auDA Domain Protection Policies — Perth IT Care

A Perth trades business called us after getting a renewal notice for their domain. Routine enough — except the registrant email on the account belonged to a web developer who'd left three years earlier, the inbox no longer existed, and the domain was expiring in two weeks. Nobody had looked at it since the day the website went live. If that renewal had lapsed, they'd have lost their email, their website, and potentially handed their online identity to whoever registered the domain next. Understanding auDA domain protection policies isn't optional admin — it's the foundation everything else sits on.

What auDA Actually Is and Why It Has Teeth

auDA (Australian Domain Administration) is the policy authority and industry self-regulatory body for the .au domain namespace. They set the rules for who can hold a .au domain, what information must be accurate, and what happens when it isn't. Unlike a general domain registrar, auDA has real enforcement power — they can cancel a domain registration if the registrant details don't hold up.

This isn't a theoretical risk. auDA runs periodic compliance reviews and responds to complaints. If your registrant details are wrong — wrong ABN, outdated trading name, or an email address that bounces — your domain can be cancelled, not just flagged.

auDA Eligibility Rules: Who Can Actually Hold a .com.au

A .com.au domain must be registered to an Australian entity with a verifiable connection to that name. The registrant needs to be a real Australian business or organisation — not an individual acting in a personal capacity, and absolutely not a third-party developer who set it up as a favour.

The domain name itself must closely and substantially match:

• Your registered business name or trading name
• Your company name (ACN)
• Your Australian Business Number (ABN) entity name
• A registered trade mark you hold in Australia

If your domain is registered to a developer's personal ABN, a defunct company, or a business name that no longer exists on the ASIC register, you're in breach of auDA's eligibility rules. The domain isn't truly yours until the registrant details reflect your actual entity.

What "Accurate Registrant Details" Actually Means Under auDA Domain Protection Policies

auDA requires that the contact details on your domain registration are current and reachable. That means:

• The registrant email must be a live inbox someone actually checks
• The ABN or ACN must be active and match the registered name
• The registrant name must match the entity as it appears on the ABN/ACN register
• The postal address must be current

If you can't receive email at the registrant address, you can't receive renewal notices, compliance requests, or transfer authorisation codes. That's how domains lapse quietly — not through negligence, but through a contact detail that nobody updated after a staff change or a rebrand.

The .au Direct Rollout: If You Missed the Priority Window, Read This

In 2022, auDA opened up the shorter .au direct namespace — so a business that held yourbusiness.com.au could also claim yourbusiness.au. There was a priority allocation period that gave existing .com.au holders first right to claim the matching .au direct name before it opened to the general public.

That priority window closed. If you missed it, the .au version of your domain may already be registered by someone else — or it may still be available. Either way, you need to know. A competitor, a domain squatter, or just a business with a similar name could now hold yourbusiness.au even if you've had yourbusiness.com.au for a decade.

Check the .au direct availability through auDA's registrar network. If it's still available, register it now and point it to the same destination as your .com.au. If it's gone, you'll want to know who holds it.

Domain Locking: The One Setting Most Perth Businesses Haven't Turned On

Most domain registrars offer a registrar lock — sometimes called a transfer lock or domain lock. When it's enabled, your domain can't be transferred to another registrar without you explicitly unlocking it first. This blocks a common attack where someone gains access to your registrar account and transfers your domain away before you notice.

Log into your registrar account and confirm the lock is on. If you're not sure who your registrar is, a WHOIS lookup on your domain name will tell you. If you can't log in because the credentials are with a developer who's long gone, that's the more urgent problem to fix first.

WHOIS Privacy on .au Domains

For .com.au domains, auDA policy requires that accurate registrant details are available in the WHOIS database. Full WHOIS privacy masking — the kind that replaces your details entirely with a proxy service — isn't permitted for .au domains the way it is for .com domains.

What is available is registrar-level display options that limit how much detail appears publicly while still satisfying auDA's compliance requirements. Your registrar can walk you through what's available. The point is: don't assume your .au WHOIS details are hidden, because they probably aren't.

What Happens When a Domain Lapses or Gets Cancelled

If a .com.au domain expires and isn't renewed during the grace period, it enters a redemption phase before being released back to the open market. During the redemption phase, only the original registrant can reclaim it — at a significantly higher cost. After that window closes, it's gone.

The downstream consequences are worth spelling out:

• Email stops working. Every address at your domain — info@yourbusiness.com.au, accounts@yourbusiness.com.au — stops receiving mail immediately.
• Your website goes down. DNS resolution fails, the site becomes unreachable.
• Someone else can register it. If they do, they can set up email that looks like it comes from your business and intercept anything sent to your old addresses.
• SEO history is lost. Years of backlinks, search rankings, and indexed pages can be wiped out or inherited by whoever grabs the domain next.

The registrar sends renewal notices to the registrant email. If that email address doesn't exist, the notices go nowhere, and the domain expires silently. That's not a hypothetical — it's exactly what nearly happened to the trades business at the start of this post.

How to Actually Protect Your .au Domain

Here's a practical checklist. None of this takes more than an afternoon, and it's worth doing once properly rather than scrambling when something breaks.

1. Confirm you're the registrant. Log into your registrar and check the registrant name, email, and ABN. If you can't log in, start a transfer to a registrar account you control.
2. Use a business email address as the registrant contact. Not a personal Gmail, not a developer's address. Something like admin@yourbusiness.com.au or a distribution list that more than one person can access.
3. Set renewals to auto-renew. Manual renewals rely on someone seeing the email and acting on it. Auto-renew removes the single point of failure.
4. Enable domain lock. Turn on the registrar lock if it isn't already on.
5. Check the .au direct version of your domain. See whether it's available or already registered, and decide whether you need it.
6. Verify your ABN is active and matches. Use the ABN Lookup tool at abr.business.gov.au to confirm the entity name registered against your domain still matches your current ABN details.
7. Document it. Write down who the registrar is, what the login credentials are, and where they're stored. Put it somewhere your business can access if something happens to you.

When to Get Help With Domain Management

If you're not sure who controls your domain, or if a previous developer or IT person set everything up and you've never actually logged into the registrar, it's worth getting that sorted before something forces the issue. Domain transfers can take time, and if the registrant email is unreachable, the process gets considerably more complicated.

We help Perth businesses get their domains back under their own control, verify registrant details against auDA requirements, and set up proper renewal processes so nothing lapses without warning. Give us a call if you want someone to look it over — it's a straightforward fix when you catch it early, and a much bigger problem when you don't.