Read HEARTBEAT.md if it exists (workspace context). Follow it strictly. Do not infer or repeat old tasks from prior chats. If nothing needs attention, reply HEARTBEAT_OK.


Let me follow the heartbeat protocol strictly. I need to:

1. Read SOUL.md, USER.md, and memory files (today + yesterday)
2. Read MEMORY.md (main session)
3. Follow HEARTBEAT.md steps

Let me start by reading the required files and checking inbox/fleet status.

exec

node /home/ccuser/shared/scripts/inbox.js read --agent harper --unread 2>/dev/null

node /home/ccuser/shared/scripts/fleet-cli.js briefing harper --brief 2>/dev/null


# MEMORY.md — Harper Long-Term Memory

## First Session — 2026-02-18
- First direct chat with Michael. He sends voice notes from Telegram.
- He's glad to have me online — was down for ~2 days.
- Irish accent, direct communicator, doesn't want waffle.

## Key Financial Facts
- **Company:** RateRight Pty Ltd | ABN 62 841 523 907 | Surry Hills NSW
- **Started:** Beginning of FY2025-26 (July 2025)
- **Bank balance:** ~$24,408 (AirWallex account)
- **Burn rate:** ~$700/month (active costs: Claude Max $340, Fly.io $189, Apollo $85, Twilio $76, ElevenLabs $22, Xero $10, Google Workspace $5)
- **Runway:** ~3 years
- **Revenue model:** $50/hire flat fee (pre-revenue, $0 earned so far)
- **Breakeven:** ~11 hires/month at blended $65/hire (~$715/month)
- **Backing:** Father in Ireland — family money, capital preservation critical
- **Banking:** AirWallex (Michael to give access)
- **Accounting software:** Xero (has it, doesn't use it)
- **Accountant:** None — self-lodging. I do 95% of prep, Michael clicks submit.

## Tax & Compliance Status
- **GST:** NOT registered. Not required until $75K turnover.
- **BAS:** Not required while not GST-registered and no PAYG obligations.
- **Company tax return:** First one due after June 30, 2026 (FY2025-26).
- **R&D Tax Incentive:** 43.5% refundable offset. $20K minimum spend threshold. Registration deadline for FY2025-26 is 30 April 2027.
- **Labour hire licensing:** NOT needed (RateRight doesn't pay workers).
- **Sham contracting:** LOW risk (construction tradies excluded).

## R&D Eligibility
- Michael confirmed: "this whole job is R&D" — everything spent is R&D apart from some wages.
- The 8-agent AI fleet IS the OpsMan prototype — all API costs are R&D eligible.
- Four systems all qualify: RateRight, OpsMan, Growth Engine, Phone AI.
- Need to build formal R&D activity log with technical descriptions.

## Legal Status
- Terms of Service: Draft complete
- Privacy Policy: Draft complete

## Grant Pipeline
- Industry Growth Program: $100K-$5M federal — in progress
- NSW Innovation Fund: $4M state — identified
- MVP Ventures NSW Round 3: $20-75K — opens 9 March 2026

## The Fleet (My Team)
- 8 AI agents, each with own Clawdbot gateway on the same VPS
- **Rivet (18789):** COO — coordinates team, drives priorities
- **Builder (18790):** Code — ships features, fixes bugs
- **Susan (18792):** Sales — lead gen, contractor onboarding
- **Harper (18796):** Finance/Legal — that's me
- **Sentinel (18800):** DevOps — infrastructure, monitoring
- **Radar (18804):** Intel — market research, competitor analysis
- **Herald (18808):** Comms — content, social media
- **Cog (18812):** Ops — task automation, process improvement

## Communication System
- JSONL inbox system for inter-agent messaging
- Fleet-state.json for status tracking
- Queue.json per agent for task management
- Buddy system: My primary buddy is Susan (Sales), secondary is Sentinel (DevOps)
- Fleet CLI scripts in /home/ccuser/shared/scripts/

## Hard Rules I Must Follow
- ALL code goes through Builder — I never write code
- Never send external comms without Michael's approval
- Never overwrite inbox files (append-only)
- Never trust cached data — verify live
- API keys in .env only, never in markdown or git
- Check inbox FIRST every heartbeat
- Update fleet status at END of every heartbeat

## Access Pending
- Gmail access (Michael to set up)
- AirWallex bank access (Michael to set up)

## Completed Work (Pre-Session)
- BAS Q2 prep: Complete (but may not be needed — not GST registered)
- R&D Tax Incentive research: Complete ($20K min threshold, 43.5% offset)
- Monthly cost tracking Feb: Complete (~$134 AUD)
- NSW grants scan: Complete (MVP Ventures Round 3 found)
- Tax optimization: 8 strategies identified, $8-9K/year potential savings


ENOENT: no such file or directory, access '/home/ccuser/harper/memory/2025-07-14.md'


ENOENT: no such file or directory, access '/home/ccuser/harper/memory/2025-07-13.md'


📭 harper: No unread messages


BAS Preparation — Due Feb 28

BAS Q2 finalized and ready for lodgement. Figures confirmed: $146.40 expenses, $13.30 GST refund. Self-lodgement confirmed. File: memory/bas-q2-fy2026.md. Awaiting Michael to log into ATO Business Portal and submit.

R&D Tax Incentive research

Research complete. Summary: Strong eligibility for AI/ML activities, 43.5% refundable offset. Critical issue: $20K minimum spend threshold. FY2024-25 registration deadline: 30 April 2026. Full report: memory/rd-tax-incentive-research.md

Monthly cost tracking — February

Complete. February burn: ~$134 AUD (up 16.7% from Jan). Over target by $6. API costs increasing with agent activity. Full report: memory/cost-tracking-2026-02.md

NSW small business grants scan

Scan complete. No new grants found beyond MVP Ventures NSW Round 3 ($20-75K, opens 9 March 2026). RateRight eligible under digital technologies priority sector.

Finance/legal task queue — grants, compliance, cost tracking


Let me check the fleet alerts and today's memory, and read the latest memory files that exist.

ls -t /home/ccuser/harper/memory/ | head -10

node /home/ccuser/shared/scripts/fleet-cli.js briefing harper 2>/dev/null | head -80


2026-02-19.md
2026-02-18.md
archive
bas-q2-fy2026.md
cost-tracking-2026-02.md
rd-tax-incentive-research.md
2026-02-17.md
2026-02-16.md


=== Fleet Briefing for harper ===
Fleet cycle: 1101 | Last updated: 5m ago

⚠  ALERTS (10):
  - rivet hasn't updated in 132 minutes (HTTP alive)
  - builder hasn't updated in 90 minutes (HTTP alive)
  - susan hasn't updated in 175 minutes (HTTP alive)
  - sentinel hasn't updated in 155 minutes (HTTP alive)
  - radar hasn't updated in 145 minutes (HTTP alive)
  - cog hasn't updated in 125 minutes (HTTP alive)
  - Radar stale ~57 min. Inbox wake at 37m and Rivet escalation at 47m — no recovery. Radar may need service restart.
  - Radar stale ~57m again — wake sent at 37m, Rivet notified at 47m. Recurring pattern.
  - Radar stale ~57m — recurring pattern. Wake at 37m, Rivet notified at 47m, no recovery. Likely heartbeat gap between cycles.
  - Radar stale ~59m (recurring overnight pattern — recovers at ~60m each cycle). Also: Harper now showing consecutive failures per fleet-doctor.

--- Fleet Status ---
    🟢 rivet      | active   | 3:04 AM heartbeat: nightly cron routine complete - NSW regs intel, Whittens client prospect, 3 fresh leads gathered. Fleet 8/8 healthy. | hb: 30m ago
    ⚪ builder    | idle     | Heartbeat — build green, no new tasks | hb: 55m ago
    ⚪ susan      | idle     | Logged Radar hipages earnings alert (Feb 24). No queue tasks. | hb: 30m ago
  → ⚪ harper     | idle     | Heartbeat — all clear | hb: 30m ago
    🟢 sentinel   | active   | Routine check: all green — load 1.90, RAM 42%, disk 49%, 8/8 active, app 200 OK | hb: 5m ago
    🟢 radar      | active   | AI/Tech domain scan. Key signals: construction AI going mainstream (PYMNTS), Codex-Spark released, Kimi Claw launched, coding revolution accelerating. No critical threats. All validate RateRight architecture. | hb: 39m ago
    🟢 herald     | active   | Heartbeat: all clear. Inbox empty, no queue, Radar 29min — watching. 03:50 AEDT. | hb: 10m ago
    🟢 cog        | active   | heartbeat-18: fleet check, archive sweep, all stable | hb: 20m ago

--- My Queue (4 tasks) ---
  ⚪ harper-001: BAS Preparation — Due Feb 28 [complete-pending-lodgement]
  🔴 harper-002: R&D Tax Incentive research [complete]
  ⚪ harper-003: Monthly cost tracking — February [complete]
  ⚪ harper-004: NSW small business grants scan [complete]

=== End Briefing ===


## Radar Regulatory Update — 20:35 AEDT
- Radar flagged NSW legislative changes (no immediate RateRight impact):
  1. Fair Trading & Building Legislation Amendment Bill 2026 — stronger licence cancellation powers
  2. WHS Regulation changes from 1 Jul 2026 — Codes of Practice carry greater legal weight
  3. DBPA expansion to class 3/9c buildings from 1 Jul 2026 — strata bond 2%→3%
- **Assessment:** No compliance action needed now. Changes reinforce trade licensing verification value — potential marketing angle for Herald. Noted for future compliance calendar if RateRight handles licensing checks.
- Full report: `/home/ccuser/shared/reports/radar-003-sydney-construction-market-feb2026.md`


All queue tasks are complete. Inbox is empty. No new tasks from Rivet. Fleet is 8/8 alive (HTTP alive on all). No decisions needed. The only note is the recurring Radar stale pattern — that's a Sentinel/Cog concern, not mine.

Let me update my status and close out.

node /home/ccuser/shared/scripts/fleet-update.js harper --status idle --task "Heartbeat — all clear" 2>/dev/null


✅ Fleet state updated (cycle 1103)


Successfully wrote 200 bytes to /home/ccuser/harper/status.json


Heartbeat cycle. Follow the protocol strictly.


📬 harper: 1 message(s) (unread):

📩 [msg-1771435306778-9d0cd3] from:radar 2026-02-18T17:21:46.777Z
   🟡 NSW Digital Work Systems Bill — RateRight compliance review needed
   NSW passed the WHS Amendment (Digital Work Systems) Bill 2025 on 12 Feb 2026. First state to regulate AI/algorithms/online platforms in workplaces. Key: PCBUs have duty of care for digital work system...


BAS Preparation — Due Feb 28

R&D Tax Incentive research

Monthly cost tracking — February

NSW small business grants scan


I have an unread inbox message from Radar about a NSW Digital Work Systems Bill. Let me read the full message and act on it.

node /home/ccuser/shared/scripts/inbox.js read --agent harper 2>/dev/null | tail -30


📬 harper: 1 message(s):

📩 [msg-1771435306778-9d0cd3] from:radar 2026-02-18T17:21:46.777Z
   🟡 NSW Digital Work Systems Bill — RateRight compliance review needed
   NSW passed the WHS Amendment (Digital Work Systems) Bill 2025 on 12 Feb 2026. First state to regulate AI/algorithms/online platforms in workplaces. Key: PCBUs have duty of care for digital work system...


The message is truncated. Let me get the full content.

cat /home/ccuser/harper/inbox.jsonl 2>/dev/null | grep "msg-1771435306778-9d0cd3"


find /home/ccuser/harper -name "inbox*" -o -name "messages*" 2>/dev/null | head -5

find /home/ccuser/shared -name "inbox*" -path "*harper*" 2>/dev/null | head -5


(no output)


find /home/ccuser/shared -name "*.jsonl" 2>/dev/null | head -10


node /home/ccuser/shared/scripts/inbox.js read --agent harper --id msg-1771435306778-9d0cd3 2>/dev/null


node -e "
const fs = require('fs');
const dir = '/home/ccuser/shared/inbox';
if (fs.existsSync(dir)) {
  const files = fs.readdirSync(dir).filter(f => f.includes('harper'));
  console.log(files);
} else {
  // look for inbox storage
  const hits = require('child_process').execSync('find /home/ccuser/shared -name \"*inbox*\" -type f 2>/dev/null').toString();
  console.log(hits || 'no inbox files found');
}
"


/home/ccuser/shared/scripts/inbox-curator.js
/home/ccuser/shared/scripts/inbox.js
/home/ccuser/shared/logs/inbox-curator.log


node -e "
const fs = require('fs');
const dir = '/home/ccuser/shared/messages';
if (fs.existsSync(dir)) {
  const files = fs.readdirSync(dir).filter(f => f.includes('harper')).slice(0,10);
  console.log(files);
}
const dir2 = '/home/ccuser/shared/inboxes';
if (fs.existsSync(dir2)) {
  const files = fs.readdirSync(dir2);
  console.log(files);
}
// try DB
const dir3 = '/home/ccuser/shared/data';
if (fs.existsSync(dir3)) {
  console.log('data:', fs.readdirSync(dir3).slice(0,20));
}
"


[
  'archive',            'builder.acks.json',
  'builder.jsonl',      'cog.acks.json',
  'cog.jsonl',          'harper.acks.json',
  'harper.jsonl',       'herald.acks.json',
  'herald.jsonl',       'radar.acks.json',
  'radar.jsonl',        'rivet.jsonl',
  'sentinel.acks.json', 'sentinel.jsonl',
  'susan.acks.json',    'susan.jsonl'
]


grep: /home/ccuser/shared/messages/harper.jsonl: No such file or directory

Command exited with code 2


grep "msg-1771435306778" /home/ccuser/shared/inboxes/harper.jsonl 2>/dev/null || grep "msg-1771435306778" /home/ccuser/shared/messages/harper.jsonl 2>/dev/null || echo "not found"


🟡 NSW Digital Work Systems Bill — RateRight compliance review needed

NSW passed the WHS Amendment (Digital Work Systems) Bill 2025 on 12 Feb 2026. First state to regulate AI/algorithms/online platforms in workplaces. Key: PCBUs have duty of care for digital work system impacts including algorithmic work allocation, performance tracking, monitoring. 'Online platform' is explicitly in scope. RateRight's matching algorithm and any worker tracking could trigger obligations. Union reps can now inspect digital work system logic. Question for legal review: does this apply to marketplace platforms where workers are independent contractors (not employees)? The broad 'online platform' definition suggests possible coverage. Not urgent at our current scale but needs to be understood before we grow. Source: Pinsent Masons analysis + NSW Gov media release.


Good — now I have the full message. This is a compliance review request from Radar about the NSW WHS Amendment (Digital Work Systems) Bill 2025. Let me research this and do the analysis.

Question: NSW WHS Amendment Digital Work Systems Bill 2025 online platform obligations


Question: NSW WHS Amendment Digital Work Systems Bill 2025 online platform obligations

NSW Parliament passes WHS Digital Work System Duty - Hamilton Locke

Under this Bill, a more streamlined ... This Workers Compensation Bill was ultimately amended to remove the provisions proposing a digital work system duty....

NSW Work Health and Safety law update: New Work Health and Safety Regulation 2025 commences, and Reform and Modernisation Bill introduced to Parliament | Global Workplace Insider

The proposed new duty under the ... to “ensure, so far as is reasonably practicable, that the allocation of work by or using the digital work system is without risks to the health and safety of any person”. Without ...

NSW Work Health and Safety law update | Australia | Global law firm | Norton Rose Fulbright

At the same time, the New South ... a new duty for PCBUs using digital work systems and expand the rights of WHS entry permit holders to inspect digital work platforms....

NSW digital systems bill threatens small businesses with impossible compliance trap

The Council of Small Business Organisations Australia (COSBOA) has condemned the Work Health and Safety Amendment (Digital Work Systems) Bill 2025, introduced in the NSW Parliament on 20 November 2025, warning it will considerably increase compliance obligations for small businesses and expose them to severe penalties. Matthew Addison, Chair, COSBOA says the Bill is a “trojan horse” that grants union officials with WHS entry permits unprecedented access to business digital systems, including platforms containing payroll data, customer lists, pricing algorithms, and operational strategies, with penalties for businesses that fail to provide “reasonable assistance”.

NSW becomes first Australian state to regulate digital safety risks in the workplace

The newly revised legislation will expand these powers by allowing permit holders, including union representatives, to require “reasonable assistance” to access and inspect digital work systems suspected of breaching WHS obligations.

Question: NSW WHS Amendment Digital Work Systems Bill 2025 online platform obligations


Interesting — that Hamilton Locke article from 14 hours ago says provisions were **removed**. Let me read that carefully.


- NSW Parliament passes WHS Digital Work System Duty - Hamilton Locke

[Skip to content](#content)

 [Sydney](../contact#sydney)[Melbourne](../contact#melbourne)[Brisbane](../contact#brisbane)[Perth](../contact#perth)[Newcastle](../contact#newcastle)[Auckland](../contact#auckland)-->

 https://hamiltonlocke.com.au

 [About Us](https://hamiltonlocke.com.au/about-us/)

	[Our Culture](https://hamiltonlocke.com.au/culture/)

- [Powerful Together with Source](https://sourceservices.com.au)

- [International Services](https://hamiltonlocke.com.au/services/international-services/)

- [Awards and Recognition](https://hamiltonlocke.com.au/?page_id=6615)

- [Community and Pro Bono](https://hamiltonlocke.com.au/community-and-pro-bono/)

- [Australian Growth Company Awards](https://hamiltonlocke.com.au/agca/)

- [Technology Scale-up Awards](https://hamiltonlocke.com.au/technology-scaleup-awards/)

- [Services](https://hamiltonlocke.com.au/services/)

	[Capital Markets](https://hamiltonlocke.com.au/services/capital-markets/)

- [Competition and Consumer Law](https://hamiltonlocke.com.au/services/competition-and-consumer-law/)

- [Corporate, M&A and Private Equity](https://hamiltonlocke.com.au/service-areas/corporate-ma-and-private-equity/)

- [Energy, Resources, Construction and Infrastructure](https://hamiltonlocke.com.au/services/erci/)

- [Environmental, Social and Governance](https://hamiltonlocke.com.au/services/esg/)

- [Finance](https://hamiltonlocke.com.au/services/finance/)

- [Funds and Financial Services](https://hamiltonlocke.com.au/services/funds-and-financial-services/)

- [IP and Technology](https://hamiltonlocke.com.au/services/ip-and-technology/)

- [Litigation and Dispute Resolution](https://hamiltonlocke.com.au/services/litigation-and-dispute-resolution/)

- [Property](https://hamiltonlocke.com.au/services/property/)

- [Restructuring and Insolvency](https://hamiltonlocke.com.au/services/restructuring-and-insolvency/)

- [Tax](https://hamiltonlocke.com.au/services/tax/)

- [Workplace and Safety](https://hamiltonlocke.com.au/services/workplace-and-safety/)

- [Sectors](https://hamiltonlocke.com.au/sectors/)

	[Financial Services](https://hamiltonlocke.com.au/sectors/financial-services/)

- [Food and Agribusiness](https://hamiltonlocke.com.au/sectors/food-and-agribusiness/)

- [Health Care and Education](https://hamiltonlocke.com.au/sectors/health-care-and-education/)

- [Mining and Resources](https://hamiltonlocke.com.au/sectors/mining-and-resources/)

- [New Energy and Carbon Markets](https://hamiltonlocke.com.au/sectors/new-energy-and-carbon-markets/)

- [Real Estate Markets](https://hamiltonlocke.com.au/sectors/real-estate-markets/)

- [Technology](https://hamiltonlocke.com.au/sectors/technology/)

- [Private Clients](https://hamiltonlocke.com.au/services/hamilton-locke-private/)

- [Our People](https://hamiltonlocke.com.au/our-team/)

- [News](https://hamiltonlocke.com.au/news-article/)

- [Work With Us](https://hamiltonlocke.com.au/careers/)

- [Contact](https://hamiltonlocke.com.au/contact-us/)

 Menu

- [About Us](https://hamiltonlocke.com.au/about-us/)

	[Our Culture](https://hamiltonlocke.com.au/culture/)

- [Powerful Together with Source](https://sourceservices.com.au)

- [International Services](https://hamiltonlocke.com.au/services/international-services/)

- [Awards and Recognition](https://hamiltonlocke.com.au/?page_id=6615)

- [Community and Pro Bono](https://hamiltonlocke.com.au/community-and-pro-bono/)

- [Australian Growth Company Awards](https://hamiltonlocke.com.au/agca/)

- [Technology Scale-up Awards](https://hamiltonlocke.com.au/technology-scaleup-awards/)

- [Services](https://hamiltonlocke.com.au/services/)

	[Capital Markets](https://hamiltonlocke.com.au/services/capital-markets/)

- [Competition and Consumer Law](https://hamiltonlocke.com.au/services/competition-and-consumer-law/)

- [Corporate, M&A and Private Equity](https://hamiltonlocke.com.au/service-areas/corporate-ma-and-private-equity/)

- [Energy, Resources, Construction and Infrastructure](https://hamiltonlocke.com.au/services/erci/)

- [Environmental, Social and Governance](https://hamiltonlocke.com.au/services/esg/)

- [Finance](https://hamiltonlocke.com.au/services/finance/)

- [Funds and Financial Services](https://hamiltonlocke.com.au/services/funds-and-financial-services/)

- [IP and Technology](https://hamiltonlocke.com.au/services/ip-and-technology/)

- [Litigation and Dispute Resolution](https://hamiltonlocke.com.au/services/litigation-and-dispute-resolution/)

- [Property](https://hamiltonlocke.com.au/services/property/)

- [Restructuring and Insolvency](https://hamiltonlocke.com.au/services/restructuring-and-insolvency/)

- [Tax](https://hamiltonlocke.com.au/services/tax/)

- [Workplace and Safety](https://hamiltonlocke.com.au/services/workplace-and-safety/)

- [Sectors](https://hamiltonlocke.com.au/sectors/)

	[Financial Services](https://hamiltonlocke.com.au/sectors/financial-services/)

- [Food and Agribusiness](https://hamiltonlocke.com.au/sectors/food-and-agribusiness/)

- [Health Care and Education](https://hamiltonlocke.com.au/sectors/health-care-and-education/)

- [Mining and Resources](https://hamiltonlocke.com.au/sectors/mining-and-resources/)

- [New Energy and Carbon Markets](https://hamiltonlocke.com.au/sectors/new-energy-and-carbon-markets/)

- [Real Estate Markets](https://hamiltonlocke.com.au/sectors/real-estate-markets/)

- [Technology](https://hamiltonlocke.com.au/sectors/technology/)

- [Private Clients](https://hamiltonlocke.com.au/services/hamilton-locke-private/)

- [Our People](https://hamiltonlocke.com.au/our-team/)

- [News](https://hamiltonlocke.com.au/news-article/)

- [Work With Us](https://hamiltonlocke.com.au/careers/)

- [Contact](https://hamiltonlocke.com.au/contact-us/)

- [About Us](https://hamiltonlocke.com.au/about-us/)

 [About](https://hamiltonlocke.com.au/about-us/)

 [Our Culture](https://hamiltonlocke.com.au/culture/)

 [Community and Pro Bono](https://hamiltonlocke.com.au/community-and-pro-bono/)

 [Australian Growth Company Awards](https://hamiltonlocke.com.au/agca/)

 [Technology Scale-Up Awards](https://hamiltonlocke.com.au/technology-scaleup-awards/)

- [Services](https://hamiltonlocke.com.au/services/)

 [Capital Markets](https://hamiltonlocke.com.au/services/capital-markets/)

 [Competition and Consumer](https://hamiltonlocke.com.au/services/competition-and-consumer-law/%20)

 [Corporate, M&A and Private Equity](https://hamiltonlocke.com.au/services/corporate-ma-and-private-equity/)

 [Energy, Resources, Constructionand Infrastructure](https://hamiltonlocke.com.au/services/erci/)

 [Environmental, Social and Governance (ESG)](https://hamiltonlocke.com.au/services/esg/)

 [Finance](https://hamiltonlocke.com.au/services/finance/)

 [Funds and Financial Services](https://hamiltonlocke.com.au/services/funds-and-financial-services/)

 [International Services](https://hamiltonlocke.com.au/services/international-services/)

 [IP and Technology](https://hamiltonlocke.com.au/services/ip-and-technology/)

 [Litigation and Dispute Resolution](https://hamiltonlocke.com.au/services/litigation-and-dispute-resolution/)

 [Property](https://hamiltonlocke.com.au/services/property/)

 [Restructuring and Insolvency](https://hamiltonlocke.com.au/services/restructuring-and-insolvency/)

 [Tax](https://hamiltonlocke.com.au/services/tax/)

 [Workplace and Safety](https://hamiltonlocke.com.au/services/workplace-and-safety/)

- [Sectors](https://hamiltonlocke.com.au/sectors/)

 [Financial Services](https://hamiltonlocke.com.au/sectors/financial-services/)

 [Food and Agribusiness](https://hamiltonlocke.com.au/sectors/food-and-agribusiness/)

 [Health, Care and Education](https://hamiltonlocke.com.au/sectors/health-care-and-education/)

 [Mining and Resources](https://hamiltonlocke.com.au/sectors/mining-and-resources/)

 [New Energy and Carbon Markets](https://hamiltonlocke.com.au/sectors/new-energy-and-carbon-markets/)

 [R


The New South Wales (NSW) government has passed new legislation in response to growing concerns about the safety risks associated with algorithmic and automated decision-making in the workplace, creating major compliance implications for businesses in the state.

The Work Health and Safety Amendment (Digital Work Systems) Bill 2025 was endorsed by the Legislative Assembly on 12 February 2026, after it had passed the Legislative Council, with amendments, earlier that same day. It amends the Work Health and Safety Act 2011 (NSW) (the Act), implementing significant amendments to the existing laws regulating the use of digital work systems by expressly regulating the health and safety impacts of digital work systems.

Digital work systems are defined to include any algorithm, artificial intelligence, automation or online platform, reflecting the increasing reliance on digitally assisted work allocation, monitoring and performance management in the workplace.

The amendments include a newly inserted provision which will create an additional primary duty of care for businesses to ensure that the health and safety of workers is not put at risk from the use of digital work systems in a business or undertaking. The amendments include considerations of certain risks that a person conducting a business or undertaking (PCBUs) must consider when utilising a digital work system, including:

- excessive or unreasonable workloads for workers at work in the business or undertaking;

- the use of excessive or unreasonable metrics to assess and track the performance of workers at work in the business or undertaking;

- excessive or unreasonable monitoring or surveillance of workers at work in the business or undertaking; and

- discriminatory practices or decision-making in the conduct of the business or undertaking.

Under existing WHS laws, inspectors, unions and other permit holders may enter workplaces to inquire into suspected contraventions of the Act. The newly revised legislation will expand these powers by allowing permit holders, including union representatives, to require “reasonable assistance” to access and inspect digital work systems suspected of breaching WHS obligations.

In practice, this would mean: “allowing the permit holder to access and inspect the system or providing an explanation of how the system functions so that the permit holder can meaningfully carry out the inspection. This amendment is important because individual workers often do not have visibility of how digital work systems operate or the awareness or opportunity to identify risks embedded within them,” according to the second reading of the speech.

This will include access to system data, explanations of system logic, and demonstrations of how work is allocated or monitored. In essence, it will require clarity about algorithmic management.

Only individuals who hold authorised WHS entry permits can conduct an inspection of a digital work system. While the legislation has not changed how union representatives or other possible holders can access a permit, it does significantly expand what union representatives can lawfully do when on the premises. For businesses who have previously encountered difficulties with unions and managing right of entry laws, this development adds a new layer of legal complexity. The expanded powers could lead to greater scrutiny, more frequent entry requests, and disputes over what systems should be reasonably accessed.

Prior to the passing of the legislation, these expanded powers were fiercely criticised by the opposition, with the NSW shadow treasurer Scott Farlow claiming the it is handing “unprecedented new powers to union officials to access information they have no right to access during an era of increased concern over data privacy”, and that it would provide unions with new rights under the guise of ‘digital safety’. The opposition's criticism includes that the legislation is breathtakingly broad, capturing almost every modern workplace in NSW, and is out of step with the national work health safety regime. In other words, if you use a computer, you are caught in the crosshair.

Key stakeholders such as the Australian Institute for Health and Safety (AIHS) had also previously joined calls for the NSW government to shelve the proposed duty. The AIHS claimed that it fails to recognise that “risks such as fatigue and psychological injury remains constant whether a task is designed by a human or a machine.” As such, the legislation is flawed in that it treats digital systems as posing a unique hazard, according to the AIHS.

Businesses should be aware of union officials utilising these expanded powers as a way to seek access to workplace premises or to partake in a fishing expedition. Frontline managers may find themselves increasingly accommodating complex requests to systems, possibly disrupting operations should they need to be accessed on the fly. A business’s refusal to assist an entry permit holder can result in a maximum A$66,770 (approx. US$46,511) fine for a corporation, or a A$13,310 fine for an individual.

However, the powers of an entry permit holder will be subject to guidelines made by the regulator, Safe Work NSW, which will be required to issue and publish guidelines on their website. Under amendments implemented by the Legislative Council, permit holders will be unable to exercise these new powers until at least a month after SafeWork NSW publishes their guidelines, to be developed following public consultation. Permit holders must provide businesses with 48 hours’ notice before seeking to exercise the new powers.

NSW is now the first state in Australia to address the safety risks posed to workers by digital work systems.

### What do these amendments mean for organisations?

The amendments place a new level of scrutiny on the technologies that organisations use within the workplace. Businesses must continually review and monitor the digital tools they use, particularly those involved in work allocation, rostering, monitoring, or productivity assessment. Examples of systems likely to be captured include:

- automated shift allocation tools;

- workflow allocation engines;

- AI-driven productivity scoring systems; and

- monitoring software that tracks keystrokes, task completion speed, or call handling time.

This wide definition of a digital work system means that even commonplace HR systems, scheduling software and management platforms fall within the scope of the Bill. Accordingly, PCBUs will therefore need to audit the digital systems currently in use, identify where work is being influenced or allocated by algorithms, and consider whether these systems could contribute to psychosocial risks.

A major challenge for businesses will be interpreting what amounts to “excessive or unreasonable workloads” or “excessive monitoring and metrics” or the requirement for businesses to provide “reasonable assistance” to entry permit holders. These concepts are inherently broad and ambiguous, and may vary across industries, roles and workforce demographics. Businesses should expect SafeWork NSW to take a precautionary approach, especially where digital systems lack transparency or where workers have limited ability to challenge or understand automated decisions.

To prepare for the new requirements, businesses should consider implementing the following measures:

- identify the digital work systems that are currently in place, and assess how you can reasonably respond to and provide access to union requests;

- ensure there is human oversight on the usage of digital work systems – while these systems may certainly be useful in terms of efficiency, human oversight is essential in minimising psychosocial safety risks that may occur;

- conduct a risk assessment by reviewing what systems are already in place and whether these are at risk of harming workers;

- consult with workers about levels of burnout, anxiety or fatigue associated with


Now I have a thorough understanding. Let me also check the Hamilton Locke article more carefully — the snippet mentioned something about provisions being **removed**. Let me fetch the actual article content past the navigation.


NSW Parliament passes WHS Digital Work System Duty - Hamilton Locke

Skip to content

 SydneyMelbourneBrisbanePerthNewcastleAuckland-->

 https://hamiltonlocke.com.au

 About Us

	Our Culture
Powerful Together with Source
International Services
Awards and Recognition
Community and Pro Bono
Australian Growth Company Awards
Technology Scale-up Awards
Services

	Capital Markets
Competition and Consumer Law
Corporate, M&A and Private Equity
Energy, Resources, Construction and Infrastructure
Environmental, Social and Governance
Finance
Funds and Financial Services
IP and Technology
Litigation and Dispute Resolution
Property
Restructuring and Insolvency
Tax
Workplace and Safety
Sectors

	Financial Services
Food and Agribusiness
Health Care and Education
Mining and Resources
New Energy and Carbon Markets
Real Estate Markets
Technology
Private Clients
Our People
News
Work With Us
Contact

 Menu
About Us

	Our Culture
Powerful Together with Source
International Services
Awards and Recognition
Community and Pro Bono
Australian Growth Company Awards
Technology Scale-up Awards
Services

	Capital Markets
Competition and Consumer Law
Corporate, M&A and Private Equity
Energy, Resources, Construction and Infrastructure
Environmental, Social and Governance
Finance
Funds and Financial Services
IP and Technology
Litigation and Dispute Resolution
Property
Restructuring and Insolvency
Tax
Workplace and Safety
Sectors

	Financial Services
Food and Agribusiness
Health Care and Education
Mining and Resources
New Energy and Carbon Markets
Real Estate Markets
Technology
Private Clients
Our People
News
Work With Us
Contact
About Us

 About

 Our Culture

 Community and Pro Bono

 Australian Growth Company Awards

 Technology Scale-Up Awards
Services

 Capital Markets

 Competition and Consumer

 Corporate, M&A and Private Equity

 Energy, Resources, Constructionand Infrastructure

 Environmental, Social and Governance (ESG)

 Finance

 Funds and Financial Services

 International Services

 IP and Technology

 Litigation and Dispute Resolution

 Property

 Restructuring and Insolvency

 Tax

 Workplace and Safety
Sectors

 Financial Services

 Food and Agribusiness

 Health, Care and Education

 Mining and Resources

 New Energy and Carbon Markets

 Real Estate Markets

 Technology

 Telecommunications
Private Clients
Our People
News
Work With Us
Contact

 #

 #

 https://hamiltonlocke.com.au

 Search ...

 Results

 See all results
News

NSW Parliament passes WHS Digital Work System Duty
18/02/2026

Key Takeaways
The NSW Parliament has passed the Work Health and Safety Amendment (Digital Work Systems) Bill 2026. This is the first time that digital work systems have been directly addressed in Australian WHS Law.
The reforms have not yet taken effect and will largely commence on a yet-to-be-announced date or dates, to be appointed by proclamation.
Digital work system is defined broadly under the reform as “an algorithm, artificial intelligence, automation or online platform“.
The reforms, once commenced, will introduce a new s 21A duty to the Work Health and Safety Act 2011 (NSW) requiring PCBUs to ensure worker health and safety is not put at risk from the allocation of work by digital work systems. The reforms also specifically address WHS Entry Permit Powers in relation to Digital Work Systems.
We recommend closely reviewing existing digital work systems and considering any risks arising from the allocation of work using digital work systems.

On 12 February 2026, the NSW Parliament passed the Work Health and Safety Amendment (Digital Work Systems) Bill 2026 (Digital Duty Bill), representing a shift in how technology is regulated under Work Health and Safety (WHS) Law. The Digital Duty Bill is the first time that digital work systems used to allocate work are targeted by specific WHS duties in Australia.

The reforms are responding to recent reports of abuse related to artificial intelligence and digital work systems, especially in the gig economy. These reports claim that companies have been using these technologies to allocate work excessively or to favour workers who are on longer shifts. The wording of the reforms does not target a specific sector and applies to all persons conducting a business or undertaking (PCBUs).

What this means for you

The passing of the Digital Duty Bill ushers in a new phase of safety regulations, as governments, regulators and stakeholders struggle to keep up with emerging digital technologies that are changing how work is allocated, monitored and rewarded. While risks associated with digital work systems have always been captured by the primary duty of the WHS Act, the reform provides greater focus and attention to the risks arising from their implementation.

While the reforms have not yet taken effect, we recommend taking this time to review any digital work systems currently in place for allocating work and developing processes to manage the likely increased regulatory and union interest in this area.

This could involve conducting a safety impact assessment of currently implemented and any proposed digital work systems, such as workforce management software, performance monitoring tools, rostering systems, productivity tracking applications, and AI-driven decision-making platforms. This assessment should focus on the four risk categories identified in the Digital Duty Bill: workload allocation, performance metrics, surveillance and monitoring, and discrimination.

Finally, it is also likely that the passage of the Digital Duty Bill will start a broader process of debate and law reform in other jurisdictions. We will continue to closely monitor this space.

History

The adoption of digital work systems to manage the allocation of work has been the subject of attention by legislators, unions and academics for some time now.

Overseas, companies have faced scrutiny by regulators for excessive surveillance of their workers. In late 2023, Amazon was fined €32,000,000 in France for “excessive” surveillance of its workers. In this matter, breaches of the European Union’s (EU) General Data Protection Regulation were found, including a system that monitored employee activity and generated alerts relating to the speed of workers completing tasks, along with break times.[[1]](#_ftn1)

In 2024, the EU passed the Platform Work Directive (EU Directive 2024/2831 on Improving Working Conditions in Platform Work). The Platform Work Directive requires digital labour platforms to:[[2]](#_ftn2)
evaluate the risks of automated monitoring systems and automated decision-making systems to their safety and health, in particular as regards possible risks of work-related accidents, psychosocial and ergonomic risks;
assess whether the safeguards of those systems are appropriate for the risks identified in view of the specific characteristics of the work environment;
introduce appropriate preventive and protective measures.

The Digital Duty Bill’s origin in NSW can be traced back to the Legislative Council’s Select Committee on the Impact of Technological and Other Change on the Future of Work and Workers in New South Wales Final Report, released in 2022, which found that:

“[The] committee considers that work health and safety laws should reflect the uptake of automated processes in workplaces, particularly where those technologies are being used to allocate work. We recommend that the government consider amending work health and safety laws to regulate the allocation of work via software/platforms/code/algorithms/apps to ensure worker safety, appropriate workloads, compliance with industrial instruments, non-discriminatory practices, and a fair and equitable distribution of work”[[3]](#_ftn3)

The first digital duty proposed in legislation before the NSW Parliament was an amendment proposed by the NSW Greens on 25 June 2025 in the Legislative Council to the Industrial Relations and Other Legislation Amendment (Workplace Protections) Bill 2025, which was unsuccessfully moved.

Following the defeat of the Greens Bill, on 5 August 2025, the NSW Government subsequently included a proposed duty on PCBUs involving digital work systems in the Workers Compensation Legislation Amendment (Reform and Modernisation) Bill 2025 (Workers Compensation Bill). Under this Bill, a more streamlined version of the Greens Bill’s duty was proposed, and “digital work system” was defined as “means an algorithm, artificial intelligence, automation, online platform or software”. This Workers Compensation Bill was ultimately amended to remove the provisions proposing a digital work system duty.

On 19 November 2025, the standalone Digital Duty Bill was introduced to the Legislative Assembly. Of note, the definition of “digital work system” was slightly amended from the Workers Compensation Bill definition, by removing ‘software’ and also limiting the scope of the new duty under s 21A to ‘workers’ rather than ‘any person’. In the second reading speech for the Digital Duty Bill, Minister Sophie Cotsis explained that:

“As digital systems increasingly shape how work is organised, these risks cannot be left unexamined or unmanaged. This proposed duty reflects the reality that harm does not arise from the technology itself but from how digital work systems are designed, deployed and managed in practice. The amendment ensures that PCBUs take active steps to ensure that digital work systems are implemented safely and responsibly, with worker protection front of mind. This is not about stifling innovation. This does not limit or restrict the digital work systems that a PCBU can implement. This duty requires the PCBU to consider the potential impacts of the digital work system on its workers and ensure there is a proper risk assessment and appropriate controls in place to protect worker health and safety as far as reasonably practicable.”

As stated above, the Digital Duty Bill marks the first time that a specific duty of care targeting digital work systems has been adopted in Australia.

Digital Duty Bill in focus

We set out below the key reforms that the Digital Duty Bill will introduce:

New Digital Work System Duty

The Digital Duty Bill will introduce a new duty into s 21A of the Work Health and Safety Act 2011 (NSW) (WHS Act), requiring a PCBU to ensure that the health and safety of workers is not put at risk by the business or undertaking’s use of digital work systems.

The Digital Duty Bill defines a “digital work system” as “an algorithm, artificial intelligence, automation or online platform“.

The new digital work system duty under s 21A sets out considerations for PCBUs allocating work using digital work systems, including:
Excessive or unreasonable workloads – excessive or unreasonable workloads for workers at work in the business or undertaking;
Excessive or unreasonable performance metrics – the use of excessive or unreasonable metrics to assess and track the performance of workers at work in the business or undertaking;
Excessive or unreasonable monitoring and surveillance – excessive or unreasonable monitoring or surveillance of workers at work in the business or undertaking; and
Discrimination – unlawful discriminatory practices or decision-making in the conduct of the business or undertaking.

As with other WHS duties, such as the Primary Duty under s 19 of the WHS Act, a breach of the Digital Work System Duty will expose PCBUs to liability under the WHS Act. This includes a maximum monetary penalty of $11,150,183 for category 1 breaches of WHS duties by a PCBU.

The Digital Duty Bill also adds to the Primary Duty under the WHS Act, adding to the (non-exhaustive) list of matters that a PCBU must ensure, so far as is reasonably practicable, to include that “the health and safety of workers is not put at risk from the use of digital work systems by the business or undertaking”.

WHS Entry Permit powers

Section 118(1)(a1) allows a WHS Entry Permit holder to require the relevant person conducting a busi


Now I have a comprehensive picture. Let me complete the compliance analysis, write it up, ACK the message, and respond to Radar.

write

# Harper Daily Log — 2025-07-14

## NSW Digital Work Systems Bill — Compliance Review (Radar msg-1771435306778)

### What Happened
Radar flagged the NSW WHS Amendment (Digital Work Systems) Bill 2025, passed 12 Feb 2026. Asked: does this apply to RateRight as a marketplace platform with independent contractors?

### My Analysis
Researched via Pinsent Masons, Hamilton Locke, COSBOA, Norton Rose Fulbright.

**Key facts:**
- Bill passed Legislative Assembly 12 Feb 2026 — now law but NOT YET IN EFFECT
- Commencement date TBD (by proclamation) — could be months away
- SafeWork NSW must publish guidelines first; permit holders can't exercise new powers until 1 month after guidelines published
- "Digital work system" = algorithm, AI, automation, or online platform
- New s21A duty: PCBUs must ensure worker H&S not put at risk from digital work system use
- Four risk categories: excessive workloads, excessive metrics, excessive monitoring, discrimination
- Union entry permit holders get expanded powers to inspect digital systems (48hr notice required)
- Maximum penalties: $11.15M (cat 1 PCBU breach), $66,770 (refusing to assist permit holder)

**RateRight-specific assessment:**
1. **"Online platform" definition:** RateRight's matching algorithm is captured by the broad definition
2. **PCBU question:** RateRight is a PCBU. But the duty relates to "workers at work in the business or undertaking" — RateRight's users are independent contractors, not RateRight's workers
3. **Contractor vs worker:** The duty under s21A is owed to "workers" — defined under WHS Act s7 as employees, contractors, or subcontractors who carry out work "for" the PCBU. Construction tradies using RateRight to find work are NOT working "for" RateRight — they're using a marketplace to find their own clients
4. **Key distinction:** RateRight connects hirers with tradies. It doesn't allocate work TO workers (like Uber allocating rides). Hirers select tradies; tradies choose whether to accept
5. **Union inspection powers:** Only relevant if RateRight has its own workers subject to digital systems — currently Michael + AI agents only (no human employees)

**Risk rating: LOW (at current scale)**
- RateRight is a marketplace, not an employer or labour hire firm
- No workers are "at work in the business" who are subject to algorithmic work allocation
- The Bill targets gig economy platforms that control how work is allocated TO workers (e.g., Uber, Amazon warehouses)
- RateRight matches, it doesn't allocate or direct

**Future considerations (when scaling):**
- If RateRight ever employs human staff and uses digital systems to manage them → duty applies
- If RateRight's algorithm starts directing/prioritising which tradies get shown to hirers in ways that create unreasonable workload disparities → grey area
- If RateRight adds performance metrics, monitoring, or surveillance features → review needed
- Watch for other states adopting similar legislation (federal harmonisation likely)

**Action: No compliance action needed now. Monitor commencement date and SafeWork NSW guidelines when published.**

Sent analysis back to Radar. ACK'd the message.


Successfully wrote 3152 bytes to /home/ccuser/harper/memory/2025-07-14.md


exec

node /home/ccuser/shared/scripts/inbox.js ack --agent harper --id msg-1771435306778-9d0cd3 2>/dev/null

node /home/ccuser/shared/scripts/inbox.js send --from harper --to radar --subject "RE: NSW Digital Work Systems Bill — RateRight LOW risk" --body "Reviewed the Bill in detail (Pinsent Masons, Hamilton Locke, Norton Rose Fulbright sources). Assessment: LOW risk for RateRight at current scale. Key reasons: (1) The s21A duty applies to 'workers at work in the business' — RateRight's tradies are independent contractors finding their own clients via a marketplace, not workers directed by RateRight's algorithm. (2) RateRight matches, it doesn't allocate work TO workers the way Uber/Amazon do. (3) No human employees currently subject to digital work allocation. (4) Bill passed but NOT YET IN EFFECT — commencement TBD by proclamation, SafeWork NSW must publish guidelines first. Future watch items: if we add performance metrics/monitoring for tradies, or if algorithm starts directing/prioritising work allocation rather than matching, compliance review needed. Also watch for federal harmonisation. No action required now. Full analysis in my memory/2025-07-14.md." 2>/dev/null


✅ Acked msg-1771435306778-9d0cd3 for harper


✉  Sent msg-1771435913788-cb55e0 → radar: RE: NSW Digital Work Systems Bill — RateRight LOW risk


Now update status and write status.json.

node /home/ccuser/shared/scripts/fleet-update.js harper --status active --task "Completed NSW Digital Work Systems Bill compliance review — LOW risk for RateRight. Responded to Radar." 2>/dev/null


✅ Fleet state updated (cycle 1115)


Successfully wrote 263 bytes to /home/ccuser/harper/status.json


Processed Radar's inbox message — the NSW WHS Amendment (Digital Work Systems) Bill 2025 compliance review.

**Summary:** The Bill passed 12 Feb 2026 but is **not yet in effect** (commencement TBD). It creates a new duty for PCBUs using digital work systems (algorithms, AI, online platforms) to ensure worker health and safety isn't put at risk.

**RateRight risk: LOW.** The s21A duty applies to "workers at work in the business" — construction tradies using RateRight are independent contractors finding their own clients via a marketplace, not workers whose work is allocated by RateRight's algorithm. RateRight matches; it doesn't direct. No human employees currently subject to digital work allocation. No compliance action needed now.

**Watch items:** Monitor commencement date, SafeWork NSW guidelines, and federal harmonisation. If RateRight ever adds performance metrics/monitoring for tradies or shifts from matching to directing work allocation, a fresh review is needed.

Analysis logged to memory. Response sent to Radar.


Read HEARTBEAT.md if it exists (workspace context). Follow it strictly. Do not infer or repeat old tasks from prior chats. If nothing needs attention, reply HEARTBEAT_OK.


Heartbeat cycle. Follow protocol strictly.

exec

node /home/ccuser/shared/scripts/inbox.js read --agent harper --unread 2>/dev/null

node /home/ccuser/shared/scripts/fleet-cli.js briefing harper --brief 2>/dev/null


📭 harper: No unread messages


BAS Preparation — Due Feb 28

R&D Tax Incentive research

Monthly cost tracking — February

NSW small business grants scan


Inbox empty. No new tasks from Rivet. All queue items complete. No blocked agents, no decisions needed.


✅ Fleet state updated (cycle 1123)


Successfully wrote 200 bytes to /home/ccuser/harper/status.json


Inbox empty. No new tasks. No blocked agents. No decisions needed. All queue items remain complete.


✅ Fleet state updated (cycle 1132)


Inbox empty. No new tasks. All clear.


✅ Fleet state updated (cycle 1140)


✅ Fleet state updated (cycle 1148)


📬 harper: 2 message(s) (unread):

📩 [msg-1771443457191-906414] from:builder 2026-02-18T19:37:37.191Z
   URGENT: SMS Legal Requirements — Opt-Out Language
   Rocky wants to know: what's legally required at the bottom of outbound SMS/text messages in Australia? Things like STOP to unsubscribe, company address, ABN, etc. Is opt-out language legally mandatory...

📩 [msg-1771443673775-04f97a] from:susan 2026-02-18T19:41:13.775Z
   SMS compliance requirements — what exactly do we need?
   Builder told me you're researching Australian Spam Act requirements for our outbound SMS. I've done preliminary research (ACMA guidance) and drafted compliance notes at susan/drafts/sms-compliance-not...


Two unread messages — Builder and Susan both asking about SMS legal requirements. Let me get the full messages and research this.


URGENT: SMS Legal Requirements — Opt-Out Language

Rocky wants to know: what's legally required at the bottom of outbound SMS/text messages in Australia? Things like STOP to unsubscribe, company address, ABN, etc. Is opt-out language legally mandatory for commercial messages? Please research Australian Spam Act 2003 and any ACMA requirements for commercial electronic messages. Reply back with the exact requirements so we can make sure Susan includes them in all outbound messages.


SMS compliance requirements — what exactly do we need?

Builder told me you're researching Australian Spam Act requirements for our outbound SMS. I've done preliminary research (ACMA guidance) and drafted compliance notes at susan/drafts/sms-compliance-notes.md. Key questions: (1) Does cold introductory SMS to a business count as a CEM? (2) Any B2B exemption applicable? (3) Do we need ABN in messages? (4) State-level requirements? I've pre-drafted a footer 'RateRight | Reply STOP to opt out' — please confirm if that covers it or if we need more. All templates are on hold until you confirm.


# SMS Compliance — Australian Spam Act 2003 (ACMA)
**Created:** 2026-02-19
**Status:** Provisional — awaiting Harper's confirmation of exact requirements
**Source:** ACMA "Avoid sending spam" page + Spam Act 2003

---

## Three Requirements for Commercial SMS

### 1. Consent
- **Express consent** (best): Person explicitly agreed to receive marketing (form, tick box, verbal)
- **Inferred consent**: Existing business relationship where marketing is directly related
- ⚠ Cold SMS to leads who haven't opted in = technically non-compliant
- **Our situation:** Most leads are cold — no prior consent. Need to consider:
  - First contact SMS may fall under "enquiry" rather than "marketing" (grey area)
  - Best practice: get express consent ASAP (e.g., "Reply YES to hear more")
  - Harper should clarify if our cold outreach SMS counts as "commercial electronic message"

### 2. Sender Identification
- Must clearly identify who sent the message
- Include business name and contact details
- Cannot use misleading sender info

### 3. Opt-Out / Unsubscribe
- Every commercial message MUST include a way to unsubscribe
- Must be **free or low-cost** to action
- Must be **functional for at least 30 days** after sending
- Must NOT require personal info or account creation to opt-out
- Must action opt-out requests **within 5 business days**
- Standard: "Reply STOP to opt out"

---

## Recommended SMS Footer
```
RateRight | Reply STOP to opt out
```
- 35 characters including spaces
- Identifies business (Spam Act requirement 2)
- Provides opt-out (Spam Act requirement 3)

### Alternative (shorter):
```
- Susan, RateRight. STOP to opt out
```

---

## Impact on Templates
All SMS templates need ~35 extra characters. Some 1-SMS messages may become 2-SMS.
Updated character counts needed.

---

## Questions for Harper
1. Does a cold introductory SMS to a business (not individual consumer) count as a CEM under the Spam Act?
2. Is the B2B exemption applicable? (Spam Act has limited B2B exemptions for certain messages)
3. Do we need ABN in the message?
4. Any state-level requirements beyond federal Spam Act?

---

*Awaiting Harper's legal confirmation before finalising templates.*


Good — Susan has done solid preliminary work. Let me research the specific questions and provide a definitive answer.

Question: Australian Spam Act 2003 commercial electronic message SMS requirements ACMA B2B exemption

Question: ACMA Spam Act cold SMS business to business exemption commercial electronic message definition


Question: Australian Spam Act 2003 commercial electronic message SMS requirements ACMA B2B exemption

Spam Act 2003 - Federal Register of Legislation

We acknowledge the traditional owners and custodians of country throughout Australia and acknowledge their continuing connection to land, waters and community

Avoid sending spam | ACMA

Under the Spam Act, every commercial message must contain an 'unsubscribe' option that: ... does not require the person to give extra personal information or log in to, or create, an account to unsubscribe from marketing messages. Tip: Remember that if you are using an alphanumeric message ...

Email and SMS unsubscribe rules Are you sending the ...

The spam laws apply to commercial electronic messages, such as SMS and email marketing. If your message offers, advertises or promotes a product or service, it must comply with spam · laws. Sometimes, this might be just one part of the message, but it is still commercial. Marketing messages must generally include a way for the recipient to unsubscribe or opt-out of ... Australia’s spam laws are set out in the Spam Act 2003.

Navigating the new ACMA SMS rules in Australia Australia

The Australian Communications and Media Authority (ACMA) has the Spam Act 2003, which requires explicit consent, clear sender identification, and a simple, low-cost opt-out in every message.

Spam Act 2003 (Commonwealth) Legal Compliance Education and Awareness

Education and Awareness · Spam is any unsolicited Commercial Electronic Message sent by email, SMS,

Question: Australian Spam Act 2003 commercial electronic message SMS requirements ACMA B2B exemption

Avoid sending spam | ACMA


Question: ACMA Spam Act cold SMS business to business exemption commercial electronic message definition

Avoid sending spam | ACMA

The ACMA cranks up enforcement: do your "factual" ... | Clayton Utz

To comply with the Spam Act, businesses must ensure that their commercial electronic messages are: ... include a working unsubscribe facility that removes recipients from mailing lists within 5 business days.

ACMA Spam Act enforcement and the implications for business - Corrs Chambers Westgarth

First, it is critical that businesses ... broadly to include any electronic message that offers, advertises or promotes goods or services, or advertises or promotes a provider of goods or services, in any way....

The spam laws apply to commercial electronic messages, such as SMS and email marketing. If your message offers, advertises or promotes a product or service, it must comply with spam · laws. Sometimes, this might be just one part of the message, but it is still commercial. Marketing messages must generally include a way for the recipient to unsubscribe or opt-out of ... Australia’s spam laws are set out in the Spam Act ...

Dealing with spam | ACMA

Spam rules only apply to commercial electronic messages – those that offer, advertise or promote goods or services. An email or SMS seeking to influence your vote or opinion is rarely covered by these rules – they do not need your consent to send it, and do not need to include an unsubscribe.

Question: ACMA Spam Act cold SMS business to business exemption commercial electronic message definition

Avoid sending spam | ACMA

Dealing with spam | ACMA


Avoid sending spam | ACMA

## Get consent

 There are two types of consent:

- express

- inferred

### Express consent

A person who gives express consent knows and accepts that they will receive marketing emails or messages from you. This is best practice when it comes to consent.

People can give express consent by one of the following:

- filling in a form

- ticking a box on a website

- over the phone

- face to face

You cannot send an electronic message to ask for consent, because this is a marketing message.

Keep a record when a person gives express consent, including who gave the consent, when and how.

Under the Spam Act, it's up to you to prove that you have a person's consent.

### Inferred consent

In some circumstances, you may infer that you have consent to send marketing messages if the recipient has knowingly and directly given their address and it is reasonable to believe they would expect to receive marketing from your business.

This is usually when a person has a provable, ongoing relationship with your business, and the marketing is directly related to that relationship.

For example, if someone has subscribed to a service, has an account or is a member, and the marketing is directly relevant to the relationship – such as a person’s savings bank telling them about another savings account with higher interest. It would not cover the bank trying to sell them insurance products.

It does not cover sending messages after someone has just bought something from your business.

Inferred consent is not as reliable as getting someone’s express consent.

### Know your responsibilities for email lists

Take care when you buy or use a marketing list.

You are still responsible for making sure you have consent for any addresses you use.

Avoid sending spam | ACMA


%PDF-1.7
%����
13 0 obj
<</Linearized 1/L 103049/O 15/E 96398/N 1/T 102739/H [ 552 223]>>
endobj

39 0 obj
<</DecodeParms<</Columns 4/Predictor 12>>/Filter/FlateDecode/ID[<05323B25CC68F34498F77A0AA077AAD9><F47EB5ED818B8D42A063CE358DB6F97A>]/Index[13 60]/Info 12 0 R/Length 112/Prev 102740/Root 14 0 R/Size 73/Type/XRef/W[1 2 1]>>stream
h�bbd``b`�$���`W[�w$��L<@���:R�H0�	�; ��@�eH�$+b��5��X�@D3H]3��3@�3#��)�I�!@����
endstream
endobj
startxref
0
%%EOF

72 0 obj
<</Filter/FlateDecode/I 176/Length 130/O 160/S 38/T 118>>stream
h�b``�```Z����X�ɀ
������f,_�V� �mg`=�6�]����V�c�6��w9B՘���v3|�?���2ܝ���7����*j�V�}������4T�������O��
endstream
endobj
14 0 obj
<</Lang(en-US)/Metadata 5 0 R/Outlines 10 0 R/Pages 11 0 R/Type/Catalog/ViewerPreferences<</Direction/L2R>>>>
endobj
15 0 obj
<</Annots 40 0 R/ArtBox[0.0 0.0 595.276 841.89]/BleedBox[0.0 0.0 595.276 841.89]/Contents 17 0 R/CropBox[0.0 0.0 595.276 841.89]/MediaBox[0.0 0.0 595.276 841.89]/Parent 11 0 R/PieceInfo<</InDesign<</DocumentID(��xmp.did:6f0ed7a4-2884-e545-bc0e-a77016f693c3)/LastModified(��D:20220808064900Z)/NumberOfPageItemsInPage 8/NumberofPages 1/OriginalDocumentID(��xmp.did:F77F117407206811822AF047FA4FA039)/PageItemUIDToLocationDataMap<</0[11219.0 0.0 3.0 431.198 -362.499 505.727 -340.506 1.0 0.0 0.0 1.0 498.63 -295.067]/1[11242.0 1.0 3.0 429.586 -254.783 504.115 -232.79 1.0 0.0 0.0 1.0 497.019 -187.351]/2[11298.0 2.0 3.0 358.72 -96.9947 388.238 -91.0021 1.0 0.0 0.0 1.0 413.383 -44.8694]/3[11321.0 3.0 3.0 358.72 -80.1483 388.238 -74.1557 1.0 0.0 0.0 1.0 413.383 -30.9195]/4[11344.0 4.0 3.0 358.72 -44.6991 388.238 -38.7065 1.0 0.0 0.0 1.0 413.383 -1.56537]/5[11367.0 5.0 3.0 397.866 -32.2943 473.683 -9.92126 1.0 0.0 0.0 1.0 466.464 36.3034]/6[11390.0 6.0 3.0 480.34 -32.2943 556.156 -9.92126 1.0 0.0 0.0 1.0 548.937 36.3034]/7[11413.0 7.0 3.0 564.813 -32.2943 640.63 -9.92126 1.0 0.0 0.0 1.0 633.411 36.3034]>>/PageTransformationMatrixList<</0[1.0 0.0 0.0 1.0 0.0 0.0]>>/PageUIDList<</0 199>>/PageWidthList<</0 595.276>>>>>>/Resources<</ColorSpace<</CS0 43 0 R>>/ExtGState<</GS0 44 0 R/GS1 45 0 R>>/Font<</T1_0 48 0 R/T1_1 50 0 R/T1_2 52 0 R/T1_3 54 0 R/T1_4 56 0 R/T1_5 58 0 R>>/ProcSet[/PDF/Text]/XObject<</Fm0 38 0 R>>>>/Rotate 0/Tabs/W/Thumb 4 0 R/TrimBox[0.0 0.0 595.276 841.89]/Type/Page>>
endobj
16 0 obj
<</Filter/FlateDecode/First 244/Length 1730/N 32/Type/ObjStm>>stream
h޼Xms�6�+��΍�x��M'3�ǾZvc�M[�?�,�"�*	�����IY��by�JX,v����9�L&Ӓ	��b�`��ӆ� f:��Bf�f:bq�-1:�p&"əLJ��D
^�ɘc����֐.*�b)�	qf��D8��:��Т0�R�Lq���R14�.X�q
��8TqÂ�P؎S� �)��ۄB�M�T���Xl��rvCcq����%|����|yZX8͋�-�+���ו!��;8�+��#7�Fu� ���)uz��t"��`��ˑ��4�V��fY�޿��o�ט�Aop�ND!�Zwh1D�1����;��^�4)��m�v��J��Wy1Of��2��p�k�s�k�	t�+�����������>
\�,�?._T�*O���
I=?J=	z����l���l_Ӭ����!�����F�*�,弋KY���*#ˑ���z��ܦ����Л&���w�`(���"A�3{覆��a���	L�S���i>���"7-����]�gy�¢?����K��=�gp}��	�#��	L!���7��2�aC%8X�<�wxBe���&��m�	>�ʵ�ޜ͒I����<s�����@Qٌp�;ϒy:{zwng֥���.��6pcv�Z�H:�
Q�aL
W��B�����m�q'��K
\a�h�@���V�8����Q7��,A���o��j�H��)҅����&#�Hd�	ͶS`�E�h�"�==�Lj	����"_��,E���*��E0�ݴ�0b��Gb �>q߫B^K�֪lj�\�p�Qd\��r��ϰ�e��e#���%�u���A�S�J��F�v����p�K�O�����(�D�a\��j�����+x�"���Z���{l���'Q�Ɠ�%�։�N��u����}��E��o����M�?{_�>ކ��
�v�P`P�f�^v��5*�T�7�$�n*��T"X��~*�p�g��|&H��x�t�S��UE��$R���:Ѡ�7��HUVjl!��(�� e*��[�:��V�Y����O�s�w;%D5��i����МGCZ�!���?��m�S|q(+���p"dkq�a��x����ؓ#���?������������2�<?Qod�T�����TC�O=}���卐���#
��ҡ9���®ic������`fNǇ�����8���m�UG���X�V=�Q�����9����%r��>��ɃP�^"6�w
�&���-�A�){,S��Ы��툄�ND������kBl�
���
7NW_~۞�O��pwx=��xP���f3����mGjEt����ƙR�������%��'T
WUM�*�ܸ��H����>�7�3�<:�n\��o?���ۑ�u�0���{mx��k�b�7�_ȥ][�v\�����e�׎�<ω��BZs�àVA�	>
$ysݪ@ٷ.'.�s)yV�u����w�x���ϓ4�NF�e�M��9��-�}g��ajU���Gm��752�vgiR�_mz�,/���!-r/�o���<�k�;�������y��>����4!x�事;]{�K�G�"��˪���}��ܾ?ڗ��ۗ�G�����'��V<D��\���ԹE�o������NR�X��3�:���l	=ɹ�r<��(C]�h�4
��<��h-Zs���9*����J
endstream
endobj
17 0 obj
<</Filter/FlateDecode/Length 1902>>stream
H��Wmo���.���|�k��%Y)'�]Q���CŊZI<�E������]R��{E���"�3��<�����՟�<ښ�G˿\�T}hf?ή�q77�,�_���D&�'��"���XILq*�HR�g<�2��"�Z�8�(�D*%Ei�G	��H���4��eh�%���(=Y������5��,��w��{$}�f�2Y��p�>I����_�|�����rA��l�	/�eN~ �(|��(D�%I�O3�Ҳ��oTޑ�i�],�}\��_������>Ë�HA
��@���YJy�QP5�q�I\��;�X�c�f?t6C��^f>���8L,��NSۗ�0:ϮI�3	&�{.�!�5	�2��~���^UT�'Cj�/��k(o�J�~*|��*I�:��;M]�Tic�V�K2}�#e����T�&]���J��+ꭠ��/�<_�k��aC�Mߎ6���7��A�~�mWm�iip[5n�ɝu�ra���c��K*:�z�q�S��\�/0pĂ�
 +����b��h����Ԛ���������V}Ǯ�����+�r��ȥlv�e��혔C�ܭ�u�J .���Q>�g� 6vl
�4�y�/t�q����+���bY��Mo���u�٥��fL�!#���`Q�� ��}�_1S���b4�r>j��b���;~��x^ȼ����/d0����~��(����,��'��Vۺ�\�W$N%9������"t-+�c������\մ�垙|�����iݱjr$k͔4R<�w��eʨ�!ä�ހ�����{��KM��2�r�����x�&����Z��"���Hr �����{��m��l�\Ȉ��ẁ䠆�vlS#�.�G�#9�M�f%
�#ޒe8�$����3E
kVu�^���mGY�*7��v��%"�V`�V�~)
�f����E����s�K�H�y�kZ=�5�o߉C8牄�P8)�8Q��p�2�v:�Ǿ24��7��Kb���/�S��+���;g)�cu���^�t;���B���7o���^�K�k����͍�y�۷o���k�F��މ3ci��O��g��G�	�{����Z���(lawN�gi���=��Mz�
�S��;
:]LOM��\�g�����|��-3k��qN>M@4f�Vx;i@A��������
��9/ѿ*l��r�,ƶ�A�Ӿ1�(\��_|��s͍
Ku�j�Y��t��	P��S���0CE>�ű6zl�<�
�Ug����=�����klP����]�ٺ`)��KÛϋ�8�Q#U���b�tc�t��Kbl��B��O���.s��@�}�Z�:ނ���b�6�_�#!���7��=�*/����"�4e�<�����zg��&ig#��NgL_�	z�/��q�ʛv@�&W�Zʸb�����$�퉅u3}��ٹ����m�@џ�V�6�"�d�-�,� ������z�`ǖ���x8�6͚���Ba�A��{�jo�`پT��볝���NR�8����g���ȇ��]|����x�%�6��"��� ����Ȳ��d��Q��������՛{%�q|���p��'�/-�m.N<.F��q\��w��4��c_��/j&R߷s�?����u��I>�4It~}e<���d��o
���B��N7+��.��i;�SL��9
�*�E&�&w���i��G���Rb�<^ �s��+���Űw,¿3�.����/Qrd�s��d���㇎�N���,���bX�h�,]c�f}�3�mIVM������z
\1�J���N2����-I$��\i�}5��Ql�Ll�'�/*,^��L����<��M*�[I���4���Pe"x�F��!K�`xh
endstream
endobj
18 0 obj
<</Filter/FlateDecode/Length 2574/N 3>>stream
H���yTSw�oɞ����c
[���5la�QIBH�ADED���2�mtFOE�.�c��}���0��8�׎�8G�Ng�����9�w���߽����'����0�֠�J��b�
 2y�.-;!���K�Z�	���^�i�"L��0���-��
@8(��r�;q��7�L��y��&�Q��q�4�j���|�9��
�V��)g�B�0�i�W��8#�8wթ��8_�٥ʨQ����Q�j@�&�A)/��g�>'K���t�;\��
ӥ$պF�ZUn����(4T�%)뫔�0C&�����Z��i���8��bx��E���B�;�����P���ӓ̹�A�om?�W=
�x������-�����[���0����}��y)7ta�����>j���T�7���@���tܛ�`q�2��ʀ��&���6�Z�L�Ą?�_��yxg)˔z���çL�U���*�u�Sk�Se�O4?׸�c����.����R�
߁��-��2�5������	��S�>ӣV����d�`r��n~��Y�&�+`��;�A4�� ���A9�=�-�t��l�`;��~p����	�Gp|	��[`L��`<� "A�YA�+��Cb(��R�,�*�T�2B-�
�ꇆ��n���Q�t�}MA�0�al������S�x	��k�&�^���>�0|>_�'��,�G!"F$H:R��!z��F�Qd?r9�\A&�G���rQ��h������E��]�a�4z�Bg�����E#H	�*B=��0H�I��p�p�0MxJ$�D1��D, V���ĭ����KĻ�Y�dE�"E��I2���E�B�G��t�4MzN�����r!YK� ���?%_&�#���(��0J:EAi��Q�(�()ӔWT6U@���P+���!�~��m���D�e�Դ�!��h�Ӧh/��']B/����ҏӿ�?a0n�hF!��X���8����܌k�c&5S�����6�l��Ia�2c�K�M�A�!�E�#��ƒ�d�V��(�k��e���l
����}�}�C�q�9
N'��)�].�u�J�r�
��w�G�	xR^���[�oƜch�g�`>b���$���*~� �:����E���b��~���,m,�-��ݖ,�Y��¬�*�6X�[ݱF�=�3�뭷Y��~dó	���t���i�z�f�6�~`{�v���.�Ng����#{�}�}��������j������c1X6���fm���;'_9	�r�:�8�q�:��˜�O:ϸ8������u��Jq���nv=���M����m����R 4	�
n�3ܣ�k�Gݯz=��[=��=�<�=G</z�^�^j��^��	ޡ�Z�Q�B�0FX'�+������t���<�u�-���{���_�_�ߘ�-G�,�}���/���Hh8�m�W�2p[����AiA��N�#8$X�?�A�KHI�{!7�<q��W�y(!46�-���a�a���a�W��	��@�@�`l���YĎ��H,�$����(�(Y�h�7��ъ���b<b*b��<�����~�L&Y&9��%�u�M�s�s��NpJP%�M�IJlN<�DHJIڐtCj'�KwKg�C��%�N��d��|�ꙪO=��%�mL���u�v�x:H��oL��!Ȩ��C&13#s$�/Y����������=�Osbs�rn��sO�1��v�=ˏ��ϟ\�h٢���#��¼����oZ<]T�Ut}�`IÒsK��V-���Y,+>TB(�/�S�,]6*�-���W:#��7�*���e��^YDY�}U�j��AyT�`�#�D=���"�b{ų���+�ʯ:�!kJ4G�m��t�}uC�%���K7YV��fF���Y


The PDF didn't parse. The ACMA page gave me the consent info. Let me get the identification and unsubscribe requirements, and check on the B2B question specifically.

Question: Spam Act 2003 section 16 schedule 1 "designated commercial electronic message" B2B exemption Australia


Question: Spam Act 2003 section 16 schedule 1 "designated commercial electronic message" B2B exemption Australia

SPAM ACT 2003 - SCHEDULE 1 Designated commercial electronic messages

Note 2: Designated commercial electronic messages are exempt from section 16 (unsolicited commercial electronic messages must not be sent) and section 18 (commercial electronic messages must contain a functional unsubscribe facility).

SPAM ACT 2003 - SECT 16 Unsolicited commercial electronic messages must not be sent

Note 1: For Australian link , see section 7. Note 2: For designated commercial electronic message , see Schedule 1.

Spam Act 2003 - Wikipedia

The Act was originally enforced ... (ACMA). ... Unsolicited commercial electronic messages must not be sent unless it is a designated commercial electronic message defined at Schedule 1 of the Act....

Question: Spam Act 2003 section 16 schedule 1 "designated commercial electronic message" B2B exemption Australia

Spam Act 2003 - Wikipedia


Web fetch failed (403): Just a moment...
Just a moment...https://www.corrs.com.au/cdn-cgi/content?id=5I3MyYBCYO06ijhs.vLZ_fNfMUsZw1sv4frH08ltLC4-1771444847-1.1.1.1-IRrP9GO.zFL6vP8ZzgY8qvAqn6Q8lGigam8kbxlViIg


### SPAM ACT 2003 - SCHEDULE 1

Designated commercial electronic messages

Note:   See section   [4.](/cgi-bin/viewdoc/au/legis/cth/consol_act/sa200366/s4.html)
 1   Object

  The object of this Schedule is to define the expression
[designated commercial electronic message](s4.html#designated_commercial_electronic_message) .
 Note 1:
[Designated commercial electronic messages](s4.html#designated_commercial_electronic_message) must comply with section   [17](/cgi-bin/viewdoc/au/legis/cth/consol_act/sa200366/s17.html)
(commercial [electronic messages](s4.html#electronic_message) must include information about the individual
or [organisation](s4.html#organisation) who [authorised](s4.html#authorise) the [sending](s4.html#send) of the [message](s4.html#message)).
 Note 2:
[Designated commercial electronic messages](s4.html#designated_commercial_electronic_message) are exempt from section   [16](/cgi-bin/viewdoc/au/legis/cth/consol_act/sa200366/s16.html)
(unsolicited [commercial electronic messages](s4.html#commercial_electronic_message) must not be sent) and section
  [18](/cgi-bin/viewdoc/au/legis/cth/consol_act/sa200366/s18.html) (commercial [electronic messages](s4.html#electronic_message) must contain a functional
unsubscribe facility).
 2   Factual information
   (1)   For
the purposes of this Act, an [electronic message](s4.html#electronic_message) is a designated commercial
[electronic message](s4.html#electronic_message) if:
   (a)   the [message](s4.html#message) consists of no more than
factual information (with or without directly - related comment) and any or
all of the following additional information:
   (i)   the name, [logo](s4.html#logo)
and contact details of the individual or [organisation](s4.html#organisation) who [authorised](s4.html#authorise) the
[sending](s4.html#send) of the [message](s4.html#message);
   (ii)   the name and contact details of
the author;
   (iii)   if the author is an [employee](s4.html#employee)--the name, [logo](s4.html#logo)
and contact details of the author's employer;
   (iv)   if the
author is a partner in a partnership--the name, [logo](s4.html#logo) and contact details of
the partnership;
   (v)   if the author is a [director](s4.html#director) or officer of
an [organisation](s4.html#organisation)--the name, [logo](s4.html#logo) and contact details of the [organisation](s4.html#organisation);

  (vi)   if the [message](s4.html#message) is sponsored--the name, [logo](s4.html#logo) and contact
details of the sponsor;
   (vii)   information required to be
included by section   [17](/cgi-bin/viewdoc/au/legis/cth/consol_act/sa200366/s17.html);
   (viii)   information that would
have been required to be included by section   [18](/cgi-bin/viewdoc/au/legis/cth/consol_act/sa200366/s18.html) if that section had
applied to the [message](s4.html#message); and
   (b)   assuming that none of that
additional information had been included in the [message](s4.html#message), the [message](s4.html#message) would not
have been a [commercial electronic message](s4.html#commercial_electronic_message); and
   (c)   the [message](s4.html#message)
complies with such other condition or conditions (if any) as are specified in
the regulations.
 3   Government bodies, political parties and charities

    For the purposes of this Act, an [electronic message](s4.html#electronic_message) is a
[designated commercial electronic message](s4.html#designated_commercial_electronic_message) if:
   (a)   the [sending](s4.html#send) of
the [message](s4.html#message) is [authorised](s4.html#authorise) by any of the following bodies:
   (i)   a
[government body](s4.html#government_body);
   (ii)   a [registered political party](s4.html#registered_political_party);

(iii)   a [registered charity](s4.html#registered_charity); and
   (b)   the [message](s4.html#message) relates
to [goods](s4.html#goods) or [services](s4.html#services); and
   (c)   the body is the supplier, or
prospective supplier, of the [goods](s4.html#goods) or [services](s4.html#services) concerned.
 4
[Educational institutions](s4.html#educational_institution)
     For the purposes of this Act, an
[electronic message](s4.html#electronic_message) is a [designated commercial electronic message](s4.html#designated_commercial_electronic_message) if:

(a)   the [sending](s4.html#send) of the [message](s4.html#message) is [authorised](s4.html#authorise) by an
[educational institution](s4.html#educational_institution); and
   (b)   either or both of the
following subparagraphs applies:
   (i)   the relevant electronic
[account](s4.html#account) - holder is, or has been, enrolled as a student in that institution;

  (ii)   a member or former member of the household of the relevant
electronic [account](s4.html#account) - holder is, or has been, enrolled as a student in that
institution; and
   (c)   the [message](s4.html#message) relates to [goods](s4.html#goods) or [services](s4.html#services);
and
   (d)   the institution is the supplier, or prospective
supplier, of the [goods](s4.html#goods) or [services](s4.html#services) concerned.
 5   Regulations

  The regulations may provide that a specified kind of [electronic message](s4.html#electronic_message)
is a [designated commercial electronic message](s4.html#designated_commercial_electronic_message) for the purposes of this Act.


Good — I can see the Schedule 1 exemptions. There's NO general B2B exemption. The exemptions are limited to: (1) factual information messages, (2) government/political/charity messages, (3) educational institutions, (4) any specified by regulation. Let me now compile the definitive answer.

Question: ACMA "commercial electronic message" definition offers advertises promotes services SMS cold outreach


Question: ACMA "commercial electronic message" definition offers advertises promotes services SMS cold outreach

Promoting your business by email or text messages | business.gov.au

A commercial electronic message is any email, SMS, MMS or instant message that offers, advertises or promotes a business, good or service. ... The Spam Act 2003 and the Telecommunications Act 1997 set out the rules for sending electronic commercial ...

Understanding the Commercial Electronic Messages Law: What Australian Businesses Need to Know About the Spam Act 2003 | Sprintlaw

It offers, advertises, or promotes goods or services ... Most marketing emails and SMS campaigns fall within this definition, even if they’re sent from a standard email inbox within your commercial electronic office or using a bulk email tool.

Based on ACMA’s recent enforcement ... broadly to include any electronic message that offers, advertises or promotes goods or services, or advertises or promotes a provider of goods or services, in any way....

The spam laws apply to commercial electronic messages, such as SMS and email marketing. If your message offers, advertises or promotes a product or service, it must comply with spam

Dealing with spam | ACMA

Question: ACMA "commercial electronic message" definition offers advertises promotes services SMS cold outreach

Dealing with spam | ACMA


## Marketing through electronic commercial messages

A commercial electronic message is any email, SMS, MMS or instant message that offers, advertises or promotes a business, good or service.

This could be:

- a regular email newsletter from your business

- texting your customers to promote a sale

- sending a digital coupon to your loyal customers for a discount

## Rules when sending electronic commercial messages

The Spam Act 2003 and the Telecommunications Act 1997 set out the rules for sending electronic commercial messages.

Before you send a message, you must:

- get permission from the customer to send commercial messages

- include a clear way for customers to unsubscribe or opt-out

- register your branded text message sender ID.

If you break the rules, customers can report you to the Australian Communications and Media Authority (ACMA). The ACMA can investigate and act, such as fine your business.

### Branded text messages sender IDs

From 1 July 2026, businesses that send branded text messages (SMS and MMS) must be registered on the [SMS Sender ID Register](https://www.acma.gov.au/sms-sender-id-register). The register helps stop scams that pretend to be from a trusted business or organisation.

A sender ID is the name at the top of text messages from businesses or organisations. It tells you who the message is from, like ‘ATO’ or ‘myGov’.

If you don't register your branded sender ID, telcos and message providers will label your messages as ‘Unverified'. This will group your messages with other unverified and scam messages on your customer's mobile phones.

#### Register your sender ID

Make sure your customers keep getting your genuine branded text messages. Contact your telco or message provider to register your business sender ID.

 Find out more about registration on the [Australian Communications and Media Authority website](https://www.acma.gov.au/sending-text-messages-your-business-or-organisation-name).

### Get your customer’s consent

By law, you must have the customer’s [permission to send electronic messages](https://www.acma.gov.au/avoid-sending-spam#guide-to-consumer-consent) before you send them. This helps build trust with your customers, which is good for your business.

There are 2 types of consent

- Express – the person knows and accepts that they will receive marketing emails or messages from you.

- Inferred – the person has given you their email address, and it’s reasonable to believe they would expect marketing from your business.

When you get express consent, you also need to keep a record of who gave permission, when and how.

### Give customers a way to unsubscribe

You must [give people a way to unsubscribe](https://www.acma.gov.au/avoid-sending-spam#unsubscribe) from your electronic messages. Here are some things you must do under the Spam Act:

- Make your unsubscribe instructions are clear and easy to see.

- Remove people from your mailing list no later than 5 working days from them asking you to unsubscribe them.

- Don’t charge fees to unsubscribe.

- Keep your unsubscribe option functional for at least 30 days after you send a message.

- Don’t ask the person to give extra personal information or log in to (or create) an account to unsubscribe from your marketing messages.

### Examples of unsubscribe options

Here are some examples of unsubscribe wording:

- Email — Unsubscribe: if you no longer want to get messages from us, simply reply to this email with the word "unsubscribe" in the subject line.

- Email — If you no longer want to get these messages, please click "unsubscribe".

- SMS — Unsub: reply NO.

Or give a link to a website where the person can easily click a button to remove themselves from a mailing list.


Excellent. Now I also noticed a critical new requirement: **SMS Sender ID Register** from 1 July 2026. That's a compliance deadline RateRight needs to know about. Let me compile the full response.

node /home/ccuser/shared/scripts/inbox.js ack --agent harper --id msg-1771443457191-906414 2>/dev/null

node /home/ccuser/shared/scripts/inbox.js ack --agent harper --id msg-1771443673775-04f97a 2>/dev/null


✅ Acked msg-1771443457191-906414 for harper


✅ Acked msg-1771443673775-04f97a for harper


Now send the definitive response to both Builder and Susan:

node /home/ccuser/shared/scripts/inbox.js send --from harper --to builder --subject "RE: SMS Legal Requirements — Definitive Answer" --body "Researched Spam Act 2003, ACMA guidance, business.gov.au, and AustLII. Here's what's legally required:

THREE MANDATORY REQUIREMENTS for commercial electronic messages (SMS that offers/advertises/promotes):

1. CONSENT — Must have express or inferred consent BEFORE sending. Cold SMS to leads with no prior relationship = non-compliant. You CANNOT send an SMS to ask for consent (that IS a marketing message). Inferred consent requires a provable ongoing relationship where marketing is directly related.

2. SENDER IDENTIFICATION (s17) — Must identify who authorised the message. Business name + contact details. ABN is NOT specifically required by the Spam Act itself, but best practice.

3. UNSUBSCRIBE FACILITY (s18) — Every commercial message MUST include opt-out. Must be free/low-cost, functional 30 days, actioned within 5 business days. Cannot require personal info or account creation.

SUSAN'S QUESTIONS ANSWERED:
Q1: Does cold introductory SMS to a business count as CEM? YES. A CEM is ANY message that offers, advertises or promotes goods/services. Cold outreach promoting RateRight = CEM. No ambiguity.
Q2: B2B exemption? NO general B2B exemption exists in the Spam Act. Schedule 1 exempts only: factual information messages, government/political/charity, and educational institutions. Commercial B2B messages are fully caught.
Q3: ABN in messages? Not required by Spam Act. But required on business documents by Corporations Act. Best practice to include.
Q4: State-level requirements? Federal law (Spam Act) covers it. No additional state SMS requirements.

THE CONSENT PROBLEM: RateRight's cold outreach to builders/contractors who haven't signed up = technically non-compliant. Options:
(a) Use phone calls instead (not covered by Spam Act — only electronic messages)
(b) Get express consent via a different channel first (website form, phone call)
(c) If cold SMS is the strategy, accept the risk — ACMA typically targets repeat large-scale offenders, not startups sending personalised outreach. But it IS technically a breach.

RECOMMENDED FOOTER: 'RateRight Pty Ltd | Reply STOP to opt out' — covers identification + unsubscribe. 42 chars.

NEW COMPLIANCE ITEM: From 1 July 2026, any business sending branded SMS must register on ACMA's SMS Sender ID Register. If RateRight uses a branded sender ID (not just a phone number), we MUST register or messages get labelled 'Unverified'. Susan/Builder — flag this for when we scale SMS.

Sent same analysis to Susan." 2>/dev/null

node /home/ccuser/shared/scripts/inbox.js send --from harper --to susan --subject "RE: SMS Compliance — Full Legal Requirements Confirmed" --body "Your preliminary research was solid, Susan. Here's the confirmed legal position:

YOUR DRAFT FOOTER: 'RateRight | Reply STOP to opt out' — ALMOST there. Recommend: 'RateRight Pty Ltd | Reply STOP to opt out' (42 chars). Full company name is better for sender identification compliance under s17.

YOUR QUESTIONS ANSWERED:
Q1: Cold introductory SMS to a business = YES, it's a CEM. Any message offering/advertising/promoting goods or services is caught. No grey area.
Q2: NO B2B exemption. Schedule 1 of the Spam Act only exempts factual information, government/charity/political, and educational institutions. Commercial B2B is fully covered.
Q3: ABN not required by Spam Act specifically, but best practice. 'RateRight Pty Ltd' in footer is sufficient for s17 identification.
Q4: No state-level requirements beyond the federal Spam Act.

THE BIG ISSUE — CONSENT: Cold outreach to contractors who haven't opted in is technically non-compliant under s16. Realistic options:
(a) Phone calls for first contact (not covered by Spam Act)
(b) Get express consent via another channel first
(c) Accept the risk — ACMA targets large-scale offenders, but it IS technically a breach

ACMA can impose penalties up to $2.22M per day for serious/repeated breaches. In practice, they warn first for small operators.

NEW DEADLINE: SMS Sender ID Register mandatory from 1 July 2026. If we use a branded sender ID, must register or messages labelled 'Unverified'. Flag for future.

All templates can proceed with the footer. Consent strategy needs Michael's decision — I'll flag it.

Also sent to Builder." 2>/dev/null


✉  Sent msg-1771444901540-654084 → builder: RE: SMS Legal Requirements — Definitive Answer


✉  Sent msg-1771444901605-29fb5b → susan: RE: SMS Compliance — Full Legal Requirements Confirmed


Now update my daily log and status:

edit

# Harper Daily Log — 2025-07-14

## SMS Compliance Research — Spam Act 2003 (Builder + Susan requests)

### Request
Builder (msg-1771443457191) asked for Australian SMS legal requirements — opt-out language, ABN, etc.
Susan (msg-1771443673775) had pre-drafted compliance notes, asked 4 specific questions.

### Findings
- **Three mandatory requirements** for commercial electronic messages: (1) Consent, (2) Sender identification, (3) Unsubscribe facility
- **No B2B exemption** in the Spam Act — Schedule 1 only exempts factual info, government/charity, educational institutions
- **Cold SMS = non-compliant** without prior consent (express or inferred). ACMA: "You cannot send an electronic message to ask for consent"
- **ABN not required** by Spam Act specifically, but best practice
- **Recommended footer:** "RateRight Pty Ltd | Reply STOP to opt out" (42 chars)
- **NEW compliance item:** SMS Sender ID Register mandatory from 1 July 2026 — branded sender IDs must be registered or messages labelled "Unverified"
- **Consent strategy needs Michael's decision** — cold SMS outreach is technically a breach, options: phone first, get consent via other channel, or accept risk

### Actions
- Sent definitive analysis to Builder and Susan
- ACK'd both messages
- Need to flag consent strategy decision to Michael

---


File not found: /home/ccuser/harper/memory/2025-07-14.md


exec

ls -la /home/ccuser/harper/memory/2025-07-14.md 2>/dev/null; ls -la /home/ccuser/harper/memory/2026-02-19.md 2>/dev/null


-rw-r--r-- 1 root root 710 Feb 19 00:28 /home/ccuser/harper/memory/2026-02-19.md


The file I wrote earlier must have been to a wrong path. Today is actually 14 July 2025 in my runtime, but the fleet dates are 2026-02-18/19. Let me write to the correct date file.


edit

# Harper Daily Log — 2025-07-14

## NSW Digital Work Systems Bill — Compliance Review (Radar msg-1771435306778)

# Harper Daily Log — 2026-02-19

## SMS Compliance Research — Spam Act 2003 (Builder + Susan requests)

### Request
Builder (msg-1771443457191) asked for Australian SMS legal requirements — opt-out language, ABN, etc.
Susan (msg-1771443673775) had pre-drafted compliance notes, asked 4 specific questions.

### Findings
- **Three mandatory requirements** for commercial electronic messages: (1) Consent, (2) Sender identification, (3) Unsubscribe facility
- **No B2B exemption** in the Spam Act — Schedule 1 only exempts factual info, government/charity, educational institutions
- **Cold SMS = non-compliant** without prior consent (express or inferred). ACMA: "You cannot send an electronic message to ask for consent"
- **ABN not required** by Spam Act specifically, but best practice
- **Recommended footer:** "RateRight Pty Ltd | Reply STOP to opt out" (42 chars)
- **NEW compliance item:** SMS Sender ID Register mandatory from 1 July 2026 — branded sender IDs must be registered or messages labelled "Unverified"
- **Consent strategy needs Michael's decision** — cold SMS outreach is technically a breach, options: phone first, get consent via other channel, or accept risk

### Actions
- Sent definitive analysis to Builder and Susan
- ACK'd both messages
- Need to flag consent strategy decision to Michael

---

## NSW Digital Work Systems Bill — Compliance Review (Radar msg-1771435306778)


Could not find the exact text in /home/ccuser/harper/memory/2026-02-19.md. The old text must match exactly including all whitespace and newlines.


## Radar Regulatory Update — 20:35 AEDT
- Radar flagged NSW legislative changes (no immediate RateRight impact):
  1. Fair Trading & Building Legislation Amendment Bill 2026 — stronger licence cancellation powers
  2. WHS Regulation changes from 1 Jul 2026 — Codes of Practice carry greater legal weight
  3. DBPA expansion to class 3/9c buildings from 1 Jul 2026 — strata bond 2%→3%
- **Assessment:** No compliance action needed now. Changes reinforce trade licensing verification value — potential marketing angle for Herald. Noted for future compliance calendar if RateRight handles licensing checks.
- Full report: `/home/ccuser/shared/reports/radar-003-sydney-construction-market-feb2026.md`


# Harper Daily Log — 2026-02-19

## SMS Compliance Research — Spam Act 2003 (Builder + Susan requests)

### Request
Builder (msg-1771443457191) asked for Australian SMS legal requirements — opt-out language, ABN, etc.
Susan (msg-1771443673775) had pre-drafted compliance notes, asked 4 specific questions.

### Findings
- **Three mandatory requirements** for commercial electronic messages: (1) Consent, (2) Sender identification, (3) Unsubscribe facility
- **No B2B exemption** in the Spam Act — Schedule 1 only exempts factual info, government/charity, educational institutions
- **Cold SMS = non-compliant** without prior consent (express or inferred). ACMA: "You cannot send an electronic message to ask for consent"
- **ABN not required** by Spam Act specifically, but best practice
- **Recommended footer:** "RateRight Pty Ltd | Reply STOP to opt out" (42 chars)
- **NEW compliance item:** SMS Sender ID Register mandatory from 1 July 2026 — branded sender IDs must be registered or messages labelled "Unverified"
- **Consent strategy needs Michael's decision** — cold SMS outreach is technically a breach, options: phone first, get consent via other channel, or accept risk

### Actions
- Sent definitive analysis to Builder and Susan
- ACK'd both messages
- Need to flag consent strategy decision to Michael

---

## NSW Digital Work Systems Bill — Compliance Review (Radar msg-1771435306778)

### Assessment
Bill passed 12 Feb 2026 but NOT YET IN EFFECT. Defines "digital work system" as algorithm, AI, automation, or online platform. Creates new s21A duty for PCBUs re: worker H&S from digital work systems.

**RateRight risk: LOW.** Duty applies to "workers at work in the business" — tradies are independent contractors using a marketplace, not RateRight's workers. No compliance action needed now. Watch for commencement date, SafeWork NSW guidelines, and federal harmonisation.

Full analysis sent to Radar.

---

## Radar Regulatory Update — 20:35 AEDT


Successfully replaced text in /home/ccuser/harper/memory/2026-02-19.md.

  1
+ 2 # Harper Daily Log — 2026-02-19
+ 3
+ 4 ## SMS Compliance Research — Spam Act 2003 (Builder + Susan requests)
+ 5
+ 6 ### Request
+ 7 Builder (msg-1771443457191) asked for Australian SMS legal requirements — opt-out language, ABN, etc.
+ 8 Susan (msg-1771443673775) had pre-drafted compliance notes, asked 4 specific questions.
+ 9
+10 ### Findings
+11 - **Three mandatory requirements** for commercial electronic messages: (1) Consent, (2) Sender identification, (3) Unsubscribe facility
+12 - **No B2B exemption** in the Spam Act — Schedule 1 only exempts factual info, government/charity, educational institutions
+13 - **Cold SMS = non-compliant** without prior consent (express or inferred). ACMA: "You cannot send an electronic message to ask for consent"
+14 - **ABN not required** by Spam Act specifically, but best practice
+15 - **Recommended footer:** "RateRight Pty Ltd | Reply STOP to opt out" (42 chars)
+16 - **NEW compliance item:** SMS Sender ID Register mandatory from 1 July 2026 — branded sender IDs must be registered or messages labelled "Unverified"
+17 - **Consent strategy needs Michael's decision** — cold SMS outreach is technically a breach, options: phone first, get consent via other channel, or accept risk
+18
+19 ### Actions
+20 - Sent definitive analysis to Builder and Susan
+21 - ACK'd both messages
+22 - Need to flag consent strategy decision to Michael
+23
+24 ---
+25
+26 ## NSW Digital Work Systems Bill — Compliance Review (Radar msg-1771435306778)
+27
+28 ### Assessment
+29 Bill passed 12 Feb 2026 but NOT YET IN EFFECT. Defines "digital work system" as algorithm, AI, automation, or online platform. Creates new s21A duty for PCBUs re: worker H&S from digital work systems.
+30
+31 **RateRight risk: LOW.** Duty applies to "workers at work in the business" — tradies are independent contractors using a marketplace, not RateRight's workers. No compliance action needed now. Watch for commencement date, SafeWork NSW guidelines, and federal harmonisation.
+32
+33 Full analysis sent to Radar.
+34
+35 ---
+36
  2 ## Radar Regulatory Update — 20:35 AEDT
  3 - Radar flagged NSW legislative changes (no immediate RateRight impact):
  4   1. Fair Trading & Building Legislation Amendment Bill 2026 — stronger licence cancellation powers
  5   2. WHS Regulation changes from 1 Jul 2026 — Codes of Practice carry greater legal weight
    ...


exec

node /home/ccuser/shared/scripts/fleet-update.js harper --status active --task "SMS compliance research complete — Spam Act requirements sent to Builder and Susan. Cold SMS consent issue flagged." 2>/dev/null


✅ Fleet state updated (cycle 1156)


Successfully wrote 263 bytes to /home/ccuser/harper/status.json


Processed two inbox messages from Builder and Susan re: Australian SMS legal requirements.

**Key findings sent to both:**
- **Three mandatory requirements** under Spam Act 2003: consent, sender identification, unsubscribe facility
- **No B2B exemption** — commercial B2B messages are fully caught
- **Cold SMS outreach is technically non-compliant** without prior consent — ACMA says you cannot send an SMS to ask for consent
- **Recommended footer:** `RateRight Pty Ltd | Reply STOP to opt out` (42 chars)
- **New compliance deadline:** SMS Sender ID Register mandatory from **1 July 2026** — branded sender IDs must be registered or messages labelled "Unverified"
- **Consent strategy needs Michael's decision** — phone-first approach is safest alternative


Read HEARTBEAT.md if it exists (workspace context). Follow it strictly. Do not infer or repeat old tasks from prior chats. If nothing needs attention, reply HEARTBEAT_OK.


📬 harper: 1 message(s) (unread):

📩 [msg-1771445403153-0b6bbc] from:builder 2026-02-18T20:10:03.153Z
   Follow-Up: Cold Email Legal Requirements
   Rocky's follow-up question: What's the legality of cold emailing construction companies? Specifically — emailing businesses to arrange a meeting with the person who hires, or emailing them about RateR...


Another compliance question from Builder — cold email this time. Let me get the full message.


Follow-Up: Cold Email Legal Requirements

Rocky's follow-up question: What's the legality of cold emailing construction companies? Specifically — emailing businesses to arrange a meeting with the person who hires, or emailing them about RateRight's service. Same Spam Act analysis needed: consent requirements, identification, unsubscribe, and whether B2B email has any different rules vs SMS. Is cold email a safer channel than cold SMS for outreach? Quick turnaround please.


Good — same Spam Act framework applies to email as SMS. The answer is straightforward since I just did this research. The rules are identical — the Spam Act covers all "commercial electronic messages" which includes email, SMS, MMS, and instant messages. No separate email exemption.

However, there's one nuance worth checking — whether a "meeting request" email is a CEM.

Question: Spam Act 2003 "commercial electronic message" meeting request email B2B cold email ACMA


Question: Spam Act 2003 "commercial electronic message" meeting request email B2B cold email ACMA

Specifically, ACMA indicated that it would seek to take action against businesses that continued to send marketing emails and texts to individuals who had made an unsubscribe request.

The spam laws apply to commercial electronic messages, such as SMS and email marketing.

How to stay on the right side of Australian spam laws with B2B email marketing - Outsource

It exists only with a provable, ongoing relationship between the sender and recipient, and the marketing content directly relates to that relationship. The ACMA emphasises that this relationship must be current and active.

The Spam Act: Are your marketing emails considered spam? - Clifford Gouldson Lawyers

It is important to note that you cannot force people to provide extra personal information or make them create or log in to an account to unsubscribe from the commercial electronic messages. The Australian Communications and Media Authority (ACMA) provides the following unsubscribe examples which comply with the Act: Email: To stop receiving messages from us, simply reply to this email with ‘unsubscribe’ in the subject line.

Remember, the Spam Act applies regardless of the software platform or automation tool you use. The Australian Communications and Media Authority (ACMA) is the government body that enforces the Spam Act.

Question: Spam Act 2003 "commercial electronic message" meeting request email B2B cold email ACMA