From 27 December 2025, all ‘internet search engine services’ operating in Australia are required to comply with Schedule 3 – Internet Search Engine Services Online Safety Code (Class 1C and Class 2 Material) (Code) registered under the Online Safety Act 2021 (Cth) (eSafety Act).[1] The Code, registered by the eSafety Commissioner on 27 June 2025 pursuant to section 140 of the eSafety Act, mandates that search engine providers take reasonable steps to limit children’s exposure to harmful online content.[2]
As two (2) of the largest search engine providers globally, it is anticipated that Google and Microsoft will play a central role in shaping how the industry responds to these new requirements. This article explores what the Code demands in relation to age verification and examines how Google and Microsoft are likely to implement systems to meet these new obligations.
What is required by the Code?
The Code, enforced by eSafety Commissioner, requires internet search engine services to implement the following age assurance measures where technologically feasible and reasonably practicable:
- apply appropriate age assurance measures for account holders; and
- apply tools and/or settings — such as ‘Safe Search’ functionality — at the highest safety level by default for account holders who age assurance systems indicate are likely to be Australian children.[3]
At a minimum, these tools must filter out online pornography and high-impact violence material (Class 1C) detected in search results.[4]
What are Google and Microsoft’s mooted solutions?
While Google and Microsoft have yet to issue official statements as to how they will address the Australian Code, both companies have been actively exploring and trialling a range of age assurance technologies in global markets. These include:
- Zero-Knowledge Proof (ZKP) cryptography: open-source library of cryptography tools that allow people to prove that something about them, such as their age, is true without exchanging any other data.[5]
- Machine learning-based age estimation: using large language models (LLMs) to estimate an account holder’s age based on browsing behaviour.[6]
- Selfie verification & Government ID: requesting account holders submit a selfie or upload a government-issued ID if their activity suggests they may be under eighteen (18).[7]
- Google Wallet integration: exploring the use of digital ID cards stored in the Google Wallet to verify age.[8]
Concluding remarks about compliance with the Code
While neither company has committed to a specific solution for age verification in Australia, it is expected that they will leverage established global technologies and expertise to develop compliant, scalable systems that meet the requirements of the Code.
Links and further references
Industry codes
Schedule 3 – Internet Search Engine Services Online Safety Code (Class 1C and Class 2 Material)
Further information about eCommerce law
If your business need advice on ecommerce law, please contact us for a confidential and obligation-free discussion:
Malcolm Burrows B.Bus.,MBA.,LL.B.,LL.M.,MQLS.
Legal Practice Director
T: +61 7 3221 0013 (preferred)
M: +61 419 726 535
E: mburrows@dundaslawyers.com.au
Disclaimer
This article contains general commentary only. You should not rely on the commentary as legal advice. Specific legal advice should be obtained to ascertain how the law applies to your particular circumstances.
[1] Schedule 3 – Internet Search Engine Services Online Safety Code (Class 1C and Class 2 Material) (27 June 2025) eSafety Commissioner https://www.esafety.gov.au/sites/default/files/2025-06/Schedule-3-Internet-Search-Engine-Services-Online-Safety-Code-%28Class-1C-and-Class-2-Material%29.pdf.
[2] Schedule 3 – Internet Search Engine Services Online Safety Code (Class 1C and Class 2 Material) (27 June 2025) eSafety Commissioner https://www.esafety.gov.au/sites/default/files/2025-06/Schedule-3-Internet-Search-Engine-Services-Online-Safety-Code-%28Class-1C-and-Class-2-Material%29.pdf.
[3] Schedule 3 – Internet Search Engine Services Online Safety Code (Class 1C and Class 2 Material) at [7], p.5.
[4] Schedule 3 – Internet Search Engine Services Online Safety Code (Class 1C and Class 2 Material) at [7], p.5.
[5] Google (2025) Longfellow ZK https://github.com/google/longfellow-zk; Microsoft, ‘Advancing Privacy with Zero-Knowledge Proof Credentials’ (Blog Post, 22 July 2020) https://techcommunity.microsoft.com/blog/microsoft-security-blog/advancing-privacy-with-zero-knowledge-proof-credentials/1441554.
[6] Google, ‘New Digital Protections for Kids, Teens and Parents’ (Blog Post, 3 March 2025) https://blog.google/technology/families/google-new-built-in-protections-kids-teens/.
[7] Google, ‘Access Age-Restricted Content & Features’ (Web Page, 3 March 2025) https://support.google.com/accounts/answer/10071085?hl=en#zippy=; Microsoft, ‘Microsoft Entra Verified ID introduces Face Check in preview’ (Blog Post, 6 February 2024) https://www.microsoft.com/en-us/security/blog/2024/02/06/microsoft-entra-verified-id-introduces-face-check-in-preview/.
[8] Google, ‘Google Wallet launches new age and identity verification features’ (Web Page, 3 May 2025) https://blog.google/products/google-pay/google-wallet-age-identity-verifications/.
Related insights about technology and ecommerce law
-
Federal parliament enacts cyber security legislation
On 25 November 2024, the Australian Parliament passed a suite of legislation, collectively referred to by the Australian Government as the Cyber Security Legislative Package 2024. The purported impetus for this legislation was a series of high-profile data breaches in 2022 and 2023.
-
The Digital ID Bill 2023 (Cth) – key points
On 30 November 2023, the Digital ID Bill 2023 (Cth) and the Digital ID (Transitional and Consequential Provisions) Bill 2023 (Digital ID Bills) were introduced in the Australian Senate. Digital IDs are designed to provide individuals with a convenient way to verify their identity when completing certain online transactions and dealing with government and certain…
-
Misinformation and Disinformation Bill 2023 – draft insights
The Communications Legislation Amendment (Combatting Misinformation and Disinformation) Bill 2023 (Cth) (Misinformation Bill) was announced by the Department of Infrastructure, Transport, Regional Development, Communication and the Arts (DITRDCA) in January 2023. The Misinformation Bill is aimed at restricting the flow of misinformation and disinformation by providing the Australian Communications and Media Authority (ACMA) with increased…
-
National Classification Scheme – proposed federal changes
Albanese Government announces intention to reform National Classification Scheme, proposing R18+ for games simulating gambling and M for computer games with paid loot boxes/in-game purchases linked to chance. Learn more about proposed reforms and if simulated gambling needs to be addressed.
-
Australian legislation tackles loot boxes in video games
The Classification (Publications, Films and Computer Games) Amendment (Loot Boxes) Bill 2022 (Bill) has been tabled in the House of Representatives on the 28 November 2022. The private member’s Bill acts in response to growing support for the regulation of features and elements within video games which appear to simulate gambling.
-
Digital games tax offset introduced by Albanese
The Albanese Labor Government has proposed a Digital Games Tax Offset (DGTO) of 30%, encouraging the growth of the digital games industry in Australia. Learn more about the DGTO and how it will create more jobs and international competitiveness.
-
Influencers now regulated when promoting therapeutic goods
The Therapeutic Goods Advertising Code 2021 (Cth) (2021 TGA Code) brings regulations for social media endorsements of therapeutic goods. Learn more about the changes and how to ensure compliance before they take effect on 1 January 2022.
-
Introduction of cryptocurrency and hacking offences to Parliament
The Crimes Legislation Amendment (Ransomware Action Plan) Bill 2022 is set to revolutionize the way cybercrime is prosecuted. Learn more about the changes it brings and the implications they have.
-
Registration of .au domain names – what does this mean for businesses?
From 24 March 2022, any persons with a verified connection to Australia will be able to apply for a domain name ending in .au, also known as a direct name or second level name (Direct Name). Any business can apply for a Direct Name as long as they meet the eligibility criteria under the .au…
