BSA filed the following comments with the Office of the Australian Information Commissioner in response to its consultation on developing a Children’s Online Privacy Code. BSA’s response urges OAIC to apply a risk-based approach and expressly exclude enterprise services from the Code. This would clearly distinguish consumer-facing services, which children are more likely to access, from enterprise services that are designed to support the business-to-business needs of companies.