Meta reported to Canberra on Thursday. It defends the design on Tuesday.

This issue is about one question: who answers for what a system is designed to do? I chose it because the same question is being put to one company in three rooms this week, and because in 115 days it gets put to you. Watch the answer change shape as it travels. It is a compliance count in Canberra, a damages figure in Santa Fe, a jury question in Oakland, and by December, a clause in your own privacy policy.

Meta's Thursday update to the eSafety Commissioner and Tuesday's Oakland opening are the same argument, run in opposite directions.

In Canberra, Meta's case is diligence. Mi3, 14 Aug 2026: 756,000 under-16 accounts removed to 30 June, AI detection reading contextual clues, re-registration blocking, a 16+ App Store rating, and an education campaign reaching about 1.3 million people.

The regulator's own data says the outcome is not yet compliance. Social Media Today, 13 Aug 2026: eSafety's three-month review found 81.5% of under-16s still accessing restricted platforms, down from 85.9%. The review put the blame primarily on the platforms' age-assurance implementation.

In Oakland, the argument inverts. There, 29 states allege the design choices behind those accounts are themselves the harm. AP via ClickOrlando, 12 Aug 2026.

Hold the question, because the next deadline that asks it is not Meta's. It is yours.

From 10 December 2026, entities covered by the Australian Privacy Principles must update their privacy policies. They must disclose the kinds of personal information used in substantially automated decisions that significantly affect people, and the kinds of decisions made. The obligation entered law in the Privacy and Other Legislation Amendment Act 2024 (Bird & Bird tracker, accessed 17 Aug 2026).

The OAIC consulted on transparency guidance from 18 May to 15 June, and formal guidance is expected around September. SafeAI-Aus legislative summary, accessed 17 Aug 2026. That leaves roughly ten weeks between guidance and commencement.

Dated background, mid-July: at the IAPP Asia Forum in Singapore, Personal Data Protection Commissioner Denise Wong put the region's operating theory in one line, that clarity in rules produces confidence in use. Singapore backs it with frameworks, testing methodologies and assurance tooling. IAPP, Jul 2026.

The same piece lands the New Zealand contrast: no standalone AI law, no dedicated regulator, and mostly voluntary guidance, leaving NZ organisations to define responsible governance themselves. For trans-Tasman operators, that means the Australian obligations are the binding ones, and the NZ side inherits whatever discipline the Australian side builds.

Santa Fe answered the design question twice, in two different currencies. March's jury verdict produced civil penalties for concealment and harm. August's order is remediation: money the court directs at addressing youth harms rather than punishing the conduct. Different instruments, same finding underneath. AP, 12 Aug 2026.

Oakland raises the stakes on that finding rather than repeating it. The federal case adds a claim Santa Fe never tried: that Meta collects children's data without parental consent, in breach of federal law. And it is not the ceiling. Eight further states, including Tennessee where a trial is already under way, sued in their own courts. AP, 12 Aug 2026.

Every one of these venues is testing design accountability, not content moderation. That is the thesis of this issue, and Oakland is where it either scales or stalls.

Dated background, 3 August: June AI launched with US$20 million in pre-seed funding led by Marc Benioff's Time Ventures, with backing from Michael Dell and Aaron Levie. Its product automates what forward-deployed engineers do by hand: getting enterprise AI systems working reliably. TechCrunch, 3 Aug 2026.

The signal is the category rather than the company. When investors fund tooling to fix deployment, deployment is the bottleneck, and the buyer-side answer is unchanged: build governance and integration capability inside the organisation before buying another licence.

Put the register on this week's agenda instead of December's.

My read on the question this issue opened: nobody in any of those three rooms gets to say "the system did it", and from December neither do you. Commission the automated-decision inventory now, before the OAIC's guidance lands. Arriving at that guidance with a draft register means ten weeks of refining rather than a scramble of discovery. If you want it built with you rather than by you, that is the engagement Throughline Advisory runs: throughlineadvisory.au.