A provider of an age-restricted social media platform must not collect government-issued identification material (identity documents of any Australian government or agency, including copies, and government-issued digital IDs) or use an accredited service under the Digital ID Act 2024 for the purpose, or purposes including the purpose, of complying with s 63D, unless it also provides alternative means, not involving that material or those services, for an individual to assure it that they are not an age-restricted user, and those means are reasonable in the circumstances (the provider bears an evidential burden). 60,000 penalty units from 12 September 2026.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.