Restricted Access Systems Declaration 1999 (No. 1)

Restricted Access Systems Declaration 1999 (No. 1)

THE AUSTRALIAN BROADCASTING AUTHORITY makes this declaration under subclause 4(1) of Schedule 5 of the Broadcasting Services Act 1992.

Dated  3rd December  1999

David E. Flint (signed)

Chairman

Australian Broadcasting Authority

Restricted Access Systems Declaration 1999 (No. 1)

made under the

Broadcasting Services Act 1992

1. Introduction

1.1.            This Declaration is the Restricted Access Systems Declaration 1999 (No. 1).

1.2.            This declaration commences on gazettal.

1.3.            This declaration sets out minimum system requirements for a 'restricted access system' pursuant to subclause 4(1) of Schedule 5 of the Broadcasting Services Act 1992 (the Act).

1.4.            Pursuant to subclause 4(2) of Schedule 5 of the Act, in making this declaration, the Australian Broadcasting Authority

• has had regard to the objective of protecting children from exposure to Internet content that is unsuitable for children; and

• has been guided by the principles contained in subsection 4(3) of the Act concerning the regulation of Internet content hosted in Australia and Internet carriage services supplied to end-users in Australia.

2. Functions

2.1. A 'restricted access system' will be required, as a minimum, to perform the following functions:

3. Registration

3.1 A person will apply for registration with the system electronically, for example, via a website or email; or in hard copy form, for example, by letter or fax.

3.2 Application forms must specify data items that are mandatory and those that are ‘optional’.

3.2.1. Mandatory data items for the electronic lodgement of an application are:

• name of applicant;

• declaration that applicant is 18 years of age or over; and either

• credit card details; or

• digital signature.

3.2.2. Mandatory data items for the lodgement of a hard copy application are:

• name of applicant;

• declaration that applicant is 18 years or over; and either

• credit card details; or

• evidence of age, for example, a copy of passport, birth certificate, driver's licence, senior's card or student card.

4. Qualification/validation

4.1. The system will 'qualify' an application for registration if all mandatory information requirements are provided.

4.2. The following rules will be used to invalidate an application:

• if applicant has not declared that he/she is at least 18 years of age; or

• if credit card details cannot be validated; or

• if digital signature cannot be authenticated in the case of an electronic application; or

• if evidence of age has not been produced in the case of a hard copy application.

4.3. Upon valid registration, a PIN or password is to be issued to the registered user. It should be a condition of use that the allocated PIN or password should not be passed on to a third person under the age of 18.

4.4. An allocated PIN or password can be changed if the user and/or system administrator suspects the integrity of the data is compromised.

5.      Access

5.1                A registered user must input allocated PIN or password to gain access to any  website subject to the system.

5.2 Access is to be denied if entered PIN or password does not match registered record of PIN or password.

6. System compliance

6.1. System compliance will be tested if the ABA receives a complaint about Internet content subject to the system.

7. Privacy and security requirements

7.1.            The handling of personal information should comply with the privacy standards contained in the National Principles for the Fair Handling of Personal Information issued by the Federal Privacy Commissioner.

7.2.            It is highly desirable that the electronic transfer of credit card information be protected with reasonable data security mechanisms.  For example, the use of Secure Sockets Layer (SSL) in online registration processes.