Bounded acquisition, 9 September 2026. The 8 September 2026 exposure draft is a proposal, not an enacted or operating duty. This note follows the funding/governance forest assessment and reads the existing policy-lineage, operative-authority, Mannifera-selection and McKinnon-governance packets. It records transmission and decisions; it does not attribute legislative control to a funder.
The supported structure has parallel paths: Reset model → HRLC express endorsement, and Reset submission70 → statutory-review reasoning → government commitment tied to that review. The record does not establish HRLC as the intermediary carrying Reset into the reviewer's reasoning. The public decision record supports the overarching duty while modifying or leaving open important components. It does not establish government adoption of the full HRLC/Reset package, NGO authorship of the exposure draft, or funder approval of statutory wording.
What actually travelled
HRLC's submission dated 5 July 2024 recommends that government adopt Reset.Tech Australia's approach. Its recommendation section says the “government adopts Reset.Tech Australia’s risk-based approach”; the ensuing five pillars cover duty, assessment, mitigation, transparency and accountability. Section 5 identifies Reset's Five Pillars and cites the April 2024 Digital Platform Regulation Green Paper, footnote 23. The transparency request expressly includes vetted researchers and civil society organisations. This is an attributable endorsement and submission, not similarity between two reports. [HRLC submission 155, PDF/printed p5 §2; p10 §5 and fn23; p11 §5.1.4](http[local research file]
HRLC also explicitly adopts the World Economic Forum's 2023 Typology of Online Harms as its framework for understanding online harm. This identifies a separate taxonomy-to-submission transmission, not government adoption of that taxonomy. [Submission155, PDF/printed p9 §4.3, footnotes15–18](http[local research file] The external WEF original was not acquired in this run.
The published updated review, internally dated October 2024 and published 4 February 2025, supplies the official reasoning bridge. Its available text is not assumed identical to the original October delivery; the version evidence does not establish that the Reset citation was newly inserted. In §5.5 the reviewer favours a singular overarching duty, identifies Woods/Perrin and Carnegie antecedents, and quotes Reset submission 70 p5 when explaining why content-specific duties can miss harmful service design. Footnotes 37–38 identify that submission. The same section names other supporters; attribution to Reset is evidence of use in the review's reasoning, not exclusive authorship or but-for causation. [Statutory review, printed p53 §5.5](http[local research file]
Minister Rowland announced the government's duty-of-care commitment in the Sydney Institute speech on 13 November 2024. The speech explicitly grounds the direction in the recently received Rickard review and international alignment. The associated release is dated 14 November 2024. Neither relevant announcement passage attributes the decision to HRLC, Reset or their funders. These are separate announcement/publication dates, not competing dates for a single document. [Speech, A Digital Duty of Care section](http[local research file] [release](http[local research file]
A newly inspected departmental release establishes official awareness more concretely than an NGO's access claim. FOI 25-247 Document 2, briefing QB24-000162, is marked last edited and SES-cleared 26 November 2024. Its media table summarises HRLC's DSA-style proposal and an October article featuring HRLC and Reset endorsing duty of care. The clearance is after the announcement: it establishes inclusion in an official briefing, not that the minister read these articles before deciding. A separate released presentation dated 26 February 2025 describes review recommendations and implementation risks; it is a discussion document, not a decision minute. [FOI bundle, Document 2 PDF pp10–15, especially pp14–15; Document 5 PDF pp32–35](http[local research file]
Decisions and differences
The 14 April 2026 response is a government decision record, distinct from recommendations or consultation summaries. Its labels preserve a material distinction: support in principle can leave implementation open; note requires further consideration. The following are dispositions of review recommendations, not individually addressed replies to HRLC. [Government response, PDF/printed pp3–9](http[local research file]
| Review proposal | Government disposition | Exact locator and consequence |
|---|---|---|
| Rec4, singular overarching duty | Support | p4: accepted policy architecture. |
| Rec7, automatic highest tier above 10% population | Not supported | p5; p4 explanation favours proportionate application wherever risk exists. |
| Rec9, eSafety mandatory codes | Support in principle | p5; p4 explanation instead describes government-made rules with parliamentary scrutiny. |
| Rec13, safeguarded authorised-researcher access | Support in principle | p6: implementation remained open. |
| Rec25, accessible internal complaints | Support | p8. |
| Rec26, digital Ombuds scheme | Note | p9; p7 prioritises internal dispute mechanisms initially. |
The September draft adds a consequential boundary to the research request: proposed 205B(1) requires employment by an Australian university and approval under prospective legislative rules. Research additionally requires ethics approval and a prescribed public-interest category. Section 205C delegates scheme design, including privacy, security, confidentiality, conflicts, fees and review. This narrows direct eligibility compared with the NGOs' request; it neither awards an NGO a data-access entitlement nor excludes all university collaboration. The reason for choosing this boundary is not established here. Exposure draft, PDF pp63–65 / printed pp59–61]
HRLC's October Rights-First report also sought clear reasons for content/account restrictions, accessible remedies, and review of significant regulatory decisions. Those safeguards belong in the comparison alongside its coercive powers proposal. Rights-First, PDF p12 / printed pp22–23, and PDF p15 / printed pp28–29]
The official May–June 2026 consultation summary reports more than forty meetings and support across several stakeholder categories, including industry, alongside competing priorities. It groups participants instead of assigning the relevant demands to HRLC or Reset. It cannot close the attribution gap or prove that a recorded suggestion was accepted. [Summary, PDF pp1–2](http[local research file]
Candidate directional edges and limits
These are candidate relations for reconciliation with existing entities and source IDs, not canonical edits.
| Candidate | Direction / typed relation | Stage and limit |
|---|---|---|
| disp-au-e-hrlc-reset | HRLC → Reset five-pillar model: expressly recommends adoption | Submitted advocacy; document dated 5 July 2024, submission155 p5. Exact receipt date not established. |
| disp-au-e-hrlc-wef-taxonomy | HRLC submission155 → WEF2023 harm taxonomy: expressly adopts framework | Proposal framing, §4.3 p9. No government-adoption edge. |
| disp-au-e-review-reset | Statutory review → Reset submission70: cites reasoning for overarching duty | Published updated reviewer recommendation, internally dated October2024/published4February2025; available text not assumed identical to initial delivery; §5.5 p53. Reuse existing lineage edge if equivalent. |
| disp-au-e-brief-awareness | Departmental briefing → HRLC/Reset public advocacy: records media coverage | Official awareness by 26 November 2024; FOI Document2 pp14–15. No predecision receipt inference. |
| disp-au-e-government-rec4 | Government → reviewrec4: supports | Published response, 14 April 2026; p4. Policy acceptance, not enactment. |
| disp-au-e-government-rec7 | Government → reviewrec7: does not support | Same response p5. Do not relabel as an HRLC-specific rejection. |
| disp-au-e-government-rec13 | Government → reviewrec13: supports in principle | Same response p6. No award, provider selection or payment. |
| disp-au-e-research-scope | Exposure draft → researcher eligibility: requires university employment | Proposed 205B. Comparative narrowing, with motive and drafting author unresolved. |
The strongest rival explanation is a government selecting from convergent international models and many contributors through its independent review, rather than executing a single privately directed package. The records sustain a real, attributed NGO-to-review path while also sustaining government choice and narrowing. Funding and commissioned research increase advocacy capacity; the records read here do not turn that capacity into a statutory approval right.
The next discriminating records would be the department's recommendation-to-clause drafting instructions, an attributed consultation response matrix, or the decision/reasons for university-only researcher eligibility and delegated complaint safeguards. Likely holders are the department's online-safety policy area and ministerial office; future explanatory materials or data-access rules could also resolve the scope. No outreach is authorised. Stop here for the whole-case forest assessment.
Reading and custody ledger
All access observations are from 9 September 2026. read below refers to the stated scope, never an entire report by implication. Page numbers in this note are one-based; PDF and printed numbers are distinguished where different.
| Local alias | Primary record and read scope | Access / custody |
|---|---|---|
| disp-au-s-hrlc155 | Linked original above; cover, recommendations p5, §4.3 p9, §§5–5.1.4 pp10–11 and accountability p17 | Read through PDF reader (18 pages; reader refs turn886view1, turn912view0/1). One ordinary GET timed out at 30s; no original retained or hash. |
| disp-au-s-government-response | Linked original above, cover and response definitions, duty pp3–6, complaints pp7–9, enforcement p11 | Read through PDF reader (16 pages; turn882view1, turn907view1/2, turn912view2). Publication date independently read on the department's response landing page. One GET timed out at 30s; no original or hash. |
| disp-au-s-foi25247 | Linked original above, Document2 pp10–15, Document5 pp32–39 | Read through PDF reader (41 pages; turn903view1/2, turn907view3). Specific release date not established. One GET timed out at 30s; no original or hash. Redacted portions were not reconstructed. |
| Existing statutory-review source | Official indexed original §5.5 printed53, including footnotes34–38; official landing page publication 4 February 2025 | Scoped primary text read; not a new full-PDF inspection. Existing ordinary PDF timeout route remained closed. Actual linked DOCX click returned Internal Error; no retry. |
| Existing exposure-draft source | Reused available reader; current-lane spot checks 25H, 26F–G, 205B–C | Read, not newly acquired. Existing ordinary PDF timeout route remained closed; no original-byte hash. |
| disp-au-s-announcement | Linked ministerial speech13Nov2024 and release14Nov2024, relevant duty passages | HTML reader inspected; no local original. |
| Existing Rights-First source | Linked original above, principles3 and5 at PDF12 and15 | Scoped PDF reader read; no local original acquired in this lane. |
| disp-au-s-consult-summary | Linked original above, PDF1–2 of3 | Scoped PDF reader read; not an attributed participant transcript. No original acquired. |
No ACNC, OPD403 or closed normal-GET exposure/review routes were retried. No canonical case, forest file, account, submission or public surface was changed. The only lane output is this note; the three fresh capture attempts yielded no retained originals.