Spam Regulations 2021

The Regulations are short and conceptually targeted. The four concepts to carry through analysis are: the unsubscribe-address conditions; the exclusion of fax; the definition and treatment of related persons and carrier exceptions; and the temporal/transitional effect.

Unsubscribe-address conditions (Regulation 7). The instrument implements paragraph 18(1)(g) of the Act by prescribing concrete limits on the unsubscribe channel published in a commercial electronic message. Those limits are expressed as affirmative prohibitions: no premium service requirement (s 7(2)); no higher cost than the usual cost of that kind of address using the same technology as used to receive the message (s 7(3)); generally no fees payable to the sender or a related person for use of the address (s 7(4)) with a narrowly framed exception where the sender is also a carrier or carriage service provider and the fee is an ordinary monthly or other periodic carriage-service charge (s 7(5)); and no requirement that the recipient provide extra personal information (other than the electronic address that received the message) or log in or create an account with either the sender or the person who authorised the sending (s 7(6)).

Fax exclusion (Regulation 6). For the purposes of subsection 6(7) of the Act, a fax is explicitly not a commercial electronic message. The instrument thus narrows the statutory scope of the Act as to the categories of message treated as commercial electronic messages, at least for the statutory subsection that Regulation 6 references.

Related person and carrier terminology (Regulation 5). The instrument imports definitions from other instruments. Notably, carriage service provider and carrier have the meanings given in the Telecommunications Act 1997, and premium service is defined by the Telecommunications Regulations 2021 subject to a specified exception. The instrument’s own definition of related person is transactionally framed: a person who receives or may receive payment for the use of an electronic address pursuant to an agreement or arrangement with the sender, subject to two exclusions relating to agreements with carriers/carriage service providers and the quantum of carrier charges (Regulation 5).

Temporal scope and repeal (Regulation 8 and Schedule 1). The Regulations apply to electronic messages sent on or after 1 April 2021 (Regulation 8(1)), repeal the 2004 Regulations (Schedule 1) and preserve the 2004 Regulations’ operation for messages sent before 1 April 2021 (Regulation 8(2)).

These concepts are not framed as guidance on compliance technique. Rather they are prescriptive limits that determine what the unsubscribe mechanism may require of a message recipient.

The Regulations create concrete obligations and limits that map to particular actors. The main affected parties, as the instrument frames them, are senders of commercial electronic messages, recipients of those messages, related persons as defined by the instrument, and carriers or carriage service providers that also act as senders.

Senders. A person who sends, or causes to be sent, a commercial electronic message must ensure that any electronic address published in the message as the channel for an unsubscribe message complies with the conditions set out in Regulation 7. That ties the operational burden directly to the content of a commercial electronic message. The Regulations do not state enforcement mechanisms within the instrument itself; they are made under the Spam Act 2003 (Regulation 3), so non-compliance with the Act’s requirements and the Regulations will be addressed under the Act’s provisions.

Recipients. The Regulations limit the acts recipients can be required to perform to use an unsubscribe mechanism. Recipients must not be required, via the unsubscribe address, to use a premium service (s 7(2)), to incur costs higher than the usual cost for that kind of address using the same technology (s 7(3)), to pay fees to the sender or related persons (s 7(4)), to provide personal information other than the electronic address to which the message was sent, or to log in or create an account with the sender or the person who authorised the sending (s 7(6)). In practical terms, these are protections allocated to recipients by regulation.

Related persons. The instrument’s definition of related person (Regulation 5) captures persons who might receive fees or charges in relation to the use of an electronic address under an agreement with the sender, except for certain agreements with carriers/carriage service providers and except where the carrier’s charge would be less than the usual charge for that kind of address. This definition brings into scope entities that might monetise unsubscribe traffic , for example, third-party service providers who charge senders for processing unsubscribe messages , unless they fall within the excluded categories.

Carriers and carriage service providers acting as senders. The instrument treats carriers/carriage service providers differently in one concrete respect. If the sender is also a carrier or carriage service provider, the general prohibition on charging for use of the unsubscribe address does not apply to fees ordinarily imposed, on a monthly or other periodic basis, for the use of carriage services by that sender in the sender’s capacity as carrier or carriage service provider (s 7(5)). That means entities that both provide carriage services and send commercial messages can impose ordinary periodic carriage-service charges without contravening the regulation’s fee prohibition, but that narrow exception is limited by its terms.

Regulators and courts. Although the instrument does not itself set penalties, it amends how a court or regulator applying the Spam Act 2003 will assess whether a commercial electronic message complied with the Act’s unsubscribe requirement (paragraph 18(1)(g) of the Act). The Regulation therefore shifts interpretive work to decision-makers applying the Act, who will need to evaluate whether a given unsubscribe mechanism met the prescribed conditions.

Collectively, these allocations of duties and entitlements change who bears the compliance work (senders) and who enjoys specified protections (recipients), while defining a limited class of persons with potential fee-related ties (related persons) and a narrow exception for senders that are also carriage-service providers.

This instrument prescribes a set of duties tied to the unsubscribe channel published in a commercial electronic message and confers specified rights on recipients by preventing particular types of requirements being imposed on them. The duties are primarily on senders; the rights are primarily for recipients.

Duties on senders

• Ensure the unsubscribe address does not require use of a premium service (Regulation 7(2)). Senders must choose a channel that is not a premium service as defined by the Telecommunications Regulations 2021 and as modified by Regulation 5. This duty is exclusionary: the sender must not publish an address that imposes premium-service use on the recipient.
• Ensure cost parity relative to the receiving technology (Regulation 7(3)). The sender must ensure the electronic address does not cost more to use than the usual cost of that kind of electronic address, using the same kind of technology as was used to receive the commercial electronic message. The duty requires senders to measure the cost of the unsubscribe channel against the “usual cost” benchmark for that type of address and technology.
• Prevent fee-charging by the sender or related persons (Regulation 7(4)). Subject to the carrier exception, senders must not set up an unsubscribe address that requires the recipient to pay a fee or other charge to the sender or a related person.
• If the sender is also a carrier or carriage service provider, ensure any fee for the unsubscribe channel falls within the narrowly prescribed exception: it must be a fee ordinarily imposed for the use of carriage services by the sender in that capacity and be charged on a monthly or other periodic basis (Regulation 7(5)). This is a limited carve-out from the general fee prohibition.
• Do not require additional personal information or account activity (Regulation 7(6)). The sender must not require the recipient to provide personal information other than the electronic address to which the message was sent, and must not require the recipient to log in to or create an account with the sender or the individual/organisation that authorised the message.

Rights and protections for recipients

• Right not to be required to use premium services to unsubscribe (Regulation 7(2)). Recipients cannot be forced, through the unsubscribe address, to use premium-rate services.
• Right to usual-cost treatment (Regulation 7(3)). Recipients are protected from being charged more for use of the unsubscribe address than the usual cost of using that kind of address by the same technology.
• Right not to pay fees to sender or related persons (Regulation 7(4)). Unless the sender is a carrier or carriage service provider charging ordinary periodic carriage fees (Regulation 7(5)), recipients are protected from charges being levied to effect an unsubscribe.
• Right to minimal data provision and no forced account creation (Regulation 7(6)). Recipients need provide only the electronic address to which the message was sent and are not required to log in or create accounts with the sender or the authorising party.

Interpretive and evidentiary duties

• Documentation and design choices by the sender will need to demonstrate compliance with the cost, fee and personal-information constraints. The instrument does not set out evidentiary rules, but the duties it prescribes imply a need for senders to be able to show the unsubscribe mechanism’s cost and data requirements, which in practice creates recordkeeping and design obligations.

Operational constraints and limits

• The instrument’s exception in s 7(5) makes a limited allowance for carriers/carriage service providers that are also senders. That exception is strictly tied to fees “ordinarily imposed” and to periodic billing. Fees outside that formulation remain prohibited for the unsubscribe mechanism.
• The definition of related person in Regulation 5 links fee-provision obligations to arrangements between a sender and third parties who might monetise unsubscribe access; senders must therefore be aware of contractual and commercial arrangements that could cause the unsubscribe channel to contravene Regulation 7(4).

Rights or duties not changed

• The Regulations do not themselves create new substantive prohibitions beyond prescribing the unsubscribe address conditions and excluding faxes (Regulation 6). The broader prohibitions and any penalty regime continue to be found in the Act under which the instrument was made (Regulation 3).

In sum, the instrument converts the Act’s general unsubscribe requirement into a set of specific operational constraints that bind senders and protect recipients, with a narrow exception for carriers/carriage service providers.

The Spam Regulations 2021 do not themselves set out penalties, enforcement agencies, or enforcement procedures within the text of the instrument. The instrument is made under the Spam Act 2003 (Regulation 3), and it operates as a specification for a statutory requirement in that Act,specifically, the content of paragraph 18(1)(g) of the Act. Because the instrument leaves the Act’s enforcement framework intact, the practical enforcement consequences are determined by the Act rather than by the Regulations.

What the instrument does supply for enforcement purposes is a set of prescriptive standards that a regulator or court applying the Act will use to judge compliance with the Act’s unsubscribe requirement. Key points for enforcement actors to note, drawn from the Regulations themselves, are:

• Objective standards. The unsubscribe-address conditions are expressed as categorical prohibitions and objective comparators: premium-service use must not be required (s 7(2)); cost must not exceed the usual cost of that type of address using the same technology (s 7(3)); fees to sender or related persons are generally prohibited (s 7(4)) with a narrowly defined exception for senders that are carriers/carriage service providers (s 7(5)); and requiring extra personal information or account creation/login is prohibited (s 7(6)). These provisions convert what might otherwise have been factual, context-dependent determinations into more definite criteria for compliance assessment.
• Evidential burdens. Because the Regulations refer to “usual cost”, “ordinarily imposed” fees and the technology used to receive the message, enforcement will require assessment of cost levels, billing practices and technological modalities. The Regulations do not themselves prescribe evidentiary standards or burden allocations for these assessments, so enforcement will depend on the Act’s processes and any administrative guidance or case law interpreting these terms.
• Transitional effect. The Regulations apply to messages sent on or after 1 April 2021 (Regulation 8(1)), so enforcement of the defined unsubscribe-address conditions will begin from that date. The prior Regulations continue to apply to messages sent before that date (Regulation 8(2)), meaning that enforcement for earlier messages would proceed under the 2004 Regulations’ standards.
• No separate penalty scheme. Because no penalties are set out in the Regulations, a tribunal, court or regulator will need to rely on the Act’s enforcement provisions for remedies, sanctions or pecuniary penalties.

Risk areas for enforcement interpretation

• Determination of “usual cost” and “ordinarily imposed” fees will likely be contested in close cases, because the Regulations do not define those terms further. Whether a charge is “ordinary” and “periodic” or whether a fee exceeds the “usual cost” of that kind of electronic address will require contextual assessment.
• The definition of related person may require examination of commercial arrangements to determine whether a third party qualifies as a related person receiving payment “in relation to the use of an electronic address” under an agreement with the sender (Regulation 5).

Who enforces. The Regulations do not name an enforcing agency. Enforcement responsibility will therefore be exercised under the Act’s enforcement architecture. The instrument’s function for enforcement is to supply the operative tests that will be employed when determining whether the Act’s unsubscribe requirement was met.

In practical terms, enforcement outcomes will turn on (1) how regulators and courts apply the Regulations’ objective standards in light of the Act; (2) the available evidence about cost, billing practice and technological modality; and (3) the interpretive choices made about terms left undefined by the Regulations themselves.

The Regulations explicitly cross-reference and import concepts from several other instruments and statutes. These cross-references establish the Regulations as an operational extension of the Spam Act 2003 and as dependent on telecommunications and privacy law concepts.

Spam Act 2003. The Regulations are made under the Spam Act 2003 (Regulation 3) and operate specifically to provide particulars for requirements in that Act , most directly paragraph 18(1)(g), which the Regulations implement by specifying the conditions for an unsubscribe electronic address (Regulation 7(1)). The Regulations therefore modify the practical application of the Act without altering the Act itself.

Telecommunications Act 1997 and Telecommunications Regulations 2021. The instrument adopts the terms carriage service provider and carrier from the Telecommunications Act 1997 (Regulation 5). It also draws the meaning of premium service from the Telecommunications Regulations 2021, subject to an express exclusion in the definition of premium service in Regulation 5. The interaction matters because the carrier/carriage service provider status of a sender triggers the limited fee exception in Regulation 7(5), and because whether a service is “premium” (and thus prohibited for unsubscribe use by s 7(2)) depends on the Telecommunications Regulations’ definition.

Privacy Act 1988. Regulation 7(6)(a) uses “personal information” with the parenthetical note “within the meaning of the Privacy Act 1988”, thereby importing that Act’s definitional scope for what constitutes personal information. That limits the regulation’s allowance for collecting personal data when using an unsubscribe address to only the electronic address to which the commercial electronic message was sent; any other personal information would engage the Privacy Act’s framework.

Regulatory continuity with Spam Regulations 2004. Schedule 1 repeals the 2004 Regulations, but Regulation 8(2) preserves the 2004 Regulations’ continuing application to messages sent before 1 April 2021. This staged approach preserves legal expectations for prior conduct while imposing the 2021 regime going forward.

Implications of the cross-references

• Interpretive dependence. The Regulations leave detailed interpretation of several key terms to external instruments and to the Act. Determinations about premium services, carrier status and personal information therefore depend on the content, definitions and (where relevant) any judicial interpretation of those other instruments.
• Administrative coordination. Entities that must comply (senders, carriers, related persons) must therefore pay attention to telecommunications regulation and privacy regulation as well as to the Spam Act. For example, commercial arrangements with third-party unsubscribe processors will need to be reviewed against both the Regulations’ related-person definition and applicable telecommunications rules about premium services or carrier charges.
• Enforcement interconnection. Any enforcement action asserting non-compliance with the unsubscribe requirements will involve cross-checking the Telecommunications Regulations and the Privacy Act definitions as part of the assessment.

What the Regulations do not do in relation to other laws

• They do not alter the substantive prohibitions or penalty mechanics of the Spam Act, nor do they amend the Telecommunications Act or Privacy Act. They provide operational detail within the Act’s framework rather than substantive change to other statutes.

Overall, the Regulations function as a narrow technical interface between spam regulation, telecommunications regulation and privacy law, and they require actors to be attentive to all three bodies of law when implementing unsubscribe mechanisms.

The text of the instrument supplied is the instrument as originally made. The instrument contains limited internal amendment history and sets out its own commencement and repeal of the prior instrument.

• Made and dated. The Regulations are dated 18 March 2021. The formal preamble records that the Governor‑General made the instrument by command given on the advice of the Federal Executive Council and that the Minister for Communications, Urban Infrastructure, Cities and the Arts issued the command (preamble).
• Commencement. The instrument’s commencement table (Regulation 2) states that the whole of the instrument commences on 1 April 2021. The instrument notes that the table relates only to provisions as originally made and will not be amended to record later amendments.
• Repeal of prior instrument. Schedule 1 repeals the Spam Regulations 2004 in full (Schedule 1 item 1). Regulation 8(2) preserves the application of the 2004 Regulations to electronic messages sent before 1 April 2021, meaning the 2021 Regulations change the controlling secondary law only for messages sent on or after their commencement.
• No amendments recorded within the supplied text. The instrument includes a clause (Regulation 4) stating that instruments specified in a Schedule are amended or repealed as set out in the Schedule, which is the mechanism used to repeal the 2004 Regulations. The instrument itself contains no subsequent amendment items, and the supplied text does not include any later amending instruments or notes.
• Transitional operation. Regulation 8(1) and (2) implement a simple transitional rule: the instrument applies from 1 April 2021, and conduct before that date remains governed by the previous Regulations even though those Regulations are repealed on the commencement date.

Practically, the amendment history to note is that the 2021 Regulations wholly replace the 2004 Regulations for messages sent on or after 1 April 2021, while preserving the 2004 Regulations’ application to earlier messages. The instrument does not record any legislative amendments to itself or to the Act beyond that replacement and the commencement timing in the text provided.

The instrument itself contains no litigation history, case citations, or judicial interpretations. It does not list or reference any court decisions or tribunal findings. The Regulations are a regulatory instrument made under the Spam Act 2003 (Regulation 3) and therefore their interpretation and enforcement will be resolved, where necessary, through proceedings under the Act rather than through any content within the Regulations.

What to expect about future litigation from the instrument’s design

• Factual disputes likely. Because the Regulations introduce terms that require factual assessment , for example, what counts as the “usual cost” of using a particular kind of electronic address with a particular kind of technology (Regulation 7(3)), and whether fees are “ordinarily imposed” and “periodic” for a carrier (Regulation 7(5)) , disputes over those facts are likely to be the subject of contested enforcement matters or litigation where regulators or private parties challenge whether an unsubscribe mechanism complied with the Regulations.
• Contract and commercial arrangement review. The definition of related person (Regulation 5) can prompt judicial scrutiny of arrangements under which a third party receives fees for handling unsubscribe traffic. Litigation may focus on whether particular third-party arrangements fall within the related person definition.
• Privacy and telecommunications linkages. Any enforcement or litigation invoking Regulation 7(6) will intersect with the Privacy Act 1988’s definition of personal information and relevant telecommunications definitions. This means courts will be asked to harmonise the obligations in the Regulations with definitions and principles in those acts.
• No existing jurisprudence cited. The Regulations do not contain or cite any existing jurisprudence, therefore readers must look to later enforcement decisions under the Act and any tribunal or court decisions for interpretive developments.

Because the instrument is narrowly drafted and relies on cross-references, initial litigation and administrative decisions will likely focus on the instrument’s undefined or context-sensitive terms. Those decisions will be the vehicle by which the Regulations acquire interpretive content over time. The supplied text contains no decisions to report.

This short instrument contains several specific drafting choices that create practical pitfalls for senders and create points that enforcement actors or third parties may contest. The following are concrete items to watch, all grounded in the instrument’s text.

1. “Usual cost” comparator is context-dependent (Regulation 7(3)). The Regulations require that the unsubscribe address must not cost more to use than the usual cost of using that kind of electronic address, using the same technology as was used to receive the message. The instrument does not define “usual cost”, “that kind of electronic address” or how to measure costs across technologies. Senders must therefore decide on a cost benchmark and be prepared to justify it. That creates evidentiary work and potential disputes about comparators.

2. Premium service prohibition depends on Telecommunications Regulations (Regulation 7(2) and Regulation 5). Whether an unsubscribe channel is a premium service is determined by reference to the Telecommunications Regulations 2021. Senders must check that external instrument’s definition, including any carve-outs referenced in Regulation 5, to ensure compliance. Misclassification of a service as premium or non-premium will be a straightforward way to fall foul of the Regulations.

3. Fee-prohibition with a narrow carrier exception (Regulations 7(4)-(5)). The general ban on charging recipients to use the unsubscribe address is subject to a narrow exception for senders who are also carriers or carriage service providers where the fee is an ordinary periodic carriage-service charge. Pitfalls include: (a) failing to document that the fee is “ordinarily imposed”, (b) charging on a non-periodic basis (one-off or transactional fees appear excluded), or (c) using a commercial arrangement with a third-party processor that results in fees flowing to a related person and thus breaching Regulation 7(4). The instrument’s definition of related person (Regulation 5) is broad enough to catch many commercial arrangements, so senders must audit contractual terms.

4. Related person definition captures certain fee-sharing arrangements (Regulation 5). The definition brings into scope persons who receive or may receive payment in relation to use of the electronic address under an agreement with the sender, unless the agreement is with a carrier/carriage service provider and the fee would be less than would otherwise be charged. Commercial arrangements that outsource unsubscribe handling to a third party and include fee-sharing could be captured. Senders should review third-party contracts to ensure the arrangement does not trigger the related-person prohibition.

5. Personal information and account-creation limits are narrow (Regulation 7(6)). The Regulations permit only the electronic address to which the message was sent to be required as personal information; any other data collection via the unsubscribe channel falls outside the permitted scope. Requiring login or account creation with the sender or the authorising party is explicitly prohibited. Senders using unsubscribe landing pages that require users to log in or to re-enter identifying details other than the address risk non-compliance.

6. Fax exclusion limited and potentially surprising (Regulation 6). The instrument states that, for the purposes of subsection 6(7) of the Act, a fax is not a commercial electronic message. That narrow exclusion can produce surprising results: conduct involving faxes will not be measured by that subsection of the Act, which may change compliance strategies for senders who used to treat faxes as within the Spam Act’s commercial electronic message scope. Practitioners should verify whether other subsections still capture fax-like transmissions.

7. Transitional point for messages sent around 1 April 2021 (Regulation 8). The Regulations apply to messages sent on or after 1 April 2021, and the 2004 Regulations continue to apply to messages sent before that date. Senders who conducted campaigns straddling that date need to apply different rules depending on message send dates and must preserve records to justify which regulatory standard applied to each message.

8. No procedural clarifications or evidentiary thresholds. The Regulations do not specify how a regulator will determine whether a charge is “usual” or “ordinary”. That leaves interpretive gaps that can cause inconsistent enforcement. Senders should prepare documentation and reasoning for their choices to mitigate risk.

9. Narrow exception scope for carriers/carriage service providers. Entities that sell both carriage services and messaging services may assume broad latitude because they are carriers, but the exception is narrowly framed to “fees ordinarily imposed…in the capacity of carrier or carriage service provider” and to periodic billing. Non-periodic charges, premium services, or creative billing models that do not match periodic carriage fees fall outside the exception.

10. Interplay with privacy compliance. Because Regulation 7(6) references the Privacy Act 1988 definition of personal information, unsubscribe implementations must also satisfy privacy obligations. That means a technical unsubscribe mechanism must be designed not only to avoid prohibited requirements but also to limit any collection and handling of personal information to what the Privacy Act permits.

Each of these “gotchas” flows directly from a specific provision in the instrument. They create practical compliance traps because the Regulations define operational rules without detailed definitions for key terms. Senders and service providers should therefore plan for audit trails and evidence to demonstrate the unsubscribe mechanism meets the prescribed conditions.

The Regulations prescribe limited but operationally specific actions that senders should follow to meet the unsubscribe-address requirement in paragraph 18(1)(g) of the Spam Act 2003. Below is a compliance checklist mapped to the Regulation provisions, with suggested evidence to retain and practical implementation steps.

1. Confirm temporal applicability

• Apply the Regulations to electronic messages sent on or after 1 April 2021 (Regulation 8(1)). Messages sent before that date remain governed by the Spam Regulations 2004 (Regulation 8(2)). Maintain separate records for campaigns straddling the commencement date.

2. Choose an unsubscribe channel that is not a premium service

• Test whether the unsubscribe channel is classified as a premium service under the Telecommunications Regulations 2021. If using third-party platforms, confirm their billing classification and obtain written confirmation. Document the technical nature of the service and any applicable regulatory classification as evidence (Regulation 7(2); Regulation 5).

3. Demonstrate usual-cost parity

• For the type of electronic address used for unsubscribe (for example, a return SMS number, an email address, or a web form reachable by a hyperlink), assess the usual cost for using that type of address using the same receiving technology as was used to receive the message, and ensure the unsubscribe option does not cost recipients more than that usual cost (Regulation 7(3)).
• Evidence to retain: methodology for determining “usual cost”, market comparisons, samples of standard pricing for that media/technology, and logs showing the unsubscribe channel’s costs to recipients.

4. Avoid charging recipients fees via the unsubscribe channel

• Do not require the recipient to pay a fee or charge to the sender or to any related person as a condition of sending an unsubscribe message (Regulation 7(4)). If a carrier or carriage service provider is the sender, ensure any fee aligns precisely with the narrow exception: it must be a fee ordinarily imposed for carriage services by the sender in that capacity and charged periodically (Regulation 7(5)).
• Evidence to retain: contracts with carriers or third-party processors, billing records demonstrating periodic charging, and documentation showing that any charges are ordinary carriage-service fees rather than transactional or premium charges.

5. Audit third-party arrangements for related-person risk

• Review contracts with any third parties that process unsubscribe traffic to identify whether payments flow from recipients to those third parties or from senders to those third parties. If recipients must pay to use an unsubscribe channel handled by a third party, the arrangement risks falling within the related-person prohibition (Regulation 5 and Regulation 7(4)).
• Evidence to retain: outsourced service agreements, fee schedules, and a written legal assessment mapping third-party roles to the related-person definition.

6. Do not require additional personal information or account access

• Design the unsubscribe mechanism so it requires only the electronic address to which the message was sent. Do not require recipients to supply other personal information nor to log in or create accounts with the sender or the authorising party (Regulation 7(6)).
• Implementation steps: use single-click unsubscribe links, mailto: addresses, or a simple SMS reply option that requires only the recipient’s address. Avoid landing pages that request multiple fields or logins. Document design choices and privacy assessments.

7. Consider the fax exclusion

• The Regulations exclude fax from the definition of a commercial electronic message for subsection 6(7) of the Act (Regulation 6). If you operate marketing by fax, verify whether other parts of the Act capture those fax transmissions. Maintain policies distinguishing fax campaigns from electronic-message campaigns and preserve evidence of that analysis.

8. Maintain records for enforcement or dispute resolution

• Given the instrument’s reliance on factual determinations (usual cost, ordinary periodic fees, whether an arrangement creates a related person), maintain contemporaneous records: pricing benchmarks, contractual arrangements, technical specifications for unsubscribe functionality, privacy impact assessments and any vendor statements about fees or service classification.

9. Coordinate with privacy compliance

• Because Regulation 7(6) invokes the Privacy Act 1988 for the meaning of personal information, ensure unsubscribe implementations comply with privacy obligations around collection, use, and retention of personal data. Keep a record of the minimal data collected and of privacy notices presented to users, if any.

10. Update policy and training

• Update internal policies, templates for commercial electronic messages and marketing workflows to reflect the instrument’s conditions. Train marketing and technical teams so unsubscribe channels are implemented consistently and do not require premium services, additional personal data, or account creation.

11. If you are a carrier/carriage service provider and also a sender

• If you are both a carrier/carriage service provider and a sender, identify which charges are “ordinarily imposed” in your capacity as carrier and ensure any fee related to unsubscribe access is periodic rather than transactional. Document the basis on which the charge is ordinary and periodic to mitigate interpretation risk (Regulation 7(5)).

12. Seek clarity where the instrument is silent

• For ambiguous items , e.g. what constitutes “usual cost” in a novel technology , obtain a reasoned legal position and maintain that reasoning as part of your compliance files. Be prepared to present that reasoning in any enforcement or dispute context.

The Regulations are compact but impose specific functional constraints. Compliance therefore requires targeted technical design work, contractual audits, pricing analysis and recordkeeping rather than broad policy change. The combination of concrete prohibitions with a few undefined comparators means that preparing evidentiary trails and reasoned benchmarks is central to defensible compliance.