- The actors: who runs the .au namespace
- What a .au registration actually gives you: a licence, not ownership
- Eligibility: Australian presence and the connection test
- How a registration happens through a registrar
- Disputes: the auDRP and what it takes to win a transfer
- Where the scheme bites: edge cases and ongoing obligations
- When a lawyer earns their keep
- The name in the registrant field
A .au domain name is the address your customers type to find you online, but it is not something you buy and own. When you register a name ending in .au, you enter a licensing system administered by .au Domain Administration (auDA), the not-for-profit body that acts as administrator and self-regulatory policy body for the .au country-code top-level domain. The system is designed so that every .au address represents a person or organisation with a genuine, validated connection to Australia, which is why a .com.au or .au address carries a level of local trust that global extensions do not.
This article explains how that system actually works: who runs it, what a licence really gives you, who is eligible for each namespace, how registrations are allocated, and how disputes over names are resolved. It also covers the traps that cost businesses money, from a web developer registering the domain in their own name to a lapsed renewal that lets someone else take your address.
The actors: who runs the .au namespace
A handful of distinct roles sit behind every .au registration:
- auDA: The administrator of the .au namespace. It makes the .au Domain Administration Rules: Licensing (the auDA Rules), which set the terms on which every .au licence is held, and it accredits the registrars who deal with the public.
- Registrars: Businesses accredited by auDA with direct access to the .au registry database. They process applications, renewals and transfers, and validate that applicants meet the eligibility rules. Many website builders and hosting companies you buy domains through are resellers operating under an accredited registrar.
- Registrants: The person or entity recorded as the holder of the licence in the registry data. The identity of the registrant matters more than almost anything else in this system, because the licence, renewal notices and dispute rights all attach to whoever is recorded.
- The dispute layer: Trade mark owners and other parties with competing rights can challenge a registration through the auDRP process or the courts, and the ACCC can act where a domain is used to mislead consumers.
You rarely deal with auDA directly. Your contract is a Licence Agreement with your registrar, but the auDA Rules form part of that agreement, and where the two conflict the auDA Rules prevail.
What a .au registration actually gives you: a licence, not ownership
Under the auDA Rules, a domain name licence is non-exclusive, non-transferable and revocable, and it does not create any proprietary interest in the domain name. auDA's rules preserve three principles explicitly: no proprietary rights in a domain name, first come first served, and no hierarchy of rights.
In practice that means:
- You hold a licence for a set period: Licences run for one to five years, renewable for the same range.
- Allocation is first come, first served: The first complete application received by the registry for an available name is the one accepted. There is no auction and no preference given to one type of applicant over another.
- A trade mark holder has no better entitlement at the point of allocation: The "no hierarchy of rights" principle means your trade mark does not automatically trump someone who registered the name first. Trade mark rights matter, but they are enforced through disputes after the fact, not through priority at registration.
- You can dispose of the licence, but not own the name: You may transfer the licence to an eligible third party, cancel it, or let it lapse by not renewing. A transfer is a novation: the old licence ends, a new Licence Agreement is entered with the transferee, and the transferee must satisfy the eligibility rules in their own right.
This is why renewal discipline matters. A lapsed licence can be restored within a limited window by paying a restoration fee, but once it is released the name becomes available to anyone who meets the eligibility criteria, and buying it back from whoever takes it is often expensive or impossible.
Eligibility: Australian presence and the connection test
Every .au registration, in every namespace, requires the registrant to meet the Australian Presence requirement. Registrars must validate this when a domain is created, renewed or transferred to a new registrant. You can satisfy the requirement with an Australian Business Number (ABN), an Australian Company Number (ACN), Australian citizenship or permanent residency, or one of the other categories in the rules. An applicant for an Australian trade mark can also rely on the application to establish presence, but only for a domain that is an exact match of the words in the trade mark.
On top of Australian presence, the commercial namespaces impose a connection test. For .com.au and .net.au, the applicant must be a commercial entity and the domain must be a match of its company, business, statutory or personal name, an acronym of that name, a match of an Australian trade mark, or a match or synonym of a good or service the business actually provides at the time of application. These rules, in force since April 2021, replaced the older wording that described the requirement as a "close and substantial connection" between the domain and the business. The practical question is the same: the domain must genuinely correspond to who you are or what you sell.
The direct .au namespace, which lets you register yourbusiness.au without a second-level label, launched on 24 March 2022. Existing holders of matching .au names registered before that date had a priority allocation window until 20 September 2022 to claim the exact-match .au direct name. That window has closed, and new registrations in .au direct now simply require Australian presence.
A related point: if you trade under a name that is not your own name or your company's name, you generally need to register it as a business name with ASIC. Carrying on a business under an unregistered business name is an offence under s 18 of the Business Names Registration Act 2011 (Cth), carrying a penalty of 30 penalty units. Registering the business name also helps you meet the "match" test for your domain, so the two steps reinforce each other.
How a registration happens through a registrar
Applying for a .au licence is a short process, but the details of the application are what the rules enforce:
- Choose an accredited registrar (or a reseller operating through one) and apply using the registrar's form. The application must include your legal name, contact details, evidence you meet the Australian presence and eligibility requirements, the domain name, the licence period and the licence fee.
- The registrar validates your identity and eligibility against the rules. Once it is satisfied, the licence is issued, but only if the domain is available, complies with the namespace's allocation criteria and the fee is paid.
- You get a three-day cooling-off period after entering the Licence Agreement, during which you can reconsider without penalty.
- Renew before the licence lapses: Registrars send reminders, but the obligation to renew in time sits with you, and auto-renewal is worth switching on for names you cannot afford to lose.
Two rules here catch businesses out. First, you may use an agent to apply for you, but the agent must ensure you, the principal, are recorded as the registrant. A web developer, marketing agency or staff member who registers the domain in their own name creates a serious problem: the licence legally belongs to them, and recovering it after a falling out can require negotiation or legal action rather than a simple transfer request. Second, you cannot apply through a proxy or privacy service that hides your identity as the registrant. The person or entity standing behind the name must be visible in the registry data.
Where businesses typically get held up:
- The domain is in the developer's name: Insist from day one that the application names your entity as registrant, even if the developer manages the technical settings.
- Eligibility evidence is not on hand: If your ABN is not yet issued or your business name is not registered, the application cannot be validated. Sort those out first.
- Renewal notices go to the wrong inbox: Keep the registrant contact email current and monitored, or the first notice you see may be the one telling you the name is gone.
- The site goes live before DNS is configured: Pointing the domain to your host, installing an SSL certificate and setting up email are part of going live, and a misconfigured DNS record can quietly break your email for weeks.
Disputes: the auDRP and what it takes to win a transfer
If someone registers a name that conflicts with your rights, or your own registration is challenged, the primary mechanism is the .au Dispute Resolution Policy (auDRP). The auDRP was adopted in 2001 to provide a cheaper, speedier alternative to litigation for disputes over .au domain licences, and every .au licence is subject to it.
A complaint succeeds only if the complainant proves all three elements:
- the domain is identical or confusingly similar to a name, trade mark or service mark in which the complainant has rights;
- the registrant has no rights or legitimate interests in the domain; and
- the domain was registered or is being used in bad faith.
The complainant bears the onus of proof on all three. Bad faith can be shown by evidence that the name was registered primarily to sell it to someone else for more than the registration costs, to block the trade mark owner from using the name, or to divert traffic for profit. If the complaint succeeds, the remedy is cancellation of the licence, or transfer to the complainant if the complainant is itself eligible to hold the name under the rules.
The process is administrative rather than judicial. Complaints go to an auDA-approved dispute resolution provider, with filing fees of around $2,000 for a single-member panel (one to five domains) and $4,500 for a three-member panel. A respondent has 20 days to file a response. Panel decisions are binding and there is no appeal, although a registrar will wait 10 business days before implementing a transfer or cancellation so that a party can start court proceedings if it wishes. Litigation remains an option at all times, and some disputes, particularly those turning on complex trade mark questions, are better suited to the courts than to the auDRP.
Trade marks are also relevant before any dispute arises. The auDRP's first limb requires you to have rights in a name, trade mark or service mark, and a registered trade mark is the strongest form of that. A registered mark also supports infringement and passing off claims that the auDRP cannot reach. IP Australia's IP First Response service walks rights holders through the options for disputing a domain name.
Where the scheme bites: edge cases and ongoing obligations
Several parts of the system create obligations that outlast the day you register:
- Loss of eligibility: If your ABN is cancelled or your entity changes, you may no longer satisfy the eligibility criteria, and auDA can suspend or cancel the licence. Keep the details in the registry accurate as your business structure evolves.
- Misleading or deceptive conduct: A domain chosen to trade off a competitor's reputation can breach s 18 of Schedule 2 to the Competition and Consumer Act 2010 (Cth), the Australian Consumer Law provision that prohibits conduct in trade or commerce that is misleading or deceptive or likely to mislead or deceive. This is why checking for confusingly similar existing brands matters before you commit to a name, not just after a complaint arrives.
- Website privacy obligations: Once the domain points at a live site that collects personal information, the Privacy Act 1988 (Cth) may apply. As a general rule, businesses with annual turnover above $3 million must comply with the Australian Privacy Principles, while small businesses are usually exempt unless they fall within specific carve-outs such as credit reporting or health services. Whatever your size, a published privacy policy is expected practice.
- Defensive registrations: Registering the obvious variants and misspellings of your name across .com.au and .au, and .com if you trade internationally, stops others from squatting on them. Weigh the modest annual cost against the cost of a dispute or lost traffic later.
- A domain is not a trade mark: The licence gives you the address, nothing more. Enforceable rights in the brand itself come from trade mark registration, so the two should be pursued together.
When a lawyer earns their keep
A lawyer's value in this system concentrates at a few specific points:
- Before you register: A clearance check of the trade mark register, the business names register and existing .au registrations tells you whether the name you want is safe to commit to, and which trade mark classes to file in. This is the cheapest moment to find a problem.
- When a dispute arrives: Whether you are the complainant or the respondent, an auDRP proceeding has strict steps and a 20-day response clock, and the three-part test is applied strictly. A practitioner can assess whether you have the rights and evidence to win, draft the complaint or response, and advise on whether the courts are the better forum.
- When someone else controls your domain: If an agency or contractor administers your domain or builds a site on it, a documented arrangement such as a domain name licence agreement can set out who controls what, and an IP assignment or service agreement can secure ownership of the site and credentials on exit.
- When you sell the business: Domain licences are transferred by novation to an eligible buyer, and the transfer should be sequenced with the broader IP assignments in the sale documents.
The name in the registrant field
The single decision that shapes your entire experience of this system is made in the first five minutes: the name recorded in the registrant field of the application. It determines who owns the licence, who receives renewal notices, who can transfer or cancel it, and who stands in the firing line if an auDRP complaint is filed. Combined with a clearance check before you apply, it is the difference between a domain that quietly works for your business for years and one that costs you a rebrand or a dispute to recover. A short consultation with a lawyer before you register, covering the clearance check, the registrant details and the eligibility evidence, is inexpensive next to either outcome, and it is the point where most of the value in this system is won.