Australia’s Digital Duty of Care Bill and the Risks of Private Messaging

Why in News?

At an Australian Senate hearing on November 9, Google warned that the proposed Digital Duty of Care could affect children’s access to ordinary email services.

• The House of Representatives had passed the bill. Senators were examining the proposal when Reuters reported the testimony.
• A Google witness raised the possibility of age checks extending to email, messaging and private file storage.
• Other providers warned that uncertainty over harmful conduct could encourage excessive removal of lawful material.

• A duty focused on service design asks providers to anticipate how their own features might expose users to harm.
• Private correspondence poses a distinct privacy question because inspecting a message can disclose information about both sender and recipient.

UPSC Relevance

Prelims Relevance

• Jurisdiction: Australia.
• Status on November 9: the Senate was considering the proposed legislation.
• eSafety Commissioner: Australia’s online safety regulator.
• Risk mitigation: action to reduce the likelihood or severity of an identified harm.

Mains Relevance

GS Paper 2

• Assess the role of parliamentary scrutiny in defining enforceable duties for intermediaries.
• Examine how a regulator can assess safety while protecting private communications.

GS Paper 3

• Explain how platform design influences users’ exposure to harmful material.

Essay

• The same tool can protect a user in one setting and intrude on another user’s privacy elsewhere.

Background and Context

What Would a Digital Duty of Care Require?

The Australian proposal places responsibility on the provider for risks that arise through the design and operation of an online service.

• A risk assessment asks who can encounter a harm, which feature creates the opportunity and what the provider can change. The answers depend on how people actually use the service.
• Consider a public feed that repeatedly promotes a harmful post. A user can report that post, but the provider also controls the recommendation system that sends it to unfamiliar audiences.
• The provider could change the conditions under which its system recommends similar material. Checking subsequent exposure would show whether that design change reached the people who faced the risk.
• A complaints process supplies different evidence. Several complaints about one feature can reveal a recurring problem, while a single complaint may call for a response to one user’s experience.
• The reasonable steps standard matters because a service can reduce exposure without eliminating every harmful interaction. A regulator would need evidence linking the provider’s response to the risk it identified.

Why Did Private Email Feature in the Hearing?

Moving from a public feed to a family inbox changes both the route of exposure and the information a safety measure might reveal.

• In an email exchange, a sender chooses the recipient. A service that carries that message performs a different function from a platform that selects posts for distribution to a public audience.
• The Google witness questioned how a provider should respond if a child might receive pornography through an ordinary communications service. She warned that age assurance could extend to services families use daily.
• Checking a user’s age and examining the contents of a message are different interventions. Each requires its own justification because each involves different personal information and affects different people.
• A family using shared file storage illustrates the problem. A restriction imposed at the account level could affect access to homework or family photographs even when the concern involves a particular item.
• The forecast about Gmail access came from a company witness describing a possible compliance response. The hearing supplied evidence about industry’s interpretation while senators continued examining the bill.

How Can Oversight Account for Privacy?

An assessment of proportionality begins with the harm and the service feature that could expose a particular group of users to it.

• Ask what a narrower intervention could accomplish. For example, a control over who may contact a child addresses unsolicited messages without requiring an assessment of every conversation with an existing contact.
• Ask how the provider would measure effectiveness. A high count of deleted posts says little about how often children encountered harmful material or how many lawful discussions disappeared.
• Include the cost of wrongful restriction. A user who loses access to correspondence needs a way to challenge the decision, particularly when access is necessary for education or work.
• Australian ministers supported broad coverage to protect users across services. Providers warned of over-removal. Parliamentary scrutiny can test both claims by asking how a particular safeguard would operate in a specific service.

Way Forward

Test a Safeguard Against a Specific Harm

• Specify the feature, affected users and exposure before choosing a control.
• Compare the proposed measure with a less intrusive option that addresses the same risk.
• Record how users can challenge an error and how the provider will check whether the measure works.

Conclusion

• A digital duty of care makes prevention a question of service design. The same risk can require different responses in a public recommendation feed and a private inbox.
• For a Mains answer, connect the foreseeable harm to a feasible safeguard, identify the privacy cost and explain what evidence would justify continuing or changing that safeguard.

UPSC Practice Questions

Prelims MCQ 1

Consider the following statements about Australia’s proposed Digital Duty of Care as discussed on November 9.

1. The House of Representatives had passed the bill.
2. A company witness raised concerns about its possible application to email.
3. The Senate hearing examined potential consequences for private communications.

How many of the above statements are correct?

(a) Only one (b) Only two (c) All three (d) None

Answer: (c) All three

Explanation:

The bill had passed the House and was under Senate scrutiny. Testimony raised possible privacy and access consequences for everyday communications services.

Prelims MCQ 2

Which measure most directly addresses the design risk created when a public feed repeatedly promotes harmful material?

(a) Checking whether every email sender uses a real name (b) Counting the total number of users on the service (c) Requiring users to delete their private archives (d) Changing recommendation settings and measuring subsequent exposure

Answer: (d) Changing recommendation settings and measuring subsequent exposure

Explanation:

This measure changes the feature responsible for repeated exposure and tests its effect.

UPSC Mains Questions

1. Discuss how a digital duty of care could change the accountability of online intermediaries.
2. How should a regulator balance child safety and privacy when assessing measures applied to private messaging?

Sources: Reuters, reported by The Hindu and Australian Government, Department of Communications.

Frequently Asked Questions

PDF