):
i. in the case of the customers referred to in paragraph [92(a)(i)] above, the PDB content subscription charges incurred in connection with and impacted by the Barring Representation, Unsubscribe Representation and/or the Carry Over Representation; and
ii. in the case of the customers referred to in paragraph 92(ii) and (iii)] above, the PDB content subscription charges that are the subject of the customer's complaint; and
c. for a period of 12 months from the date of the making of the Orders, deal directly with future complaints (including in relation to past periods) in relation to PDB content charges for subscriptions and seek to resolve those complaints in good faith, including providing refunds for PDB content subscription charges where it is apparent that the customer had unintentionally purchased and been billed for PDB content subscriptions without their knowledge or consent and so did not agree to acquire the subscription; and
d. inform the ACCC in writing, within 4 months of the making of the Orders, and quarterly thereafter for one year, of:
i. the steps taken to identify the customers in accordance with paragraph [92(a)] above;
ii. for each of the categories of customers specified in paragraph [92(a)] above - the number of customers identified;
iii. in relation to paragraph [92(b)] above - the number of customers contacted, the number of customers refunded, the number of customers (if any) refused refunds and the amount of money that has been refunded; and
iv. for each of the customers who complain to Telstra under paragraph [92(c)] above - the number of such customers, the number of customers refunded, the number of customers (if any) refused refunds and the amount of money that has been refunded.
ADMISSIONS
93 As a result of complaints received from Telstra's customers and through a number of internal studies in relation to the PDB service, Telstra was aware from early 2015 to at least June 2016 that the operation of the PDB service had led to a significant number of its customers unintentionally purchasing and being billed for PDB content subscriptions without their knowledge or consent and so had not agreed to acquire the subscription (Non-consenting Customers). In these circumstances, by applying charges to those customers' accounts in respect of their purported subscriptions prior to 7 June 2016, when in fact that purported subscription had occurred without the customers' knowledge or consent and so the customer had not agreed to acquire the subscription, Telstra thereby made false and misleading representations in connection with the supply or possible supply of a "financial product" or a "financial service" within the meaning of the ASIC Act to each of the Non-consenting Customers that they had agreed to acquire those subscriptions when they had not, in contravention of section 12DB(1)(b) of the ASIC Act.
94 Telstra further admits that:
a. in relation to customers who requested barring of their PDB service prior to 4 December 2017, Telstra represented to each of those customers that they would no longer be charged for their existing PDB subscriptions on and from the date that barring was activated, when in fact that barring only applied to new PDB subscriptions from that date (Barring Representation);
b. in relation to customers who had requested barring of their Premium SMS services prior to 31 May 2016, Telstra represented to each of those customers that they would be able to unsubscribe from PDB subscriptions by sending "STOP" to the applicable number, when in fact their Premium SMS barring prevented them from doing so (Unsubscribe Representation);
c. in relation to customers who acquired a new mobile service from Telstra prior to August 2016 and whose mobile number was deactivated for a period prior to them acquiring their service, Telstra impliedly represented to each of those customers that they would not be billed for PDB subscription charges carried over from the previously deactivated mobile service, when in fact some customers were billed for those carried over PDB subscription charges (Carry Over Representation).
95 By making the Barring Representation, the Unsubscribe Representation and the Carry Over Representation, Telstra admits that it made false or misleading representations that the PDB service had performance characteristics, uses or benefits, in contravention of s.12DB(1)(e) of the ASIC Act.