How domain name protection actually works in Australia

Your domain name is the address your customers type to find you online, but in Australian law it is not property that you own. When you register a .au domain you are granted a licence to use it, under rules made by the body that administers Australia's country code top level domain. That distinction drives everything in this article: what your registration protects, what it does not, and what you can do when someone else registers a name that should be yours.

This article explains how domain name protection actually works in Australia. We look at what a registration gives you, who runs the system, the eligibility rules you must satisfy, the dispute process for .au names, the court remedies available, and the practical steps that reduce your exposure before trouble starts.

What a .au registration actually gives you

The starting point is the .au Domain Administration Rules: Licensing, made by .au Domain Administration Limited (auDA), the administrator of the .au namespace. The rules define a licence as a non-exclusive, non-transferable and revocable right to use the domain name system with a particular identifier, and they are explicit that a licence does not create a proprietary interest in the domain name. In auDA's words, a person does not legally "own" a domain name.

Three principles run through the rules:

• No Proprietary Rights: registration gives you a licence for a set period, not ownership. You can transfer the licence to an eligible third party, cancel it, or fail to renew it, but you cannot sell the name itself as property.
• First Come, First Served: the first person who applies for a licence and meets the eligibility criteria gets the name, subject to availability. No one can reserve a name ahead of time.
• No Hierarchy of Rights: holding a trade mark gives you no better entitlement to a name than anyone else. A trade mark owner who registered late cannot point to their mark to displace an earlier registrant under these rules.

These principles explain a common frustration: another business can lawfully hold a domain name that looks like yours, provided they registered first and remain eligible. What the licence does not do is give you a right to stop others using similar names. For that you need something extra, usually a trade mark or a reputation the law protects.

Who runs the .au system

A handful of actors sit behind every .au domain name:

• auDA: the self-regulatory policy body that administers the .au country code top level domain. It makes the licensing rules, accredits registrars and oversees the dispute policy.
• Registrars: businesses accredited by auDA that sell licences to the public. Your contract is with your registrar, and your registrar is the one required to implement any transfer or cancellation ordered in a dispute.
• Registrants: the person or entity that holds the licence, which will be you.
• IP Australia: the government agency that registers trade marks. It does not administer domains, but a registered trade mark is the main way to build enforceable rights in a name.
• Dispute resolution providers: independent organisations approved by auDA, such as the WIPO Arbitration and Mediation Centre, that run .au Dispute Resolution Policy (auDRP) proceedings.
• Courts: the Federal Court and other Australian courts can hear domain name disputes, including trade mark infringement and misleading conduct claims, and can order a domain transferred.

The eligibility rules you must satisfy

You cannot register just any .au name. Two requirements matter most for business owners.

First, the Australian Presence requirement. Anyone registering, renewing or transferring a .au licence must show a validated connection to Australia. For most businesses that means an Australian Business Number (ABN) or Australian Company Number (ACN); individuals can rely on citizenship or permanent residency. A pending or registered Australian trade mark can also establish presence, but only for a domain that exactly matches the words of the mark. Your registrar must validate this information at creation, renewal and transfer.

Second, for commercial namespaces like com.au and net.au, the domain must match your legal name, business name or Australian trade mark. Minor variations such as hyphens are permitted, but you cannot add extra words, and identifiers like "Pty Ltd" or the namespace itself are ignored. In practice, "forexamplepublishing.com.au" suits a business called Forexample Publishing, while "bestdeals.com.au" does not, unless the holder can show a close and substantial connection.

Since March 2022 there is also the .au direct namespace, so you can hold yourbusiness.au as well as yourbusiness.com.au. Existing holders of names in other .au namespaces were given a priority period to register the exact match in .au direct, which has now closed. If you registered late, the name may already be taken, which is one more reason to move early when you settle on a brand.

Eligibility is not a one-off check. If your company is deregistered, your business name is cancelled, or an individual registrant dies, you may cease to be eligible and the licence can be at risk. Keeping registrant details current is part of protecting the name.

Why the licence alone does not protect your brand

IP Australia is clear that a domain name is a registered internet address, not a trade mark and not a substitute for one. Registering yourbusiness.com.au gives you the address, but it does not stop a competitor registering yourbusiness.net.au, a common misspelling, or your name in another namespace. It also does not give you automatic trade mark rights in the words themselves.

That gap is what cybersquatters and domain prospectors exploit. The auDA rules even define Domain Name Monetisation as applying for a licence with the sole purpose of selling, leasing or holding it to generate revenue. A prospector registers names that established or planned businesses are likely to want, then offers to sell the licence back at a price far above the registration fee. Typosquatters register common misspellings of popular names so that mistyping customers land on their pages. Because of first come first served and no hierarchy of rights, these registrations are lawful until challenged, and the challenge is where protection actually happens.

When someone takes your name: the auDRP

The main mechanism for reclaiming a .au name is the .au Dispute Resolution Policy (auDRP). It has applied to .au licences issued or renewed since 1 August 2002, and it is incorporated into every registrant agreement, which means every registrant is bound to take part. auDA describes it as a cheaper, speedier alternative to litigation for disputes between a licence holder and a party with competing rights in the name.

A complaint succeeds if the complainant establishes three elements: the domain is identical or confusingly similar to a name, trade mark or service mark in which the complainant has rights; the registrant has no rights or legitimate interests in the domain; and the domain was registered or subsequently used in bad faith. The complainant bears the onus of proof. Note that the policy covers any "name" in which you have rights, which is wider than registered trade marks. Unregistered trading reputation can count, although a registered trade mark is the easiest right to prove.

The policy lists circumstances that evidence bad faith, including: registering the domain primarily to sell, rent or transfer it for more than your documented out-of-pocket costs; registering to prevent the owner of a name or mark from reflecting it in a corresponding domain; registering primarily to disrupt another person's business; and using the domain to attract internet users for commercial gain by creating a likelihood of confusion with the complainant's name or mark.

The process is administrative. The complainant files with an auDA-approved provider such as WIPO, paying a fee of AUD 2,000 for a single-member panel covering one to five domains, or AUD 4,500 for a three-member panel. The respondent has 20 days to file a response, and if none is filed the panel decides on the complaint alone. The panel can order the licence cancelled or transferred to the complainant, but a transfer happens only if the complainant is eligible to hold the name under the licensing rules. Decisions are binding with no appeal, and the registrar waits 10 business days before implementing a decision so that either party can start court proceedings if they wish.

The court route: trade marks and misleading conduct

The auDRP is not the only path, and it is not available for every dispute. Court action can deliver remedies the auDRP cannot, such as damages and urgent injunctions, and it can be the right choice where the auDRP's three elements cannot be made out.

The classic Australian authority is CSR Ltd v Resource Capital Australia Pty Ltd [2003] FCA 279. A company registered the domain "csrsugar.com" and a matching business name on the same day, with no intention of trading, so that it could sell the domain to CSR, the sugar group that owned the CSR trade marks. The Federal Court found misleading or deceptive conduct and trade mark infringement, and ordered the domain transferred to CSR. The decision followed the English cybersquatting case British Telecommunications plc v One in a Million Ltd.

The misleading or deceptive conduct prohibition relied on in that case now sits in s 18 of the Australian Consumer Law (Schedule 2 of the Competition and Consumer Act 2010 (Cth)), which provides that a person must not, in trade or commerce, engage in conduct that is misleading or deceptive or is likely to mislead or deceive. Trade mark infringement claims are brought under the Trade Marks Act 1995 (Cth), and passing off remains available to protect unregistered reputation.

This is where a registered trade mark earns its keep. A registered trade mark gives you exclusive rights in the mark for the goods and services it covers, lasts an initial term of 10 years and can be renewed indefinitely. IP Australia's application fees start at around $250, although the total cost depends on the number of classes, and registration takes at least seven months, so it should be filed well before you launch. IP Australia's free TM Checker tool lets you test whether a mark is available before you commit.

Practical steps to protect the name

The mechanics of the system point to a short list of protective steps:

• Register early: first come first served means the earliest eligible applicant wins. If your brand is chosen but not yet launched, register the domain before you announce it.
• Register the variants: take the common misspellings, the .com.au and .au versions, and any namespace that fits your eligibility. Each licence is cheap compared with a dispute.
• File the trade mark early: a registered trade mark is the strongest evidence of rights in an auDRP complaint and the basis for infringement action. File before launch so that the mark is on the register when you start trading.
• Keep eligibility current: renew your ABN, business name and company records, and make sure the registrant details on the licence are accurate, because validation happens at every renewal.
• Set renewal reminders: letting a licence lapse makes the name available to the first comer, including a prospector.

Where a lawyer helps

Domain protection decisions are often made quickly, at the moment you pick a name or discover someone else has taken it, and the costs of getting them wrong are measured in lost customers and legal fees. An intellectual property lawyer can help at three points.

Before you register, a lawyer can run clearance checks across the trade mark register, the business names register and the domain namespaces, and flag conflicts before you build a brand around a name you cannot protect. When a squatter holds your name, a lawyer can assess whether the auDRP or the courts is the better route, gather the evidence of your rights and the registrant's bad faith, and draft the complaint or response within the 20 day window. And when a dispute is heading to court, a lawyer can run the trade mark infringement or misleading conduct claim, including urgent injunctions to stop misuse while the matter proceeds.

The race and the rights behind your name

Two things decide most domain outcomes: how early you registered, and what rights you hold in the name. First come first served means the clock starts the moment you choose a brand, not the moment you launch. But the licence itself protects almost nothing, and every dispute mechanism, from the auDRP to the Federal Court, rewards the party who can point to a trade mark or a trading reputation in the name. Registering the domain today and filing the trade mark before you launch puts you in the position that wins both the race and the dispute. A consultation with an IP lawyer before you commit to a name costs far less than fighting over it later.