Compliance for Telecommunications carriers / CSPs
Carriers and carriage service providers under the Telecommunications Act.
Published obligations that apply to telecommunications carriers / csps (7)
- criticalCWLTHComply with online safety industry codes (Phase 1 + 2)
Eight industry sections covered by binding codes under the Online Safety Act 2021.
- criticalCWLTHReport cyber security incidents to ASD (SOCI)
Critical infrastructure asset operators must report critical incidents within 12 hours and other incidents within 72 hours.
- highCWLTHComply with Basic Online Safety Expectations + industry codes
Social media services, app distribution services, and other captured providers must meet the BOSE and industry codes.
- highCWLTHComply with Customer Service Guarantee (CSG) for standard phone services
Telstra + other carriers must meet CSG performance benchmarks for installations + faults.
- highCWLTHComply with Telecommunications Consumer Protections (TCP) Code
Telcos must comply with the binding TCP Code covering credit assessment, billing, complaint handling and unwelcome contact.
- highCWLTHComply with the Reducing Scam Calls and Scam SMs Industry Code
CSPs must implement controls to detect, trace and block scam calls and SMs, including SMS Sender ID Register.
- highCWLTHTelco data retention — 2 years (Part 5-1A Telecommunications Act)
Carriers + CSPs must retain telco metadata for 2 years.