Australia's Do Not Call Register, public holidays and brand-safe AI voice agents in 2026

Most Australian brands signing with a telemarketing or AI voice agent provider read the SLA. They don't read the Telecommunications (Telemarketing and Research Calls) Industry Standard 2017. Or the Do Not Call Register Act 2006. Or the schedule of penalty units. Did your last provider hand you any of those?

Then ACMA opens an investigation, and the conversation in the boardroom moves from "did our agency hit their KPIs" to "are we on the hook for $222,000 a day".

Three pieces of law shape every outbound call placed to an Australian number. Most overseas-built diallers don't engineer for any of them. Most Australian-built ones cut corners on the trickier bits. If you are about to sign with a provider, this is the guide you want on the desk.

Three Acts and one Standard govern outbound calls in Australia. The Do Not Call Register Act 2006 is the Commonwealth law that says you cannot call a number listed on the register. The Telecommunications (Telemarketing and Research Calls) Industry Standard 2017 sits underneath it and dictates the operational rules: who can be called when, what must be said, what must be terminated. The Spam Act 2003 covers any SMS or email that follows the call. The Australian Consumer Law catches deceptive conduct.

The penalty surface is large. ACMA can issue infringement notices up to $222,000 per day on which contraventions occurred. Court-ordered civil penalties run up to $2.22 million per day for body corporates. Each individual breach of the 2017 Standard tops out at $250,000 [donotcall.gov.au compliance]. The Commonwealth penalty unit is currently $330 and indexes again on 1 July 2026.

For the full legal walkthrough we covered each Act, calling-hour rule and state surveillance act in the Australian telemarketing law guide. This piece is about the brand-protection mechanics: what to ask any provider before you let them dial under your name, and which of those checks are actually engineered into Waboom AI for Australian campaigns today.

ACMA does not just send warning letters. It takes telemarketers to the Federal Court, names directors personally, and keeps a public quarterly report card on enforcement.

The most recent and most operator-relevant case is V Marketing Australia Pty Ltd. On 31 March 2025 the Federal Court ordered V Marketing to pay $1.5 million and named its sole director Michael Vazquez personally for $60,000 [ACMA case summary]. The breach: 1.1 million calls to numbers on the Do Not Call Register between March 2017 and September 2018, across two campaigns, one for solar firm Balaska Pty Ltd and one for V Marketing's own brand Your Choice Solar.

Other recent enforcement that buyers should know:

Across the 18 months to mid-2025, ACMA imposed more than $16 million in spam-related penalties. The V Marketing case is the operator hook because it set the directors-personally-on-the-hook precedent. If the agency you hire breaches the rules under your brief, the joint-and-several liability conversation comes for whoever signed the order.

Australian calling windows are evaluated at the recipient's local time, not the caller's. A Sydney dialler that hits 8pm AEST is calling Perth at 5pm WA: dead on the WA cut-off. Section 8(4) of the Industry Standard is explicit on this.

The federal calling-window rules for telemarketing (sales) calls under section 8(1):

Research calls (opinion polling, surveys) get slightly different windows under section 8(2): 9:00am to 8:30pm weekdays, 9:00am to 5:00pm Saturdays, and 9:00am to 5:00pm on Sundays. Research is the only telephone-marketing activity allowed on a Sunday.

Where most diallers fall over: time-zone-aware termination. Section 13(1)(a) says that if a caller learns mid-call that the recipient is away from their usual residential address, and the local time at their actual location is outside the permitted hours, the call must terminate immediately. A NSW mobile holidaying in Perth and answering at 5:30pm WA time is a breach. Your provider has to detect that and hang up.

Section 8(3) of the Industry Standard prohibits all telemarketing calls at any time on the seven national public holidays plus any substituted weekday. State-level public holidays do not automatically trigger the federal ban. Section 15 preserves concurrent state laws, and complaint volumes spike on holidays your list is targeted to.

Source: Fair Work Ombudsman 2026 public holidays.

Two traps in this list catch every overseas-built dialler. Anzac Day 2026 falls on a Saturday. The federal call-block applies to the actual day. ACT, NSW and WA also observe a substitute Monday on 27 April. Boxing Day 2026 also falls on a Saturday, with most states substituting the Monday. If your dialler only blocks the seven federal dates and ignores substitute days, calls placed on Monday 27 April or Monday 28 December are reputationally toxic and the relevant state law may apply.

State-only public holidays (Labour Day variations, King's Birthday, Western Australia Day, Picnic Day, Canberra Day, Melbourne Cup Day) are not federally call-blocked. They are jurisdiction-targeted reputation events. The next section unpacks them.

Federal law gets you halfway. Reputation gets you the rest of the way. State public holidays, AFL and NRL Grand Final weekends, State of Origin nights, Melbourne Cup Day and the Boxing Day Test are days when an outbound sales call is technically legal, sometimes, but commercially stupid every time. Most platforms do not block them. Waboom AI does.

Six dates that should be on every Australian outbound calendar:

Inside Waboom AI, federal public holidays are blocked automatically through the holidays table that backs every campaign. The key cultural and sporting blackout dates above have been seeded into the AU client calendar for 2026, including Melbourne Cup, AFL Grand Final Friday, State of Origin nights, NRL Grand Final and Boxing Day Test. Any client can add their own per-state events.

Under section 13(1)(b) of the Industry Standard, the moment a recipient asks you to stop or otherwise indicates they do not want the call to continue, the call must terminate immediately and that number must not be re-dialled by any campaign on that account. Most platforms detect this manually after the fact, which means the second campaign in the cycle calls the same number again. ACMA notices.

Inside Waboom AI, auto-detection runs against the call transcript on every completed call. The phrase library covers 27 opt-out triggers including "stop calling", "do not call", "remove me", "take me off your list" and "harassment". When any of those triggers fire, the recipient's number is added to the client's DNC list automatically and never rings out again on that account.

Why this matters for brand protection:

ACMA already regulates AI voice. Section 6 of the Standard defines a voice call to include "a call that involves a recorded or synthetic voice", and section 12 imposes a specific in-call rule for synthetic voices. You don't need to wait for new rules. The rules apply to your AI agent today.

The opening-line identification rule, section 9(2): every sales call must, as soon as practicable, disclose the caller's given name (unless the call is solely a recorded or synthetic voice), the employer's company or registered business name, the name of the entity that caused the call to be made, and the purpose of the call. A vague "I'm calling on behalf of a leading energy provider" does not meet the bar.

On request, section 9(4) requires immediate disclosure of contact details for the employer, the entity that caused the call, and the person responsible for handling complaints. Contact details under section 11 must include a registered business name, an Australian phone number that is staffed during business hours at the recipient's location, and a current address.

CLI rules under section 14: calling line identification must be enabled. The number transmitted must allow the recipient to call back and reach a working line. That number must remain operational for at least 30 days from the original call. Suppressed CLI is a breach.

The synthetic-voice mechanism rule, section 12: every recorded or synthetic-voice call must include a way during the call for the recipient to request the on-request disclosure information. Typically a "press 1 to speak to an operator" or equivalent path. AI voice agents that cannot handle that handover are non-compliant on contact.

Print this out. Read it back to your provider. Then ask for evidence on every line.

The right answer: every list, before every cycle. The Do Not Call Register lets you rely on a washed list for 30 days. Subscriptions tier from free (500 credits) to $142,271 for 100 million credits annually. Anything older than 30 days is unwashed.

The right answer: per recipient, per call, against section 8(1) and 8(4). If they say "we set the campaign to AEST and let the operator manage", they are pricing your compliance risk into their margin.

The right answer: yes, all seven national public holidays, plus the relevant substitute days for Anzac Day in ACT, NSW and WA, and the most-states substitute for Boxing Day. If they only know seven dates, they are missing two for 2026.

The right answer: yes, by editing a client-side calendar. Inside Waboom AI you set a date, country code, state code and time window, and the campaign engine respects it. Inside platforms that hard-code "AU equals federal holidays only", the answer is no.

The right answer involves auto-detection against the transcript, immediate addition to a per-client DNC list, and persistent suppression across every future campaign on the account. Anything that requires a human review queue is a leak.

The right answer involves a single auditable record per call (recording, transcript, AI analysis, agent name, timestamp, cost, validation flags) with a configurable retention period set per client. ACMA investigations request these records by date range.

The right answer: a CSV of every call in the relevant period, with recording links, transcripts, opt-out triggers, calling-window evaluations and DNCR wash certificates. Inside 24 hours. If the answer involves "we'll talk to our engineering team", you are buying a problem.

Brand protection is not a slide deck. It is a list of features that either exist in the product or do not. Here is what Waboom AI ships today for Australian campaigns.

Every claim above is verifiable in the portal. Every claim in section 8 is the bar to hold every other provider to. We covered the privacy-side companion rules for NZ and AU in building compliant AI voice agents for NZ and AU, and the calling-hour and DNC enforcement engine in why dumb voice platforms destroy your brand. The implementation playbook for outbound campaigns sits in how to implement AI in outbound sales calls.

No. The Spam Act 2003 explicitly carves voice calls out under section 5(3). Voice calls are governed by the Do Not Call Register Act 2006 and the Telecommunications (Telemarketing and Research Calls) Industry Standard 2017. The Spam Act applies if your campaign sends a follow-up SMS or email. We cover this in detail in the AU telemarketing law guide.

Indefinitely. The eight-year cap was removed by the Communications Legislation Amendment (Deregulation and Other Measures) Act 2019, so any number you wash today against the register stays valid until the number-holder removes it. Donotcall.gov.au covers the registration mechanics in full.

Australian law has no statutory must-disclose-AI rule for telemarketing voice calls. Section 12 of the Industry Standard requires synthetic-voice calls to include an in-call mechanism for the recipient to request more details, but it does not mandate the words "I am an AI". You should disclose anyway: deceptive conduct sits inside the Australian Consumer Law, and failing to disclose tanks completion rates in every audited test we have run.

Yes. Charities and charitable institutions are on the "designated telemarketing call" list in Schedule 1 of the DNCR Act 2006, which exempts them from the calling prohibition for numbers on the register. Government bodies, religious organisations, registered political parties, candidates, and educational institutions calling current or former students are also covered. Express consent from the account-holder also lifts the prohibition.

The DNCR Act 2006 and the Industry Standard apply to the person who caused the call to be made, which is the brand whose product is being marketed, not just the agency placing the calls. ACMA's V Marketing case named the company and its sole director personally. Brands hiring telemarketing or AI voice providers should require contractual indemnity, audit access to opt-out and DNC logs, and evidence of DNCR wash certificates per cycle. Without those, the legal exposure flows straight through to the brand on the front of the phone.