Telecommunications (Domestic, Family and Sexual Violence Consumer Protections Industry Standard) Direction 2024

The instrument revolves around several tightly specified concepts that will shape the forthcoming ACMA standard. These concepts are presented as objectives that the standard must "give effect to" in relation to telecommunications activities of carriers and carriage service providers. They are framed principally as obligations or priorities the standard must deliver, rather than as immediately enforceable duties in the instrument itself (s 7).

Key concepts enumerated in the objectives include:

• Safety prioritisation: the safety of "relevant consumers" affected by domestic and family violence, and where relevant sexual violence, must be prioritised (s 7(1)(a)).
• Privacy and account security: carriage service providers must take a "tailored and appropriate approach" to ensure and maintain privacy of personal information and account security for relevant consumers (s 7(1)(b)).
• Staff capability and support: staff must be appropriately trained to identify and support relevant consumers and to consider needs of groups disproportionately affected; staff must also be appropriately supported in connection with domestic, family and sexual violence work (s 7(1)(c)-(d)).
• Individualised assistance: providers must offer prompt, sufficient and appropriate assistance tailored to individual needs and preferences, to enable staying safe, staying connected or being reconnected to services, and minimising ongoing impacts (s 7(1)(e)).
• Trauma-informed policies, systems and processes: minimum requirements are to be set by the standard, and policies must be trauma-informed, tailored for disproportionately affected groups, safely support relevant consumers, and be regularly reviewed (s 7(1)(f)(i)-(v)).
• Compliance and recordkeeping: carriage service providers must comply with policies and processes in the standard and keep and maintain records to demonstrate compliance (s 7(1)(g), (k)).
• Risk review: providers must review existing and proposed systems, processes and products to identify risks to relevant consumers and take action to reduce those risks (s 7(1)(h)).
• Information and referral: providers must promote information about where relevant consumers can seek assistance (s 7(1)(i)).
• Consultation and collaboration: where appropriate, providers are to consult and collaborate with domestic and family violence support services, people with lived experience, groups disproportionately affected, other sectors with relevant experience, and other carriage service providers (s 7(1)(j)).
• Engagement with alleged perpetrators: if appropriate, providers should implement policies about engagement with alleged perpetrators (s 7(1)(l)).
• Limiting disclosure on customer-facing materials: carriers and carriage service providers must take action to limit or prevent disclosure of information on invoices, bills and other customer-facing materials that may contribute to safety risks (s 7(2) first paragraph).
• Complaints handling and TIO powers: the standard may address arrangements for handling complaints related to domestic, family and sexual violence matters and may confer functions and powers on the Telecommunications Industry Ombudsman (s 7(2)).

The instrument also addresses scope and flexibility. It defines "Act" as the Telecommunications Act 1997 (s 4), notes that a number of terms are already defined in section 7 of the Act (s 4 Note), and explicitly allows ACMA to define additional terms as necessary (s 7(3)). It allows the standard to apply differently across classes of carriers, carriage service providers or consumers, and to exempt classes from particular provisions (s 6(2)). Time is a concept embedded in the directive: ACMA must determine the standard within six months and commence it at the earliest practicable opportunity (s 5(2)).

Taken together, the core organisational concept is a principles-and-objectives driven instrument that delegates technical design and enforcement pathways to ACMA, with latitude for differential treatment and exemptions. The instrument prioritises consumer safety and privacy within telecommunications interactions, while signalling non-prescriptive, consultative and reviewable policy delivery through an ACMA-devised standard.

The instrument makes the forthcoming ACMA standard applicable to carriers and carriage service providers in their telecommunications activities. The application clauses specify who may be in scope and allow ACMA to differentiate coverage across classes and consumer groups.

Primary affected entities:

• Carriage service providers: The standard is to apply, as relevant, to carriage service providers in their dealings with "relevant consumers" (s 6(1)(a); s 7 heading refers to their telecommunications activities). The instrument repeatedly refers to obligations in relation to carriage service providers (for example, training staff, maintaining policies, recordkeeping, and risk reviews at s 7(1)(b)-(k)).
• Carriers: The standard is to apply, as relevant, to carriers in their supply of carriage services to carriage service providers (s 6(1)(b)). The instrument singles out carriers specifically for the objective relating to limiting disclosures on invoices and customer-facing materials that could create safety risks (s 7(2) first paragraph).

Secondary affected parties and stakeholders:

• Consumers described as "relevant consumers": the objectives target consumers who are, or may be, affected by domestic and family violence and, where relevant, sexual violence. The instrument does not define "relevant consumer" within its own text; ACMA may define this term in the standard (s 7(3)). The standard may also treat different classes of consumers differently (s 6(2)(c)).
• Staff of carriers and carriage service providers: the standard must require staff to be trained and supported to identify and support relevant consumers and to consider needs of disproportionately affected groups (s 7(1)(c)-(d)).
• Telecommunications Industry Ombudsman (TIO): the standard may confer functions and powers on the TIO to handle consumer complaints relating to domestic, family and sexual violence matters (s 7(2)). If the standard does so, the TIO would acquire operational responsibilities under the standard.
• Support services, lived experience representatives and community groups: the instrument identifies these groups as appropriate consultation and collaboration partners for implementation (s 7(1)(j)). That implies engagement obligations for carriage service providers where the standard requires consultation "where appropriate".
• Consumers belonging to groups who are disproportionately affected: the instrument directs tailored measures and specific considerations for such groups (s 7(1)(c)(ii), (f)(iv)). Those groups may include, but are not defined by the instrument itself; ACMA may clarify in the standard (s 7(3)).

Scope flexibility and exemptions:

• ACMA may make the standard apply differently across classes of carriers or carriage service providers, exempt classes from particular provisions, or treat different classes of consumers differently (s 6(2)). That permits phased application, targeted exemptions for small providers, or sector-specific rules, subject to ACMA's determination.

Timing and immediate administrative effect:

• The instrument commences one day after registration (s 2). ACMA must determine the standard within six months of commencement and bring it into force at the earliest practicable opportunity (s 5(2)). Affected entities therefore have a statutory six-month runway before the standard must be finalised; however, the standard will begin when ACMA brings it into force. The instrument also authorises ACMA to vary the standard later (s 5(3)), meaning affected entities should expect both an initial compliance period and the possibility of subsequent changes.

Who bears costs and discretion:

• The primary compliance cost will fall on carriers and carriage service providers because the objectives target their activities and systems (s 7). ACMA’s discretion to vary and to craft differential treatment or exemptions (ss 5(3), 6(2)) means that regulatory burden could be distributed in varied ways across the sector.

In sum, carriers and carriage service providers are clearly the primary regulated population. The instrument leaves ACMA latitude to define "relevant consumers" and to tailor scope or exemptions, which will determine the practical regulatory perimeter and the distribution of compliance costs across the industry.

The instrument itself does not directly create operational duties or civil rights enforceable against carriers and carriage service providers; it mandates ACMA to make a standard that will. Nevertheless, the instrument prescribes a set of objectives which translate into the key duties that ACMA must embed in the standard. These objectives therefore indicate the substantive obligations that will be expected of regulated entities once the ACMA standard is made.

Obligations ACMA is directed to require the standard to give effect to:

• Safety prioritisation: The standard must prioritise the safety of relevant consumers affected by domestic and family violence, and where relevant sexual violence (s 7(1)(a)). This is a high-level duty that ACMA must operationalise into concrete measures.
• Privacy and account security: Provision of a "tailored and appropriate approach" to the privacy of personal information and account security for relevant consumers (s 7(1)(b)). This suggests duties to control access to accounts, change account credentials, and restrict disclosure of sensitive billing information.
• Staff training duties: Staff must be trained to identify and support relevant consumers and to consider needs of disproportionately affected groups (s 7(1)(c)). This prescribes an organisational obligation to implement training programs and evidence of their delivery.
• Staff support duties: Staff must be appropriately supported in their work relating to domestic and family and sexual violence matters (s 7(1)(d)). This focuses on employer duties to provide resources and safeguards for staff performing these roles.
• Assistance duties: Carriage service providers must offer prompt, sufficient and appropriate assistance tailored to individual needs, including support to stay safe, stay connected or be reconnected to services, and to minimise ongoing impact (s 7(1)(e)). This creates obligations to provide operational pathways and escalation mechanisms for affected consumers.
• Policy, systems and process duties: Providers must have trauma-informed policies, minimum requirements as provided in the standard, tailored measures for disproportionately affected groups, and regular reviews and updates (s 7(1)(f)). This creates duties to document, implement and periodically review written policies and operational processes.
• Compliance obligation: Providers must comply with the policies and processes referenced in paragraph (f) (s 7(1)(g)). That is an explicit duty to adhere to the policies the standard requires.
• Risk review duty: Providers must review existing and proposed systems, processes and products to identify risks to relevant consumers and take action to reduce them (s 7(1)(h)). This creates obligations for product design, procurement and change-management processes to include risk assessments.
• Information promotion duty: Providers must promote where relevant consumers can seek assistance (s 7(1)(i)). This implies an obligation to make referral and support information available through appropriate channels.
• Consultation duty: Where appropriate, providers must consult and collaborate with specified groups and organisations in implementing obligations (s 7(1)(j)). This can be read as a procedural duty on implementation to engage stakeholders.
• Recordkeeping duty: Providers must keep and maintain relevant records to demonstrate compliance with the standard (s 7(1)(k)). This imposes documentation and retention duties to enable audit, complaint handling and regulator review.
• Policy on alleged perpetrators: Where appropriate, providers should implement policies and processes relating to engagement with alleged perpetrators (s 7(1)(l)). This creates potential duties about how providers should respond to accounts of alleged perpetrators, although the phrasing "if appropriate" confers discretion.

Additional duties that the standard must address:

• Limiting disclosure on customer materials: Carriers and carriage service providers must take action to limit or prevent disclosure of information on invoices, bills and other customer-facing materials that may contribute to safety risks (s 7(2) first paragraph). This specifies a duty concerning the content and presentation of customer documentation.
• Complaints handling and TIO functions: The standard may deal with arrangements for handling consumer complaints relating to these matters and may confer functions and powers on the TIO (s 7(2) second paragraph). If ACMA exercises this option, the standard will create procedural duties for complaint escalation and possibly regulatory oversight via the TIO.

Rights and discretion:

• The instrument does not itself create private rights enforceable in court. It vests ACMA with the power to define terms, craft obligations, permit differential application, and confer functions on the TIO (ss 5(3), 6(2), 7(2) and 7(3)). Entities and consumers will have rights and remedies only to the extent the ACMA standard or other legislation establishes them.
• The instrument allows ACMA to exempt classes of carriers or carriage service providers from particular provisions of the standard (s 6(2)(b)). That confers regulatory discretion to ease obligations on certain providers.

Temporal duty profile:

• ACMA must determine the standard within six months of the instrument’s commencement and bring it into force at the earliest practicable opportunity (s 5(2)). Duties on carriers and carriage service providers will therefore be set out in the ACMA standard and commence according to the timing specified by ACMA.

In summary, the instrument sets an enforceable design brief for ACMA. The key duties likely to appear in the standard derive directly from the instrument’s objectives: safety-first practices, privacy and account security measures, staff training and support, trauma-informed policies, risk assessment of systems and products, recordkeeping, limiting disclosure on customer materials, consultation, and possible complaint-handling and TIO functions. The instrument leaves to ACMA the detail, scope, exemptions and enforcement mechanisms that will convert these objectives into concrete legal obligations and any rights for consumers.

The instrument itself does not set out penalties or enforcement mechanisms against carriers or carriage service providers. It is a Ministerial direction to ACMA to make a standard under subsection 125AA(1) of the Telecommunications Act 1997 (s 5(1)), and it specifies objectives the standard must give effect to (s 7). Enforcement and penalty arrangements will therefore depend on the content of the ACMA standard and on the enforcement provisions available under the Telecommunications Act and other applicable law.

What the instrument does address about enforcement mechanisms:

• Delegation to ACMA: ACMA is required to determine the standard and may vary it (s 5(1), (3)). This centralises the development of enforcement provisions with ACMA rather than the instrument.
• TIO involvement: The instrument contemplates that the standard "may deal with arrangements for handling consumer complaints relating to domestic, family and sexual violence matters and may confer functions and powers on the Telecommunications Industry Ombudsman" (s 7(2)). If ACMA includes such provisions, some enforcement or dispute resolution activity could be routed through the TIO, depending on the functions and powers conferred.
• Recordkeeping as an enforcement enabler: The instrument requires that carriage service providers keep and maintain relevant records to demonstrate compliance with the standard (s 7(1)(k)). This creates an evidentiary infrastructure that could support regulatory enforcement or TIO dispute resolution, subject to what the standard prescribes.

Points of legal and practical uncertainty created by the instrument:

• Absence of penalties in the instrument: Because the instrument is a direction rather than the operative rulebook, it gives ACMA discretion to prescribe whether breaches of the standard would attract enforceable penalties, civil sanctions, administrative measures, or be dealt with through the TIO’s dispute resolution processes. The instrument does not constrain ACMA on which enforcement tools to use beyond requiring the standard to comply with the instrument (s 5(3)).
• ACMA’s statutory powers under the Act: The instrument is made under s 125AA(4) of the Telecommunications Act 1997 (s 3). The Act contains the processes and powers under which ACMA can make standards (including possible enforcement pathways) but the instrument does not reproduce or summarise those powers. Determining the practical enforcement regime therefore requires reference to the Telecommunications Act and to the text of the standard ACMA will make.
• Variation power: ACMA may vary the standard over time provided the variation complies with the instrument (s 5(3)). That allows ACMA to adjust compliance obligations and enforcement mechanisms in response to operational experience, but it also introduces regulatory uncertainty for industry as enforcement approaches could change.

Implications for regulated entities:

• Carriers and carriage service providers should prepare for the possibility that the ACMA standard will include mandatory compliance requirements, recordkeeping obligations and complaint handling procedures, and that the TIO might be granted additional functions or powers in relation to domestic, family and sexual violence matters (s 7(1)(k), s 7(2)).
• Because the instrument allows ACMA to exempt classes of providers (s 6(2)(b)) and to treat classes differently (s 6(2)(a)), enforcement emphasis and exposure may vary by provider size, role in the supply chain, or consumer profile.

Practical next steps to clarify enforcement:

• Once ACMA publishes the draft or final standard, practitioners should review the standard to identify whether it includes express civil penalties, administrative sanctions, enforceable undertakings, TIO powers, or specified processes for regulatory action. The instrument itself requires none of these, so the ACMA standard is the decisive instrument for enforcement detail.

In short, enforcement architecture is left to ACMA’s forthcoming standard and to the broader statutory framework under the Telecommunications Act. The instrument creates enabling obligations (notably recordkeeping) that will facilitate enforcement, and it contemplates TIO involvement, but it does not itself prescribe sanctions or enforcement procedures.

The instrument is framed as a direction under the Telecommunications Act 1997 and repeatedly cross-refers to that Act for definitions and the statutory power to make standards. It therefore operates within the regulatory architecture of the Telecommunications Act and the statutory roles of ACMA and, potentially, the Telecommunications Industry Ombudsman. The instrument itself does not expressly reference other specific Commonwealth, State or Territory legislation; however, the objectives and mechanisms it requires ACMA to put in place will intersect operationally with other legal regimes in practice and in the design of the standard.

Interactions explicitly signalled in the instrument:

• Reliance on the Telecommunications Act framework: The instrument is made under s 125AA(4) of the Telecommunications Act 1997 (s 3) and directs ACMA to determine a standard under subsection 125AA(1) of the Act (s 5(1)). Several expressions used in the instrument are defined in section 7 of the Telecommunications Act, including ACMA, carriage service, carriage service provider, carrier and Telecommunications Industry Ombudsman (s 4 Note). ACMA is therefore required to exercise the power to make standards consistent with the Act’s procedures and any constraints included in the Act. The standard will also be an instrument under the Act and will sit within the Act’s enforcement and administrative architecture.
• Complaints handling and the TIO: The instrument expressly contemplates the standard conferring functions and powers on the TIO (s 7(2)). That means the standard may operate through established complaint-handling channels, aligning with the statutory or contractual remit of the TIO. Any conferral would need to be consistent with the legal basis for the TIO’s functions and the Telecommunication Act’s framework for dispute resolution.
• Definitions and regulatory precision: ACMA may define any terms it considers necessary or appropriate, including terms used in the instrument but not defined (s 7(3)). That allows ACMA to tailor definitions in order to ensure the standard interfaces correctly with other regulatory obligations and legislative definitions under related laws.

Areas of likely practical interaction, to be tested when the standard is published:

• Privacy and data protection frameworks: The instrument requires that carriage service providers take a tailored approach to ensure and maintain privacy of personal information and account security for relevant consumers (s 7(1)(b)). In practice, this objective will interface with any applicable data protection and privacy laws, industry privacy codes and contractual privacy obligations. The instrument does not state how conflicts, overlaps or precedence between the forthcoming standard and privacy laws will be resolved; that will depend on the wording of the standard and existing statutory frameworks.
• Consumer protection and telecommunications regulation: The instrument focuses on safety, service continuity and billing disclosures (s 7). These subjects typically interface with other consumer protection regimes and telecommunications-specific regulation such as billing and disclosure obligations. The standard may therefore need to be calibrated against those obligations; ACMA’s power to define terms and craft differential application (s 6(2), s 7(3)) will influence this interaction.
• Criminal law and protective orders: The instrument requires policies for engagement with alleged perpetrators if appropriate (s 7(1)(l)). Interaction may therefore arise with criminal investigations, family violence protection orders, or law enforcement agencies. The instrument does not set rules for such interaction; ACMA’s standard must navigate confidentiality, evidence-sharing, and the tension between safety and rights in accordance with legal constraints.
• Administrative law and procedural fairness: Because the standard may impose duties on providers and potentially confer powers on the TIO, procedural fairness and administrative law norms may be implicated for decisions affecting consumers or providers. The instrument itself does not address procedural safeguards; those will need to be reflected in ACMA’s drafting where relevant.

Points of uncertainty and compliance tensions signalled by the instrument:

• Undefined terms and discretion: The instrument leaves key terms and the scope of application to ACMA (s 7(3)). That latitude is necessary to integrate the standard with existing laws but also introduces transitional ambiguity until the standard is published.
• Differential application and exemptions: ACMA may exempt classes of providers or treat classes differently (s 6(2)). This raises potential for uneven interaction with sectoral laws and multi-jurisdictional providers; the standard will need clear interface rules to avoid regulatory gaps or duplication.

In sum, the instrument sits within the Telecommunications Act’s standard-making power and leaves the precise legal interactions to ACMA, particularly through definitional choices, exemptions and the design of complaint handling that may involve the TIO. Once ACMA publishes the standard, practitioners will need to map its provisions against privacy, consumer protection, criminal and family law, and administrative law obligations to identify any overlaps, conflicts or compliance sequencing requirements.

The instrument as provided contains no recorded amendment history within its text. It is a stand-alone Ministerial Direction titled the Telecommunications (Domestic, Family and Sexual Violence Consumer Protections Industry Standard) Direction 2024, dated 3 December 2024 and signed by the Minister for Communications (front matter). The instrument states its authority,made under subsection 125AA(4) of the Telecommunications Act 1997 (s 3),and sets out commencement and operative clauses, but contains no schedules or embedded amendment notes.

What the instrument does on amendments to the standard:

• Power to vary the standard: The Ministerial instrument expressly authorises ACMA to vary the standard "as it considers necessary from time to time, provided that the standard as varied complies with this instrument" (s 5(3)). That provision anticipates that the ACMA standard will not be static and that ACMA may update it over time. The instrument therefore delegates amendment authority for the standard to ACMA, subject to continued compliance with the instrument’s objectives and requirements.
• Differential application and exemptions: The instrument allows ACMA to craft the standard to treat classes of carriers, carriage service providers or consumers differently or to exempt particular classes from specific provisions (s 6(2)). These are mechanisms ACMA may use when amending the standard to calibrate compliance burden or to respond to sectoral changes.

What is not included:

• The instrument does not itself provide a process for how ACMA must consult, publish or notify industry about variations. It does not specify transitional arrangements, sunset clauses or review cycles for the instrument itself.
• There are no historical amendments, notations or version numbers in the instrument as supplied. Any amendment history for the instrument or the underlying Act would need to be obtained from the register or from the Act’s legislative history, which are outside the text provided.

Practical implications for regulated entities and advisers:

• Expect change management: Because ACMA is empowered to vary the standard, carriers and carriage service providers should design compliance and governance arrangements that can absorb amendments,particularly given the instrument’s focus on evolving matters such as training, risk review of new products and systems, and trauma-informed practice (s 7(1)(c), (f), (h)).
• Monitor ACMA publication channels: Entities should monitor ACMA’s website and legislative instruments register for the initial standard and for any subsequent variations. The instrument mandates a six month window for the original standard to be determined after commencement (s 5(2)), creating an immediate timeline for the first enactment and likely subsequent updates.
• Recordkeeping and audit trails: The instrument’s recordkeeping objective (s 7(1)(k)) will facilitate evidence of compliance across amendment cycles. Entities should maintain robust records to show compliance both with the initial standard and with later variations.

To reiterate, the provided instrument contains no internal amendment history. It delegates ongoing amendment authority for the standard to ACMA and allows differential treatment and exemptions, but leaves processes and timelines for further amendments to ACMA’s discretion, constrained only by the requirement that any variations remain consistent with this instrument (s 5(3)).

The instrument contains no litigation history and does not reference any court or tribunal decisions. It is a Ministerial direction instructing ACMA to prepare a standard under the Telecommunications Act 1997, and the text does not record prior judicial review, challenges, or decisions relating to this direction.

What the absence of litigation history in the instrument means for practitioners:

• No precedent recorded here: Because the instrument does not reference litigation, there are no embedded judicial interpretations of its provisions in the text supplied. Any litigation or judicial review that may arise in future would concern either the process ACMA follows in making the standard, the content of the standard, or enforcement actions taken under the standard once made.
• Potential for future judicial review: The instrument authorises ACMA to define terms, set obligations and vary the standard (ss 5(3), 7(3)). Decisions by ACMA about the scope of obligations, exemptions, or conferring powers on the Telecommunications Industry Ombudsman could potentially give rise to administrative law challenges to the extent affected parties allege legal errors in ACMA’s exercise of its standard-making power under the Telecommunications Act. The instrument itself does not record any such actions.
• TIO decisions and dispute resolution: The instrument contemplates the TIO acquiring functions and powers under the standard (s 7(2)). Complaints handled by the TIO under any new powers could lead to precedent in the TIO’s determinations, and potentially judicial review of TIO decisions if legal questions arise. Again, the instrument provides no past cases; practitioners should watch for early TIO determinations or tribunal review that develop interpretative lines.

Practical preparatory steps pending any litigation:

• Document governance and decision-making: Carriers and carriage service providers should maintain clear audit trails of policy adoption, staff training, risk reviews and records that the instrument prescribes would be required by the standard (s 7(1)(f), (h), (k)). Those records will be material if disputes arise about compliance or if AGS, ACMA or other parties challenge provider conduct.
• Monitor ACMA outputs and stakeholder consultations: If ACMA conducts consultations, submissions and stakeholder engagement in drafting the standard, those materials will be important for understanding regulatory intent and for potential administrative law scrutiny of ACMA’s process.
• Prepare for TIO involvement: If ACMA confers powers on the TIO (s 7(2)), early TIO determinations could establish practical norms about the standard’s interpretation and application. Practitioners should track the TIO’s caselaw and guidance once the standard begins operation.

In the absence of any litigation history in the instrument itself, the practical risk profile for litigation arises from choices ACMA makes in framing and enforcing the standard rather than from precedent embedded in this text.

The instrument contains several features that create practical ambiguities, compliance traps and areas where small drafting differences in the ACMA standard could have outsized consequences. These are items that legal, compliance and operational teams should pay close attention to when ACMA publishes the draft and final standard.

1. No operative obligations in this instrument

• Gotcha: This direction does not itself impose operational obligations or penalties on carriers or carriage service providers. The binding obligations will be in the ACMA standard made under the Telecommunications Act (s 5(1)). Relying on the instrument alone to set compliance programmes risks missing material duties that ACMA may add in the standard.

2. Undefined but central terms to be set by ACMA

• Gotcha: The instrument repeatedly relies on terms not defined within it, such as "relevant consumers" and "groups who are, or may be, disproportionately affected". ACMA may define these terms narrowly or broadly (s 7(3)). The scope of the standard,and who benefits or bears duties,will therefore depend heavily on ACMA’s definitions.

3. Broad discretionary phrases

• Gotcha: Several objectives include "as appropriate" or allow ACMA to determine measures, consultation, or engagement with alleged perpetrators "if appropriate" (s 7(1)(j), (l)). These phrases leave significant discretion to ACMA and to carriage service providers implementing the standard. Implementation inconsistency could follow across providers unless ACMA prescribes more precise rules.

4. Differential application and exemptions

• Gotcha: ACMA may treat different classes of carriers or providers differently, or exempt classes from particular provisions (s 6(2)). That raises the risk of uneven regulatory obligations across the sector and uncertainty for providers on whether they will be exempt or when exemptions apply. Providers should not assume uniform obligations.

5. Timing and commencement ambiguity

• Gotcha: ACMA must determine the standard within six months and commence it "in full at the earliest practicable opportunity" (s 5(2)). The phrase "earliest practicable opportunity" is open to interpretation; timing of compliance obligations could therefore be contested or staggered. Entities should plan for a compressed implementation timeline but expect ACMA to set precise commencement dates.

6. Recordkeeping requirement

• Gotcha: The instrument mandates that carriage service providers keep and maintain "relevant records to demonstrate compliance" (s 7(1)(k)). What qualifies as "relevant" will be defined in the standard. Insufficient or poorly organised records may expose providers to enforcement risk or adverse TIO determinations.

7. Interaction with privacy and other legal obligations

• Gotcha: The instrument requires limiting disclosure on customer-facing materials (s 7(2)) and tailored approaches to privacy and account security (s 7(1)(b)). Without clear cross-references in the standard to privacy law obligations, providers may face conflicts or uncertainty about how to reconcile statutory privacy duties, law enforcement requests and the new standard.

8. Potential expansion of TIO powers

• Gotcha: ACMA may confer functions and powers on the TIO in relation to domestic, family and sexual violence matters (s 7(2)). This could broaden the TIO’s remit and change complaint pathways. Providers should be alert to new dispute resolution frameworks that could affect liability, remediation and public reporting.

9. Engagement with alleged perpetrators if "appropriate"

• Gotcha: The instrument contemplates, but does not mandate, policies about engagement with alleged perpetrators (s 7(1)(l)). If ACMA requires such policies, providers will need careful legal guidance to navigate confidentiality, defamation risk, evidentiary standards and potential clash with law enforcement or protective orders.

10. Ongoing variations by ACMA

• Gotcha: ACMA’s ongoing variation power (s 5(3)) means the standard could change over time, requiring continuous monitoring and updates to compliance programmes. Providers must budget for recurring compliance updates rather than viewing implementation as a one-off project.

11. Scope creep via consultation expectations

• Gotcha: The instrument urges consultation and collaboration with a wide array of stakeholders "where appropriate" (s 7(1)(j)). ACMA could interpret these expectations expansively when designing implementation obligations, potentially requiring providers to engage in resource-intensive consultation, co-design or reporting arrangements.

12. Lack of explicit enforcement regime

• Gotcha: Because the instrument does not detail enforcement, there is uncertainty about whether breaches will attract civil penalties, administrative sanctions, reputational remedies, or primarily TIO dispute resolution. This makes it hard to quantify legal exposure until the standard is published.

In practice, the principal "gotchas" arise from delegation and definitional gaps. The instrument sets high-level objectives but leaves material details to ACMA; small drafting choices in the standard will materially affect compliance cost, operational risk and legal exposure. Entities should not assume that the instrument’s wording equates to the standard’s content; active engagement in ACMA’s drafting process and thorough review of the final standard are essential.

This instrument prescribes objectives; compliance obligations will be set out in the ACMA standard that the instrument requires. Nonetheless, carriers and carriage service providers can begin preparatory work now to reduce implementation risk and to demonstrate readiness to meet recordkeeping and compliance obligations. Below are concrete, source-grounded practical steps mapped to the instrument’s objectives (s 7).

1. Prepare a project plan, governance and timeline

• Map internal stakeholders (legal, compliance, customer service, product, billing, IT, HR).
• Set a project governance structure to respond to ACMA’s standard within the six month determination window and to implement changes when the standard commences "at the earliest practicable opportunity" (s 5(2)).

2. Define the affected consumer cohort

• Because "relevant consumers" is not defined in this instrument and ACMA may define terms as necessary (s 7(3)), prepare to apply measures across plausible definitions (for example, account holders, identified victims, dependants, and consumers in households where family violence is alleged). Draft internal definitions that can be adapted once ACMA finalises terminology.

3. Conduct a systems and product risk review

• The instrument requires providers to review existing and proposed systems, processes and products to identify risks to relevant consumers and take action to reduce those risks (s 7(1)(h)). Implement a documented product risk assessment process that screens for features that could facilitate abuse (for example, account-sharing defaults, notification settings, itemised billing, SIM swap processes, location-sharing features).
• For changes in billing, provisioning, or account security, create a change-management checklist that includes a domestic and family violence safety impact assessment.

4. Audit billing and customer-facing materials

• Because carriers and providers must limit or prevent disclosure on invoices and customer-facing materials that may contribute to safety risks (s 7(2) first paragraph), audit current billing formats, itemisation, descriptors and delivery channels (email, post, SMS). Identify where sensitive information appears and draft mitigations such as non-itemised billing, alternate delivery channels, and billing name suppression options.

5. Design trauma-informed policies and procedures

• The instrument requires policies, systems and processes that are trauma-informed and that meet minimum requirements to be set out in the standard (s 7(1)(f)(i)-(v)). Draft a trauma-informed response policy that covers intake, confidentiality, escalation, safe contact strategies, and referral processes. Ensure it contemplates needs of groups disproportionately affected.

6. Train and support staff

• Implement training modules to identify and support relevant consumers and to consider the specific needs of disproportionately affected groups (s 7(1)(c)). Training should include protocolised safe questions, data handling practices, escalation pathways, and referral information.
• Put in place staff support mechanisms for employees handling these matters, consistent with the instrument’s requirement that staff be "appropriately supported" (s 7(1)(d)). This may include counselling access, debriefing and clear operational boundaries for staff duties.

7. Prepare complaint-handling pathways and cooperation with TIO

• The standard may address complaint-handling and may confer additional functions on the TIO (s 7(2)). Review and, if necessary, revise internal complaint-handling procedures so they are trauma-informed, timely and able to capture sensitive matters. Ensure staff know how to escalate to the TIO and how to respond to TIO requests if new powers are conferred.

8. Establish recordkeeping and audit trails

• The instrument mandates keeping and maintaining "relevant records to demonstrate compliance" (s 7(1)(k)). Draft a records retention policy covering incident reports, staff training logs, account changes, requests for billing suppression, and safety risk assessments. Ensure secure storage, access controls, and a production process for regulator or TIO inquiries.

9. Stakeholder engagement and consultation readiness

• The instrument envisages consultation and collaboration with domestic violence support services, those with lived experience, disproportionately affected groups and other providers "where appropriate" (s 7(1)(j)). Assemble a stakeholder engagement plan and contact list of local and national support organisations to enable prompt consultation or collaboration once ACMA sets expectations.

10. Policies on engagement with alleged perpetrators

• Because the instrument contemplates appropriate policies for engagement with alleged perpetrators (s 7(1)(l)), draft a risk-based framework for when and how the organisation may interact with alleged perpetrators. Include legal checks for protective orders, law enforcement requests and data disclosure constraints. Ensure integration with privacy and safety teams.

11. Privacy and account-security protocols

• Implement robust account security procedures that can be activated for relevant consumers, for example: verified account locking, alternate authentication, controlled SIM swap processes and restricted contact options. These derive directly from the "tailored and appropriate approach" to privacy and account security required by the instrument (s 7(1)(b)).

12. Communications and consumer information

• Prepare materials to promote information about where relevant consumers can seek assistance, as the instrument requires (s 7(1)(i)). This may include helpline numbers, links to support services, and clear guidance for affected consumers about how to request account protections or billing changes.

13. Legal review and compliance mapping

• Once ACMA publishes the draft standard, conduct a legal analysis mapping each standard provision to internal policies, operations and other legal obligations (for example, privacy law). The instrument allows ACMA to define terms and to exempt classes of providers (ss 6(2), 7(3)); a legal gap analysis will identify where policy changes are necessary.

14. Budgeting and resource allocation

• Because the instrument anticipates ongoing ACMA variation and potential consultation obligations (ss 5(3), 6(2), 7(1)(j)), allocate budget for initial implementation and for future updates to training, IT systems, billing processes and recordkeeping infrastructure.

15. Monitor ACMA publications and participate in consultation

• Engage in ACMA consultation processes. The instrument allows ACMA to vary the standard and to define terms (ss 5(3), 7(3)). Early engagement increases the likelihood that industry operational constraints and cost implications are considered in the standard.

These actions map directly to the instrument’s objectives and prepare organisations to respond once ACMA issues the standard. They also serve to create demonstrable evidence of proactive compliance thinking, which the instrument’s recordkeeping requirement (s 7(1)(k)) makes likely to be relevant for regulators or the TIO.