Australia's e-Safety Commissioner says Apple and Microsoft are not doing enough to stop CSAM on their services, calling the companies' responses “alarming”
An Australian regulator, after using new powers to make the tech giants share information about their methods …
Context & Ripple Effects
This 2022 rebuke is the opening move in what became a sustained enforcement campaign by Australia's e-Safety Commissioner. The regulator used newly granted information-gathering powers to demand details of how Apple and Microsoft detect child sexual abuse material, and judged the answers 'alarming' — a template it would repeat against other firms, including when it fined X roughly $384K and warned Google for inadequate CSAM disclosures a year later.
The stakes of that resistance became visible over the following years: Apple's pushback helped push Australia to water down draft rules that would have forced detection of abuse content in end-to-end encrypted messaging, while the Commissioner kept widening the aperture with transparency notices to Roblox, Microsoft's Minecraft, and other gaming platforms in 2026. The through-line is a regulator treating disclosure itself as the enforcement lever.
First-order effects
- Apple and Microsoft are now on record with a top Australian regulator as insufficient on CSAM, putting them on the same disclosure-compliance path that ended in a fine for X and a warning for Google.
Second-order effects
- Platform resistance has real rulemaking consequences: Apple's objections contributed to Australia softening its encrypted-messaging detection requirements, showing companies can blunt the strictest versions of these mandates even while absorbing public censure.
Third-order effects
- If the pattern holds, child-safety disclosure becomes a permanent, expanding regulatory surface in Australia — moving from messaging services to app stores, AI services, and gaming platforms, each required to prove its safety measures rather than assert them.
The trend: Australia is building a standing transparency-and-enforcement regime for online child safety, testing how far disclosure mandates can reach before platform pushback forces retreat.