Are Australian Consumer Law guarantees mandatory in a software EULA?

Yes. The consumer guarantees under the Australian Consumer Law (ACL), set out in Schedule 2 to the Competition and Consumer Act 2010 (Cth), cannot be excluded, restricted, or modified by contract where the software is supplied to a consumer as defined in s3 of the ACL. The ACL was amended in 2021 to expressly provide that digital products — including software, apps, and digital services — are subject to the same consumer guarantees as physical goods. Under s54 of the ACL, software must be of acceptable quality (safe, durable, acceptable in appearance and finish, free from defects, and fit for purpose). Under s55, it must be fit for any particular purpose that the consumer made known to the supplier before purchase. If there is a major failure — meaning the software has a problem that would have prevented purchase if the consumer had known about it, or it is substantially unfit for purpose and cannot easily be fixed — the consumer is entitled to choose a refund for the unused portion or compensation. A EULA that purports to exclude these rights is void to the extent of the exclusion under s64 of the ACL.

What privacy obligations apply to software developers collecting Australian user data?

Software developers who collect personal information from Australian users must comply with the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs). The Privacy Act applies to organisations with an annual turnover exceeding AUD $3 million, as well as smaller businesses in certain circumstances (such as health service providers or businesses that trade in personal information). Under APP 1, organisations must have a clearly expressed and up-to-date Privacy Policy. Under APP 3, personal information may only be collected for a lawful purpose that is directly related to the organisation's functions. APP 6 restricts use and disclosure of personal information to the purpose for which it was collected, unless an exception applies. APP 11 requires reasonable security measures to protect personal information from misuse, interference, loss, and unauthorised access. Developers should also note that the Privacy and Other Legislation Amendment Act 2024 introduced significant reforms including substantially increased civil penalties — up to the greater of AUD $50 million, three times the benefit obtained, or 30% of adjusted turnover — for serious or repeated privacy breaches, reflecting the government's stronger enforcement stance on data privacy.

Can a software developer lawfully prevent reverse engineering under Australian law?

A EULA clause prohibiting reverse engineering is generally enforceable in Australia, but it is subject to an important statutory limitation. Section 47D of the Copyright Act 1968 (Cth) provides that it is not an infringement of copyright to reproduce or adapt a computer program if: the reproduction or adaptation is made by or on behalf of the owner or licensee of a lawfully obtained copy of the program; the purpose is to obtain information necessary to achieve interoperability of an independently created computer program with the program or any other program; and the information necessary to achieve the interoperability has not previously been made available to the person. This statutory right cannot be overridden by contract under s47H of the Copyright Act 1968 (Cth). A EULA may therefore lawfully prohibit reverse engineering for most purposes (such as to create a competing product or to understand the software's source code for commercial advantage), but cannot prevent reverse engineering conducted purely to achieve interoperability. Software developers should be aware of this limitation and should not attempt to contractually exclude s47D, as such a provision would be void.

How does a subscription EULA work — what happens if a user stops paying?

A subscription-based EULA grants the end user a licence to use the software only for the period covered by a paid subscription. If the end user stops paying the subscription fee (whether by cancelling, having a payment fail, or otherwise), the licence automatically expires at the end of the last paid period and the end user loses the right to use the software. The EULA should clearly specify: the billing cycle (monthly or annual), the automatic renewal mechanism, how many days' notice is required to cancel before the next renewal, the grace period (if any) after a failed payment before access is suspended, and the process for reactivating the licence. Under the Australian Consumer Law, the developer should ensure that subscription terms are prominently disclosed before purchase — failure to adequately disclose automatic renewal terms may expose the developer to claims of misleading or deceptive conduct under s18 of the ACL or unconscionable conduct under s21 of the ACL. The Australian Competition and Consumer Commission (ACCC) has actively targeted subscription trap practices and unclear cancellation terms in recent enforcement actions.

Does a EULA need to comply with the Spam Act 2003 (Cth) for marketing communications?

Yes, if the software developer intends to send commercial electronic messages to end users — such as promotional emails, in-app marketing, or product update communications — those communications must comply with the Spam Act 2003 (Cth). Under the Spam Act, commercial electronic messages must be sent only to recipients who have given express or inferred consent, must clearly identify the sender, and must include a functional unsubscribe mechanism that is honoured within five business days. Consent obtained through a EULA or registration process may constitute express consent provided the consent provision is clear, specific, and not bundled with unrelated consents. A blanket tick-box agreeing to all terms of a EULA may not constitute valid consent for marketing communications if the consent to receive marketing is not separately and clearly disclosed. The Australian Communications and Media Authority (ACMA) enforces the Spam Act and can impose significant civil penalties for breaches. Software developers should review the ACMA's guidance and, where in doubt, implement a double opt-in mechanism for marketing communications.

End User Licence Agreement — EULA (Australia) — Australia

Protect your software or application with a professionally drafted Australian End User Licence Agreement (EULA) that complies with the Copyright Act 1968 (Cth), Privacy Act 1988 (Cth), and the Australian Consumer Law (ACL). Covers perpetual, subscription, freemium, and trial licence models, permitted use and installation limits, platform restrictions, fee and billing terms, mandatory ACL consumer guarantees for digital products, data collection and Australian Privacy Principles (APP) compliance, intellectual property ownership, updates and support, limitation of liability, and termination provisions. Suitable for desktop software, mobile apps, SaaS products, and other digital applications licensed to Australian end users.

What Is a End User Licence Agreement — EULA (Australia)?

An End User Licence Agreement (EULA) is a legally binding contract between the developer or publisher of software and the individual or business (the end user) who installs, downloads, or uses that software. The EULA grants the end user a limited permission to use the software while the developer retains full ownership of all intellectual property rights in it. Unlike a sale of goods, a EULA does not transfer ownership of the software — the end user acquires only the specific rights expressly granted, and remains bound by all use restrictions set out in the agreement.

In Australia, software is protected by copyright under the Copyright Act 1968 (Cth). A computer program is a literary work and copyright arises automatically upon creation without any requirement for registration. The developer's exclusive rights under s31 of the Copyright Act include the right to reproduce, publish, communicate, and adapt the software. Without a EULA, end users would have no legal right to use the software other than what is implied by the act of purchasing or downloading it, and the boundaries of permitted use would be unclear.

Australian EULAs must also comply with a body of consumer protection law that does not exist in the same form in many other jurisdictions. The Australian Consumer Law (ACL), set out in Schedule 2 to the Competition and Consumer Act 2010 (Cth), provides mandatory consumer guarantees for digital products that cannot be excluded by contract. Software acquired by a consumer must be of acceptable quality, fit for purpose, and match any description or sample provided. A EULA cannot contract out of these guarantees — any clause purporting to exclude ACL rights is void.

Data privacy is another critical compliance layer for Australian software developers. The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) impose obligations on how personal information collected through software is handled, stored, and disclosed. A EULA should cross-reference the developer's Privacy Policy and summarise what data is collected and how it is used.

When Do You Need a End User Licence Agreement — EULA (Australia)?

An End User Licence Agreement is needed by any business or individual that develops and distributes software, applications, or other digital products — regardless of whether the software is sold commercially or offered for free. The EULA is the primary mechanism by which the developer retains legal control over how the software is used and protects its intellectual property.

Commercial software publishers distributing desktop, server, or enterprise software need a EULA to define permitted use, restrict the number of installations, prohibit reverse engineering, and limit the publisher's liability. Mobile app developers distributing iOS or Android applications through app stores require a EULA to govern the relationship with each download user, even where the app is free to download. SaaS (Software as a Service) providers delivering cloud-based business applications need a EULA combined with terms of service to govern subscriptions, data handling, service availability, and cancellation rights.

Developers of gaming software, creative tools, productivity applications, and professional software all rely on EULAs to protect their code from being copied, redistributed, or reverse engineered. Open source developers may use an open source licence instead of a commercial EULA, but those offering commercial products on top of open source foundations will generally need a EULA for the commercial components.

The Australian market has specific requirements that make an Australian-compliant EULA essential for any software offered to Australian consumers. The mandatory consumer guarantees under the ACL apply to digital products and cannot be excluded. The Privacy Act 1988 (Cth) imposes obligations specific to Australian personal information handling. The Spam Act 2003 (Cth) governs any commercial electronic communications sent to end users. Without a properly drafted Australian EULA, developers may unknowingly expose themselves to regulatory liability and consumer claims that are not covered by generic international EULAs.

What to Include in Your End User Licence Agreement — EULA (Australia)

A well-drafted Australian EULA must address several key elements to protect the developer and provide clarity to end users.

Licence grant and scope: The EULA must clearly state what rights are granted — the number of permitted installations or users, the platforms on which the software may be used, and the purposes for which it may be used. The licence should be described as non-exclusive and non-transferable to prevent the end user from sharing or selling access.

Licence model: The EULA should clearly identify whether the licence is perpetual (one-off purchase), subscription-based (renewed periodically), freemium (free basic with paid upgrades), or a time-limited trial. Subscription terms should include billing cycle, automatic renewal, and cancellation notice requirements.

Restrictions on use: The EULA must set out what the end user is not permitted to do, including copying, modifying, reverse engineering (subject to s47D of the Copyright Act 1968), sublicencing, and reselling the software.

Australian Consumer Law compliance: The EULA must acknowledge the consumer guarantees under the ACL that cannot be excluded, and provide contact details for consumer guarantee claims. Any limitation of liability clause must carve out ACL rights.

Data privacy: The EULA must disclose what personal information the software collects, the purpose of collection, and reference the developer's Privacy Policy in compliance with APP 1 of the Privacy Act 1988 (Cth). If user data is shared with third-party service providers, this should be disclosed.

Intellectual property ownership: The EULA should make clear that the developer retains all IP rights in the software and that the end user acquires no ownership interest.

Termination: The EULA should specify when the developer may terminate the licence (including for breach, non-payment, or insolvency), what notice is required, and what the end user must do after termination (such as deleting all copies).

Governing law: Australian courts will apply the law of the nominated Australian state or territory. Identifying the governing law provides certainty in the event of a dispute.

What Is a End User Licence Agreement — EULA (Australia)?

When Do You Need a End User Licence Agreement — EULA (Australia)?

What to Include in Your End User Licence Agreement — EULA (Australia)

Frequently Asked Questions

Related Documents

IP Licence Agreement (Australia)

Software Licence Agreement (Australia)

Non-Disclosure Agreement (NDA) (Australia)

Privacy Policy (Australia)